When you make an account

Your email address and password. The password is handled by Google Firebase, and we never see it.
Your birth month and year, asked first at sign-up. We keep your birth year and whether you are 18 or older. We do not keep your birth month. For a player under 18 we also keep the dates you turn 16 and 18, worked out from the month at sign-up, so the "I am 16 or older now" and "I am 18 or older now" buttons in Settings work on the right day. Only the server can read those dates, and they are deleted with your account.
Which version of the Terms of Service, the Privacy Policy and the Community and Safety Rules you accepted, and when. Organizers also have their Organizer Agreement acceptance recorded, and TradeBack buyers their Subscription Terms acceptance.

When a player is 13 to 15

The parent or guardian's email address, their name, whether they are a parent or legal guardian, and when they approved, declined or withdrew approval, with the agreement version (see section 9).

Your profile and play

Display name, picture, banner, bio, region (a broad area like NA East, never your exact location), links, self-reported peak rank, preferred roles, and your Looking for team settings and weekly hours.
Teams, orgs and events: names, tags, logos, rosters, staff, roster history, recruiting posts, event registrations, lineups and check-ins.
Matches: Match Room activity (check-ins, map bans and picks, side choices, chat, scores), replay files and scoreboard images uploaded to verify a result, disputes, rulings and appeals.
Ratings worked out from verified results: Player Rating, Class, EPS and reliability marks.

Linked accounts

Discord: your Discord user ID and username, through Discord's sign-in. We ask for two permissions: "identify" (who you are) and "guilds.join", which lets us add you to the Round One Discord server when you link, so our bot can send you notifications. We record whether that worked. We cannot read your messages or your servers, and you can leave the Round One server at any time.
Discord access we keep: to let our bot add you to Discord servers, we keep a Discord access key (a refresh token) for your account on our server only. No page can read it. It is replaced if you link a different Discord account and deleted when your account is deleted. You can also stop it working at any time by removing Round One under Authorized Apps in your Discord settings.
The Round One Discord server: our bot gives you roles there for your Class, your tier (T3, T4 or Moved up to T2) and your Player Rating band, and sets your nickname to "[TEAM TAG] Name". Everyone on that server can see them. When you delete your account, the bot removes your Round One nickname and roles there. You stay a member of the server until you leave it.
League Discord servers: an organizer can connect its league's own Discord server to its events. When your team plays in one of those events, our bot adds the linked players (including players under 18), coaches and staff of both teams to that server, makes a private match chat for the two teams and the event staff with a link to the Match Room, and, 5 minutes before the start, a voice channel for each team (its coaches, staff and checked-in players). The bot deletes these channels 6 hours after the result. That server belongs to the organizer, not to Round One: its owners and admins can see who is on it and can see those channels, and Discord's own rules apply there. If the bot cannot add you, it sends you an invite link instead.
Team roles on league servers: if the organizer turns on team roles, the bot adds a team's linked players, subs, coaches, staff and managers (including players under 18) to the league's server as soon as the team is approved into the event, and gives them a role with the team's name and colour, shown as its own group in the member list. Anyone on that server can see which team you play for. Round One never deletes these roles: after the event they stay on the league's server, and the league's own admins keep or remove them. If you leave the team's entry during the event, you lose the role. We keep a short server-only record of who got each team's role, deleted after the event ends or when the organizer turns team roles off.
Discord messages we send: if you are 16 or older, the Round One bot also sends your notifications as Discord direct messages once you link Discord. You can turn any area off in Settings. If you are 13 to 15, Discord messages stay off until you turn them on in Settings. We keep a small record of the last send for your account (whether it worked, and Discord's error code if it did not). Settings shows you whether the last message was delivered.
Ubisoft: you link your Ubisoft account by uploading a replay file you recorded. The server reads the recorder's Ubisoft ID and name and keeps a fingerprint (a hash) of the file so it cannot be used twice. The file itself is not kept.

Safety

Block and mute lists, team invite settings, and whether you are on the No-stream list.
Reports you make or that are made about you, a copy of the reported content, what moderators decided, and appeals. Some reports are made automatically by our chat check.
Chat messages our chat check blocked: the blocked word, the message, where and when, in a log only adult staff can see.
MOSS anti-cheat files: players in event matches run MOSS, which records running programs, the screen and inputs during the match. Players keep the files on their own PC and upload them only when a Round One moderator asks. Uploaded files are private evidence that only adult staff can see, deleted with the event's other evidence 90 days after the event is final.
Public ban list: when an account is permanently banned, its display name, linked Ubisoft name, ban type, reason and how it was verified are shown publicly (for players under 18, only display name and ban type).
For paid events: the state or province you give in Settings, Safety, used only to check whether paid events are allowed where you live. Only you, adult Round One staff and the server can see it. Organizers see only that the check passed.

TradeBack

The team's matches, rounds, notes, position maps, callouts and stats, and the player and staff logins the coach makes. Replay files are read inside your browser and are not uploaded to us.
Dictation: a coach or staff login can tap Dictate to speak a note instead of typing it. Your browser turns the speech into text: Chrome sends the audio to Google and Edge sends it to Microsoft to do that, and Safari uses Apple's speech recognition. We never receive or keep the audio. Only the text that ends up in the note reaches us, and it is kept like any typed note. Player logins do not have Dictate.
Purchases: Stripe handles payment, and Link (a Stripe service) is the merchant of record for it. From Stripe we receive the buyer's name and email, billing country and state or province, the subscription status and payment events. We never see or keep full card or bank numbers.

Organizers

The organizer's legal name, contact details, event records, the Round One fee invoices and payments.

When you contact us

What you send through the Contact page (name, email, topic, message) and through Send feedback (your message, an optional screenshot, and your browser type, device type, screen size and theme).

Technical records

Our hosting and backend providers keep standard server logs, such as IP address, time and the page or service asked for, to run and protect their services. We use IP addresses only for security, such as rate limits on sign-ups and reports. We do not use them to track you.