Privacy Policy

This Privacy Policy explains what information Tru Rev MMA ("Tru Rev," "we," "us") collects through trmma.stgd.app (the "Site"), how we use it, and the choices you have. Browsing the Site — event schedules, fighter records, results, and rankings — does not require an account and does not collect personal information beyond standard server logs.

Information we collect

Account information

If you create a fan account, we collect:

• Your email address.
• If you sign in with Google, the name, email address, and profile photo Google shares with us under its permission scope. We do not receive your Google password.
• If you sign in with an emailed sign-in link ("magic link"), we generate a one-time code, store only a cryptographic hash of it (never the code itself), and it expires after 15 minutes or first use, whichever comes first.

A fan account is entirely separate from our administrative/staff accounts. Signing in as a fan never grants access to Tru Rev's internal event-management tools, and staff credentials are never derived from fan account data.

Technical information

• IP address, temporarily, to enforce rate limits on sign-in and (in the future) other public forms and to prevent abuse.
• A session cookie once you're signed in, so you don't have to sign in again on every page. This cookie is set to HttpOnly, Secure, andSameSite=Lax, meaning it can't be read by page scripts and isn't sent to other sites.

We do not run advertising trackers or third-party analytics on the Site.

How we use your information

• To create and maintain your fan account and keep you signed in.
• To send you a sign-in link when you request one by email.
• To detect and prevent abuse of sign-in and other public-facing forms.
• To respond if you contact us.

We do not sell your information, and we do not share it with third parties for their own marketing purposes.

Who we share information with

We use the following service providers to operate the Site. Each processes data only as needed to provide their service to us:

• Cloudflare — hosting, database, file storage, and outbound sign-in emails.
• Google — if you choose to sign in with Google.

Data retention

We keep account information for as long as your account is active. Sign-in sessions expire automatically after a period of inactivity. Magic-link sign-in codes are deleted or invalidated within 15 minutes regardless of use. You can ask us to delete your account and associated data at any time (see "Your choices" below).

Your choices

• You can sign out at any time, which ends your session.
• You can request access to, correction of, or deletion of your account information by emailing us at help@stgd.app.

Children's privacy

The Site is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has created an account, contact us and we will delete it.

Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we'll update the effective date above. Continued use of the Site after a change means you accept the updated policy.

Contact us

Questions about this policy or your data? Emailhelp@stgd.app.