Privacy Policy

Competition Operations LLC, referred to in this policy as "CompOps," "we," "us," or "our," operates the GotNext.gg website and platform (the "Service"), including products offered under the GotNext brand. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By using GotNext.gg, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

Account Information

When you create an account, we collect:

• Email address
• Username
• Password (stored only in hashed form, never as plain text)

Profile Information

You may optionally provide:

• Bio and location
• Profile avatar image
• Gaming platform usernames (Xbox gamertag, Steam, PlayStation Network, Twitch, YouTube, Twitter)

Competitive Data

When you participate in tournaments and matches, we collect:

• Match history, results, and scores
• Tournament registrations and placements
• Team memberships and rosters
• Dispute evidence (images, videos, or other files you upload)

Discord Data

If you link your Discord account or interact with the GotNext Bot, we collect:

• Discord user ID and username
• Discord account linking timestamp
• Guild (server) metadata for Tournament Organizers who link their servers (guild ID, name, icon)

Billing Information

When your organization subscribes to a paid tier, we collect and store the following billing information:

• Organization name and billing email address
• Stripe customer ID, subscription ID, subscription status, billing period (monthly or annual), current period end date, and cancellation state
• Tier and plan history (which tier your org is on, when it changed, and any admin-granted overrides)

We do not store payment card numbers, bank account details, or other sensitive payment instruments. That information is collected and held by Stripe, our payment processor, and is accessible to you through the Stripe billing portal we link from your organization's billing page. Stripe may also collect and process a billing address, tax identification information, and similar details required to process payments and comply with tax laws; we do not receive or store those details ourselves.

Automatically Collected Information

When you access our Service, we automatically collect:

• IP address
• Browser type and User-Agent string
• Login timestamps
• Pages visited and features used
• Device information

2. How We Use Your Information

We use the information we collect to:

• Create and manage your account
• Facilitate competitive tournaments and matches
• Process tournament registrations and match results
• Verify your identity through Discord integration
• Send transactional emails (password resets, match notifications)
• Send Discord DMs for match notifications and account verification
• Process subscription payments and manage organization billing through our payment processor, Stripe
• Send billing-related communications, including receipts, invoices, renewal notifications, and payment failure notices (these are sent by Stripe on our behalf, using your Stripe-associated email address)
• Improve and optimize our Service
• Detect and prevent fraud, abuse, and security incidents
• Enforce our Terms of Service
• Respond to your inquiries and support requests

3. Discord Bot Data

The GotNext Bot operates in Discord servers where it has been invited by a server administrator. This section describes how the Bot handles data.

What the Bot Accesses

When the Bot is present in a Discord server, it can access guild membership information, user IDs, and usernames of members in that server. This access is limited to what Discord's API provides to bots with the granted permissions.

What the Bot Stores

• Linked accounts: Discord user ID and username, linked to your GotNext account
• Organizer server data: Guild ID, name, and icon URL for servers linked by Tournament Organizers
• Voice channel records: Temporary records of auto-created voice channels (deleted when matches complete)

Direct Messages

The Bot may send DMs for account verification and match-ready notifications. You can prevent Bot DMs by disabling direct messages from server members in your Discord privacy settings.

Voice Channels

The Bot creates temporary voice channels for tournament matches. No audio is recorded. Voice channels are automatically deleted when the associated match completes.

Slash Command Usage

Slash command interactions are processed in real-time and are not logged beyond standard server operation logs.

4. Game Account Integrations

GotNext.gg integrates with publisher APIs to verify in-game identities and ingest match data for competition. Linking a game account is voluntary; you can play in the Platform without linking, but rank verification, automated lobby codes, and automatic match-result ingestion require it. This section describes how we handle data from each publisher.

Riot Games (League of Legends, Valorant)

When you link a Riot account via Riot Sign On (RSO), Riot returns a stable account identifier (PUUID) and your current Riot ID (game name + tagline) and region. We use this identifier to:

• Verify ownership of the Riot ID you list on your profile, so rosters and rank claims are trustworthy
• Read your current rank tier in the game(s) your team competes in, to gate tier-aware tournament registration
• Generate tournament lobby codes for matches scheduled on the Platform and ingest the match result when the game finishes

We do not read your friends list, your direct messages, your store / purchase history, or your personal billing information. We do not write to your account other than creating tournament lobbies you opt into. We do not share Riot data with analytics, advertising, or any third party beyond what is necessary to operate the match (e.g. the opponent team sees the rendered match result, the league admin sees the score).

Other publishers

For games without a verified-account API (Overwatch via Blizzard, Smash via Slippi, Rocket League, etc.), accounts on your profile are self-reported. We don't make API calls; we just store the handle you provided so opponents and admins can match it to in-game identity. You can edit or remove these at any time from your profile settings.

Unlinking and Revocation

You can unlink any game account from your profile settings at any time. Unlinking immediately deletes the stored identifier (PUUID for Riot), revokes the OAuth token with the publisher, and stops further API calls on your behalf. Match history rendered before unlinking remains visible in the historical record but is no longer refreshed.

Account Deletion

Deleting your GotNext.gg account cascades to all linked game accounts. We revoke OAuth tokens, delete stored identifiers, and stop all API access keyed to you. Historical match data associated with your team (W/L records, scores) is preserved in anonymized form to keep team standings consistent for opponents who played you.

5. Information Sharing and Third Parties

We share your information with the following third-party services:

Service Providers

Public Information

The following information may be publicly visible:

• Username and avatar
• Match history and statistics
• Tournament participation and results
• Team memberships

Legal Requirements

We may disclose your information if required by law or in response to valid legal requests by public authorities.

6. Cookies and Tracking

We use the following types of cookies and similar technologies:

Essential Cookies

• Session authentication (HTTP-only, secure)
• Security tokens

Preference Cookies

• Sidebar state
• Platform mode preference
• Design theme preference

Analytics Cookies

• PostHog analytics (respects browser Do Not Track settings)
• Google Analytics (traffic analysis, user behavior, and site performance)

Advertising Cookies

• Google AdSense (for displaying relevant advertisements)

Local Storage

We also use browser local storage (similar to cookies) for:

• Analytics session data (PostHog)

You can manage cookie preferences through your browser settings or the consent banner on our website.

7. Data Security

We implement appropriate technical and organizational security measures to protect your personal information, including:

• Password hashing using industry-standard algorithms
• HTTPS encryption for all data transmission
• HTTP-only cookies to prevent cross-site scripting attacks
• Regular security audits and monitoring
• Access controls limiting employee access to personal data

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure.

8. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your account and associated data
• Portability: Request your data in a portable format
• Opt-out: Opt out of marketing communications

To exercise these rights, contact us at [email protected].

California Residents (CCPA)

California residents have additional rights under the California Consumer Privacy Act, including the right to know what personal information is collected and the right to request deletion.

9. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. When you delete your account, your data is marked as deleted but may be retained for a reasonable period for legal compliance, dispute resolution, and security purposes.

Login history is retained for security audit purposes. Discord linking data is retained for the lifetime of your account and removed upon account deletion or unlinking.

Riot account linking data (PUUID, Riot ID, region, OAuth refresh token) is retained for the lifetime of your linked account and deleted within 30 days when you unlink your Riot account or delete your GotNext.gg account. Match data ingested from the Riot API (match IDs, scores, participant lists) is retained as part of the historical competition record so opponent teams' W/L records stay consistent, but is anonymized to your former display name if you delete your account.

Billing and subscription records (including organization billing email, Stripe customer and subscription identifiers, plan history, invoices, and payment outcomes) are retained for as long as your organization has an active subscription and for a reasonable period afterwards to satisfy financial-record, tax, and audit requirements. Stripe separately retains transaction data per its own retention policies and applicable law.

10. Children's Privacy

GotNext.gg is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at [email protected], and we will delete such information.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have data protection laws that are different from the laws of your country.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

We encourage you to review this Privacy Policy periodically for any changes.

13. Contact Us

If you have any questions about this Privacy Policy, please contact us:

• Email: [email protected]
• Website: https://gotnext.gg

Google AdSense

This website uses Google AdSense to display advertisements. Google AdSense may collect and use certain data from visitors in accordance with their privacy practices.

Information Collected by Google AdSense

Google and its advertising partners may collect the following types of information:

• IP address
• Device type and operating system
• Browser type and language preferences
• Unique identifiers and advertising IDs
• Geolocation data
• Usage data and browsing behavior

Your Choices

You can opt out of personalized advertising by visiting Google's Ad Settings. You can also manage cookie preferences through the consent banner on our website or through your browser settings.

For More Information

For complete details about how Google collects and uses your information, please visit:

• Google Privacy Policy
• How Google uses cookies in advertising

Google Analytics

This website uses Google Analytics, a web analytics service provided by Google LLC. Google Analytics uses cookies and similar technologies to collect information about how you use our Service, including:

• Pages visited and time spent on each page
• Traffic sources and referral URLs
• Device type, browser, and operating system
• Geographic location (country/city level)
• User interactions and navigation patterns

This data is used to analyze website traffic, improve user experience, and understand how visitors interact with our platform. Google Analytics data is processed in accordance with Google's Privacy Policy.

You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

Stripe

We use Stripe, Inc. ("Stripe") to process subscription payments for paid organization tiers. When your organization upgrades to a paid tier, you are redirected to a Stripe-hosted checkout page where Stripe collects your payment method directly. We never see, transmit, or store your full payment card number or other sensitive payment instrument details.

Information We Share with Stripe

When we create a Stripe customer record for your organization, we send Stripe:

• Your organization's name
• The email address of the user who initiated the subscription
• Your organization's internal identifiers (organization ID and slug) as metadata so we can match Stripe events back to your account

Information Stripe Collects Directly

When you complete checkout or manage your subscription through the Stripe billing portal, Stripe may collect:

• Payment card or other payment instrument details
• Billing name, address, and contact information
• Tax identification information where applicable
• Device and browser information used to detect payment fraud
• Transaction history, invoices, and receipts

This information is collected directly by Stripe and is governed by Stripe's own privacy policy.

Information We Receive from Stripe

After checkout and on an ongoing basis via Stripe webhooks, Stripe sends us:

• Your Stripe customer ID and subscription ID
• Subscription state (active, past-due, cancelled), billing period, current period end, and cancel-at-period-end status
• The last four digits and brand of the payment card (for display in the UI)
• Payment success and failure events

We do not receive full card numbers, CVCs, or other sensitive payment instrument details from Stripe.

Your Choices

You can view, update, or remove payment methods, change your billing email, download invoices, and cancel your subscription through the Stripe billing portal, which is accessible from your organization's billing page on the Platform. You may also request a copy of, correction to, or deletion of the billing information we hold by contacting [email protected], subject to retention obligations described in Section 9.

For More Information

For complete details about how Stripe collects, uses, and protects your information, please review:

• Stripe Privacy Policy
• Stripe Services Agreement (Consumer Terms)