Privacy Policy

Welcome to Ranks Arena. This Privacy Policy describes how we collect, use and protect your information when using our sports ranking platform. Ranks Arena is committed to the Brazilian General Data Protection Law (LGPD — Law 13,709/2018). Personal data is processed based on the execution of the platform's usage contract, legitimate interest in service improvement, and compliance with legal obligations. By creating an account, you agree to the practices described here.

• Registration data: name, email, password (encrypted) and account type.
• Profile data: arena or athlete name, photo, biography, sports and profile URL. For arenas: contact phone, geographic location and opening hours.
• Activity data: tournament results, scores and rankings.
• Technical data: IP, browser type and anonymous usage data.
• Payment data: processed by Stripe, including transaction history and active plan. Card data is stored exclusively by Stripe and never by Ranks Arena.
• Referee sessions: when accessing a referee link, an anonymous session is automatically created via Firebase to validate scoring permissions. This session contains no personally identifiable data.
• Cookies and local storage: we use session cookies and local storage (localStorage) strictly necessary to maintain your authentication and interface preferences. We do not use third-party tracking cookies for advertising.

• Provide and improve the Ranks Arena platform.
• Display public rankings, profiles and tournament results.
• Ensure security and prevent misuse.
• Comply with legal obligations.

Name, rankings, positions, tournament results, athlete profile (photo, biography, sports) and public arena data (name, location, opening hours) are visible without login. Do not enter sensitive information in public profile fields.

We do not sell your data. We share only with service providers (Firebase/Google for authentication and database; Stripe for payment processing) under a confidentiality agreement, or when required by law.

We use encryption in transit (HTTPS) and at rest. No system is 100% secure, but we adopt best practices to protect your data.

• Access: request a copy of your data.
• Correction: update incorrect information.
• Deletion: request removal of your account and data.
• Portability: request the transfer of your data in a machine-readable format to another controller, when technically feasible (LGPD Art. 18, V).

To exercise these rights:

This platform does not formally appoint a Data Protection Officer (DPO), as it operates as a small business under LGPD Art. 41, §3. Responses within 15 business days.

Personal data is retained while the account is active. After account deletion, data is removed within 90 days, unless retention is required by law.

privacidade@ranksarena.com.br

ranksarena.com.br