Privacy Policy.

1. Introduction

Welcome to Unite the Culture ("UTC," "we," "us," or "our"). We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, username, password, nationality, bio, and profile photo
• Event Data: Event registrations, battle history, rankings, team memberships
• Payment Information: Billing details processed securely through Stripe (we do not store full credit card numbers)
• Communications: Messages, support requests, and feedback you send us

2.2 Automatically Collected Information

• Usage Data: Pages visited, features used, time spent on the platform
• Device Information: IP address, browser type, operating system, device identifiers
• Location Data: Approximate location based on IP address (for event discovery)
• Cookies: Cookie Policy for details

3. How We Use Your Information

• Provide and maintain our services
• Process registrations, tickets, and payments
• Display rankings and battle results
• Send event notifications and updates
• Improve our platform and develop new features
• Prevent fraud and ensure security
• Comply with legal obligations
• Analyze usage patterns (only with your consent for analytics cookies - see Cookie Policy)

4. Legal Basis for Processing (GDPR)

• Contract: To provide services you've requested (event registration, tickets, rankings)
• Consent: For analytics, marketing, and non-essential cookies
• Legitimate Interests: To improve our platform, prevent fraud, and provide customer support
• Legal Obligation: To comply with applicable laws and regulations

5. Data Sharing and Disclosure

5.1 Third-Party Services

• WorkOS: Authentication services
• Stripe: Payment processing
• PostHog: Analytics (only with your consent)
• Google AdSense: Advertising (only with your consent)
• Cloudflare: Hosting and security
• Typesense: Search functionality

5.2 Public Information

Certain information is publicly visible by design (event registrations, rankings, battle results, usernames). You can control some visibility through your privacy settings.

5.3 Legal Requirements

We may disclose your information if required by law, court order, or to protect our rights and safety.

6. Your Rights (GDPR/CCPA)

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate data
• Erasure: Request deletion of your data ("Right to be Forgotten")
• Data Portability: Receive your data in a machine-readable format
• Withdraw Consent: Opt out of analytics and marketing at any time
• Object: Object to processing based on legitimate interests

To exercise these rights, please contact us at privacy@utc.dance

7. Data Retention

We retain your personal data only as long as necessary to provide our services and comply with legal obligations. Account data is retained while your account is active and for a reasonable period after deletion to comply with legal requirements.

8. Data Security

We implement industry-standard security measures including encryption, secure servers, and access controls. However, no method of transmission over the Internet is 100% secure.

9. Children's Privacy

Our services are not intended for children under 13. We do not knowingly collect personal data from children under 13. If you believe we have collected data from a child, please contact us immediately.

10. International Data Transfers

Your data may be transferred to and processed in countries outside your residence. We ensure appropriate safeguards are in place through Data Processing Agreements with our service providers.

11. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last updated" date.

12. Contact Us

• Email: privacy@utc.dance
• Support: support@utc.dance

For EU/EEA Residents:

If you are located in the European Economic Area (EEA), you have additional rights under GDPR. You may lodge a complaint with your local data protection authority if you believe your rights have been violated.