Privacy Policy

This policy describes how EventFire collects, uses, and protects information about you when you use our platform.

Last updated: June 2026

1. Information We Collect
2. How We Use Your Information
3. Third-Party Services
4. Data Retention
5. Security
6. Children's Privacy
7. Your Rights
8. Changes to This Policy
9. Contact

1. Information We Collect

We collect only the information necessary to operate the EventFire platform:

1.1 Account Information

When you create an account, we collect your name, email address, and password (stored as a secure hash). If you enable two-factor authentication, we store a TOTP secret used solely to verify your identity at login.

1.2 Event & Registration Information

When you register for or create an event, we collect information you provide including event details, team names, and registration selections (ticket types, add-ons).

1.3 Payment Information

We collect the information necessary to process your registration payment. Payment card data is handled entirely by our payment processor (PayPal) and is never stored on EventFire servers. We retain a record of the transaction amount, date, and PayPal transaction ID.

1.4 Event Check-In & NFC Data

When you check in to an event using an NFC wristband, we associate your wristband's NFC tag identifier with your registration for that event. This association exists only within the scope of the event and is used solely to link match activity to your player profile.

1.5 Usage Information

We do not use analytics tracking software, advertising networks, or session recording tools. Standard server logs (IP address, request timestamps) are retained for security and troubleshooting purposes only.

2. How We Use Your Information

We use the information we collect exclusively to operate the platform:

Creating and managing your account
Processing event registrations and payments
Sending transactional emails (registration confirmations, payment receipts, event updates)
Administering event check-in and match activity
Responding to support requests
Maintaining platform security and preventing fraud

We do not use your information for advertising, profiling, or any purpose beyond operating the platform as described above. We do not sell your personal information to any third party.

3. Third-Party Services

EventFire uses the following third-party services to operate the platform. Each receives only the minimum information required to perform its function:

3.1 Amazon Web Services Cognito (Authentication)

Your email address and hashed password are stored in AWS Cognito, which manages secure authentication and session tokens. AWS does not use this information for any purpose other than authentication. See aws.amazon.com/privacy.

3.2 PayPal (Payment Processing)

Registration payments are processed by PayPal. When you complete a payment, you interact directly with PayPal's checkout interface. EventFire receives a transaction confirmation and amount but never receives or stores your card details. See paypal.com/privacy.

3.3 Resend (Transactional Email)

Transactional emails (registration confirmations, receipts) are delivered via Resend. Your email address is transmitted to Resend solely for the purpose of delivering these messages. See resend.com/legal/privacy-policy.

3.4 Amazon Web Services S3 & CloudFront (Media Storage)

Event cover images uploaded by organizers are stored in AWS S3 and served via CloudFront. No personal user data is stored in S3.

3.5 Nominatim / OpenStreetMap (Geocoding)

When searching for nearby events or entering an event location, the ZIP code you provide is sent to Nominatim (operated by OpenStreetMap) to convert it to map coordinates. Only the ZIP code is transmitted — no name, email, or account information is included. See nominatim.org/privacy.html.

3.6 QR Server (Check-In QR Code Generation)

Registration confirmation emails include a QR code generated via api.qrserver.com. The QR code encodes your check-in URL, which contains your event ID and registration ID. This information is transmitted to QR Server solely to produce the QR image included in your receipt. No name, email address, or payment information is included. See goqr.me/privacy.html.

EventFire does not integrate with advertising networks or data brokers, and does not sell your personal information to any third party.

4. Data Retention

We retain your account information for as long as your account is active. If you request account deletion, we will delete your personal information within 30 days, except where retention is required by law (for example, financial transaction records).

Event and match records may be retained in anonymized or aggregated form after account deletion for platform integrity purposes.

5. Security

We implement reasonable technical and organizational measures to protect your information, including encrypted connections (HTTPS), hashed password storage, and access controls limiting who can view personal data. No system is perfectly secure; we encourage you to use a strong, unique password and to enable two-factor authentication on your account.

6. Children's Privacy

EventFire is intended for users 18 years of age and older, consistent with our Terms of Service. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

7. Your Rights

You have the right to:

Access — request a copy of the personal information we hold about you
Correction — request correction of inaccurate information
Deletion — request deletion of your account and associated personal data
Portability — request your data in a structured, machine-readable format

To exercise any of these rights, contact us at eventfire.support@gmail.com. We will respond within 30 days.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email or by a notice on the platform prior to the change taking effect. Your continued use of EventFire after notice of changes constitutes acceptance of the updated policy.

9. Contact

Questions or concerns about this Privacy Policy may be directed to:

EventFire Support
eventfire.support@gmail.com