Privacy Policy

If you register for a bracket: the league name you play under, your email address, the tier you chose, your main game, and your Discord handle if you give it. If you write to us: your name, your email address and your message. If you join the mailing list: your first name and your email address. If you ask to be told when a game opens: your email address and which game you asked about.

When the first payment creates your account we will also hold a password, stored so that nobody at the league can read it, and a record of what you paid and when. Until then neither exists, and this page says so rather than describing a system that is not there. Your match results, your rating and any replays you upload are kept as part of the ladder. Our server keeps ordinary logs, including your IP address.

If you use the launcher: it signs you in with a token issued by the site to that one machine, never your password, and it keeps that token where other programs on your computer cannot read it. It looks for your StarCraft installation and for the league network software so it can start the game and join the network. When you play, it uploads the result, the replay, a fingerprint of the replay taken the moment the file appears (which is how a result is checked), and the statistics read from the replay, such as your APM. Unless you turn video sharing off in its Settings, it also uploads the video it recorded of the game window, with no sound, and that video appears on your public profile; we keep each player's newest twelve. It keeps a log of what it did on your own machine. It reads nothing else on your computer, and nothing secret is built into it.

One cookie, and it is not about you. Our caching layer sets _lscache_vary so it knows which version of a page to send you. It holds a random value, lasts two days, and cannot be read by any script on the page.

A few other things are kept in your browser and never sent to us. Our caching layer keeps two notes for the length of a tab. If we put an announcement across the top of the site and you close it, your browser remembers that for thirty days so we do not show you the same one again. None of it identifies you, none of it reaches our server, and clearing your browser data removes all of it.

That is the whole list. We run no advertising trackers, load no third-party scripts, and do not sell anything about your browsing to anybody. When you sign in there is a cookie that keeps you signed in, set by the site itself, and it is the only cookie that identifies you.

Your league name, your rank, your record, your replays, what you list for sale, who sponsors you, and anything you choose to put on your public profile are public by design, because a ladder that nobody can check is not a ladder. If you take money through the site, your real name and your real face are public too; that is the Authenticity Policy. Your email address, your payment records and the launcher’s sign-in token are not public and never will be.

If a player links a Chess.com account AND proves it is theirs, we fetch their public Chess.com ratings once a day and show them on their profile. Until it is proved we fetch nothing and show nothing. Proving it means putting a one-time code we generate into the location field of their own Chess.com profile, which we then read back once; we hold that code until it is used, along with a note of which username was proved and when. The only thing that ever leaves this site is the username they gave us, which is already public on Chess.com, and the request is made by our server rather than by your browser. Those figures are Chess.com ratings, labeled as such. They are not an OPLeague rating and they do not affect the ladder.

You can keep your profile out of the player directory. Doing that leaves you off the players page and out of the sitemap we send to search engines, and it also leaves you out of the weekly email, so we will not name you there either. One switch, both places. Your page still works at its own address for anyone you give the link to.

Messaging exists in one place so far: in the OPLeague Launcher, between two players who have challenged each other, to agree a time. Those messages are kept on the site, so a message can wait for somebody whose launcher is closed. Either player can report a conversation from the launcher.

We reserve the right to read, keep and act on messages sent through OPLeague. We are not promising to read them, nobody sits watching a queue, and nothing scans what you say automatically. We look when there is a reason: a report, somebody telling us a person is at risk, or the law requiring it of us. The reason the right exists is that a site where adults pay and children have profiles needs to be able to act when a parent writes to it.

Anything we read this way we may keep a copy of, and pass to the police or another authority where we are required to. We will not sell it, use it to advertise to you, or publish it.

Account data for as long as your account exists, then thirty days. Match results and replays stay after that, because the ladder is a historical record. Ask us and we will detach your name from them.

The league keeps its own operating record of every match played, in the system it runs the competition from. Deleting your account does not delete that, and it is not something we can offer to delete, because it is the evidence behind other players’ ratings as well as yours.

A registration is kept until it becomes an account or until you ask us to drop it, whichever comes first. Messages for as long as the conversation does, and then twelve months. If we have read one because of a report we keep that one for as long as the matter is open, and longer if an authority tells us to.