1. Scope and Who Is Responsible
This Privacy Policy explains how Zentryl L.L.C. ("Zentryl," "we," "us," or "our") collects, uses, stores, and discloses personal information when you use the Zentryl mobile app, zentrylgaming.com, league and social features, payment and payout flows, streaming integrations, or support services. Zentryl is responsible for the processing described here, except where an identified third party processes information under its own terms and privacy policy. The service is currently intended for users in the United States.
Zentryl's current public launch offers free-entry leagues and a paid Commissioner subscription. It does not offer new entry-fee leagues or cash prizes. References below to entry payments, precise-location eligibility, refunds, Stripe connected accounts, and award transfers describe records and processing that may remain necessary to resolve activity created before those features were disabled. They do not describe a currently available paid-entry feature.
2. Information We Collect
- Account and profile information: email address, Firebase user ID, display name, username, profile image URL, gamer tag, favorite game, game preferences, account settings, and authentication and account-deletion records.
- Website and support information: waitlist or contact-form details such as name, email, role, organization, launch interests, messages, attachments, and support history.
- Compliance information: age and jurisdiction confirmations, legal-policy acceptance records, eligibility decisions, location-verification status, app or device integrity results, and Stripe readiness.
- Location and network information for legacy monetized eligibility: when needed to resolve an older paid-season action, the app may send precise device latitude and longitude, accuracy, capture time, mock-location status, and the requested action to our server. Our server sends the coordinates to Google Maps Geocoding to determine the state and sends the request IP address to IPinfo to determine the network-derived state. Zentryl stores the resulting state, IP-derived state, accuracy, timestamps, action, providers, a daily salted or otherwise one-way IP hash, and a one-way location-verification hash. Zentryl does not store raw coordinates in your Zentryl database profile, although Google, IPinfo, network operators, and security logs may process request data under their own policies.
- League and gameplay information: league and team membership, schedules, standings, match reports, scores, confirmations, evidence references, disputes, roster assignments, organizer actions, season history, prize results, and enforcement records.
- Communications and user content: league and matchup chat, direct messages, reports, block records, profile content, stream information, and content submitted to support or moderation.
- Social and streaming information: follows, friend requests, friendships, blocks, Twitch and YouTube channel identifiers and profile data, OAuth connection state, granted scopes, access and refresh tokens, live-stream metadata, viewer counts, thumbnails, watch links, and public stream presence. OAuth tokens are stored in a server-restricted location and used to maintain integrations you request.
- Transaction and subscription information: app-store platform, Commissioner product, tier, price returned by the store, purchase and renewal status, expiration, transaction and original-transaction identifiers, receipt or purchase-token verification data, verification responses, legacy entry-fee and service-fee status, Stripe Checkout session, PaymentIntent, charge, refund and transfer identifiers, amounts, currency, prize and organizer-payment history, Stripe connected-account identifier, requirements, capabilities, and readiness. Stripe, Apple, or Google may separately collect identity, bank, tax, card, or billing information. Zentryl does not store full card or bank-account numbers in its app database.
- Device, usage, and diagnostics: push token and platform, installation or device identifiers, device and operating-system information, app version, feature and screen interactions, authentication, compliance, billing and social event data, IP address or IP-derived region, crash reports, stack traces, application state, performance data, and security logs.
- Information from other people and providers: other users may submit messages, results, reports, or evidence involving you. Firebase, Stripe, Apple, Google Play, Twitch, YouTube, IPinfo, app-integrity services, and other providers return status, identity, transaction, device, or integration data.
3. How We Use Information
We use personal information to:
- authenticate users and provide profiles, leagues, teams, schedules, standings, messaging, social discovery, streams, and support;
- verify age acknowledgements, location, jurisdiction, subscription status, payment completion, refunds, connected-account readiness, and award eligibility;
- process entry payments, refunds, organizer compensation, and prize transfers;
- send requested service, security, social, league, and competition notifications;
- prevent and investigate fraud, cheating, charge abuse, account takeovers, harassment, location circumvention, and platform misuse;
- resolve disputes, moderate content, enforce rules, and protect users and the service;
- measure feature usage, diagnose crashes, monitor reliability and performance, and improve Zentryl; and
- comply with tax, accounting, legal, regulatory, and provider requirements.
4. How We Disclose Information
We disclose information only as needed for the purposes above:
- Google Firebase and Google Cloud: authentication, database, storage, Cloud Functions, analytics, crash reporting, push messaging, app integrity, hosting, security, and infrastructure.
- Google Maps Platform and IPinfo: state-level device and network location verification for monetized eligibility.
- Stripe: Checkout, card processing, refunds, connected-account onboarding and verification, organizer compensation, award transfers, fraud prevention, and tax or compliance functions.
- Apple and Google: App Store or Play subscription purchase, restoration, receipt verification, notifications, device integrity, and store compliance.
- Twitch and YouTube/Google: OAuth connection, channel profile, live status, thumbnails, viewer information, and embedded or web-based streaming when you choose those features. Embedded pages may receive your IP address, device data, cookies, and interactions directly.
- Other users and the public-facing service: as described in Section 6.
- Advisers, authorities, and transaction parties: when reasonably necessary to obtain professional advice, comply with law or legal process, protect safety and rights, investigate fraud, enforce agreements, or evaluate or complete a merger, financing, reorganization, or sale.
We require service providers acting for Zentryl to protect personal information consistently with their contracts, applicable law, and the purposes for which the information was disclosed. Some providers independently determine parts of their processing under their own terms.
5. Sale, Targeted Advertising, Tracking, and Cookies
Zentryl does not sell personal information for money and does not currently sell or share personal information for cross-context behavioral advertising. Zentryl does not use Apple's advertising identifier for its own analytics or advertising. On iOS and iPadOS, Zentryl requests permission through Apple's App Tracking Transparency framework before an embedded Twitch or YouTube page can load. Those third-party pages may use cookies, device data, browsing activity, or identifiers for personalized advertising or advertising measurement under their own terms. If permission is denied or restricted, Zentryl clears embedded browser storage, sends available privacy preference signals, and Apple blocks requests to tracking domains declared in the app's privacy manifest. Stream viewing remains available, although third-party ads, sign-in, chat, or related page features may be limited. Zentryl does not currently use sensitive personal information to infer characteristics about users.
The website and service providers may use cookies, local storage, SDKs, and similar technologies for sign-in, preferences, security, form operation, analytics, and performance. Browser "Do Not Track" signals are not a uniform legal standard. Zentryl sends available Do Not Track and Global Privacy Control signals to embedded stream pages when Apple tracking permission is not granted. Where required, we will honor legally recognized opt-out preference signals. If our sale, sharing, advertising, or tracking practices change, we will update this Policy and provide any notice, consent, or opt-out required by law or platform policy.
6. Visibility and Communications
Public user-profile fields such as display name, username, profile image, favorite game, creator status, and linked Twitch or YouTube handles can be visible to all signed-in users. Public live-stream cards can display a creator's name, avatar, platform, stream title, thumbnail, viewer count, channel, and watch link to signed-in users. League names, settings, membership, standings, scores, results, schedules, and member profile snapshots may be visible to league members or, for public leagues, through public discovery.
The "private account" setting currently limits certain social and direct-message interactions; it does not make every public profile or league field invisible. Messages are visible to their conversation participants and may be reviewed when reported or when needed for safety, support, enforcement, or legal compliance. Blocking limits supported interactions but does not remove historical league records or content already shared with others. Do not submit content you do not want processed under these controls.
7. Retention
We use the following criteria rather than one period for every record:
- account, profile, settings, active-league, social, and current integration data are generally retained while your account or the related feature is active;
- messages, results, reports, evidence references, moderation records, and league history are retained as needed to operate the league, preserve other users' records, resolve disputes, enforce rules, and protect safety;
- payment, refund, transfer, subscription, tax, accounting, fraud, security, legal-acceptance, and account-deletion audit records are retained for the periods reasonably necessary for legal, processor, audit, and dispute obligations;
- OAuth credentials are retained while the connection is active or until they expire, are replaced, or are disconnected, subject to provider and backup timing;
- analytics, diagnostics, security logs, and backups are retained under provider settings and operational cycles and may be de-identified or deleted on a delayed schedule; and
- public results may be de-identified rather than removed where needed to keep league standings and records coherent.
When information is no longer reasonably needed for an identified purpose, we delete, de-identify, or aggregate it. Legal holds, chargebacks, fraud review, tax rules, provider obligations, and backup cycles can extend retention.
8. Your Choices and Privacy Rights
You can update profile information, manage social and notification settings, change device permissions, disconnect supported streaming services, manage subscriptions through the applicable app store, disconnect Zentryl's access to a Stripe account, and initiate account deletion from the profile area. Disconnecting Zentryl does not necessarily close the separate Stripe account.
Every league you still host must be deleted or transferred before account deletion can complete. Unresolved payments, refunds, disputes, chargebacks, or award obligations must also be resolved. Account deletion does not cancel an App Store or Google Play subscription, close a Stripe connected account, delete content held by other users, or erase records Zentryl or another provider must retain.
Depending on where you live and subject to legal exceptions, you may request access to, correction of, deletion of, or a portable copy of personal information; confirmation of processing; and an appeal if we deny a qualifying privacy request. Where applicable, you may also opt out of sale, sharing, targeted advertising, or certain profiling and limit specified uses of sensitive personal information. Zentryl does not currently conduct those opt-out activities as described in Section 5. You will not be discriminated against for exercising an applicable privacy right.
Submit a request or appeal to contact@zentrylgaming.com with "Privacy Request" in the subject line. We will verify the request by information reasonably related to your account and may request additional proof where required. An authorized agent may submit a request where applicable, but we may verify both the agent's authority and your identity. If we cannot fulfill a request, we will explain the reason when required by law.
9. Security
We use administrative, technical, and organizational safeguards designed to protect personal information, including authenticated access, server-side authorization, restricted secret and OAuth-token storage, transport encryption, provider security controls, audit records, and app-integrity checks. No method of transmission or storage is completely secure. Contact us if you believe your account or information has been compromised.
10. Children and Teen Users
Zentryl is not directed to children under 13, and children under 13 may not create an account. Monetized features are limited to users who confirm they are at least 18 and meet all other eligibility requirements. If we learn that a child under 13 provided personal information without legally sufficient parental authorization, we will disable the account and delete the information as required, subject to security and legal retention needs. A parent or guardian can report such an account to contact@zentrylgaming.com. Users ages 13 through 17 may use only non-monetized features and should have parent or guardian permission where required.
11. International Processing
Zentryl and its providers may process information in the United States and other countries where they operate. Those locations may have different privacy laws. The service is not currently directed to users outside the United States. If Zentryl later offers the service in another region, we will add disclosures and transfer safeguards required for that region before doing so.
12. Changes to This Policy
We may update this Privacy Policy as the service, providers, or law changes. We will post the new effective date and version. When a change materially affects how we use personal information, we will provide appropriate notice and request a new acknowledgement or consent where required instead of applying the change retroactively without notice.
13. Contact
Privacy and support email: contact@zentrylgaming.com
Support URL: https://www.zentrylgaming.com/
