Privacy Policy
Effective date: 10 October 2026 · Version 1.0
This policy explains what personal data the BragCrew app and the website bragcrew.com process, why, and what rights you have.
Who we are
The controller of your personal data is Ing. Alexandr Kánský, Company ID (IČO) 73122513, registered office Květinková 371/14, 130 00 Praha 3, Czech Republic ("we", "us").
Contact for all privacy matters: support@bragcrew.com.
What data we process
| Data | When | Why (legal basis) |
|---|---|---|
| Player profile: nickname, the leagues you join or found, your role in them | When you play | To run the game and show league rankings (contract) |
| Your picks, points and rankings, including past seasons | When you play | To score picks and show rankings (contract) |
| A random installation ID created by the app, and when a device was first and last used | When you open the app | To keep you signed in on your devices and manage sessions (contract) |
| Sign-in data: your email address, or an account identifier and email address from Google or Apple if you sign in with them | When you secure your account or sign in | To let you sign in and recover access (contract) |
| One-time sign-in codes (stored only in a protected form) | When you ask for a code | To confirm you own the email address (contract) |
| Your choice about promotional emails: yes or no, the wording version and the date | When you make the choice | To respect your choice and prove it (consent; legal obligation) |
| Reports and blocks you make, including the optional text you write | When you report or block | To keep the community safe and review reports within 24 hours (legitimate interest) |
| Security records: protected (hashed) values derived from your IP address, installation or email address, and signs that a sign-in token was reused | When you sign in or create a guest player | To prevent abuse and protect accounts (legitimate interest) |
| Messages you send us | When you write to support@bragcrew.com | To answer you (legitimate interest) |
You can play as a guest without giving us an email address. We do not ask for your real name, phone number, location, contacts or photos.
What we don't do: no advertising, no ad tracking, no selling or renting of your data, no profiling for marketing. The app contains no third-party analytics or advertising tools. Our servers keep no access logs with visitors' IP addresses.
No real money: BragCrew is a free game for fun. You never pay to make picks, nothing of money value can be won, and we do not share data with companies that offer games for money.
Who we share data with
We use these service providers, which process data only on our instructions:
- Hetzner Online GmbH (Germany): servers and encrypted backup storage in the European Union.
- Resend (Plus Five Five, Inc., USA): delivery of sign-in code emails, processed in its EU (Ireland) region. Any transfer outside the EU is covered by the safeguards required by the GDPR, such as the EU Standard Contractual Clauses.
- Google Workspace (Google Ireland Ltd.): our support mailbox.
- Cloudflare, Inc.: domain name service (DNS) for bragcrew.com; it does not receive the content of your use of BragCrew.
If you sign in with Google or Apple, they act as independent controllers under their own privacy policies and tell us only your account identifier and email address.
Other players in your leagues see your nickname, your picks once a match has started, your points and your ranking. Players you block see you as "Blocked player".
We may disclose data if the law requires it.
How long we keep data
- Account and game data: until you delete the account or ask us to delete it.
- One-time codes: until they are used or expire (minutes).
- Security records: only for the short time needed to limit abuse; old records are deleted automatically.
- Reports: until the review is finished, then for at most 12 months to deal with repeated abuse.
- Promotional email choice: kept as proof even after the account is deleted, but without your name or email address (an anonymous ID, the date and the wording).
- Support emails: as long as needed to handle your request, at most 2 years.
- Backups: deleted on a rolling basis; every backup copy is removed within 30 days.
Deleting your account
You can delete your account in the BragCrew app or on our website at https://bragcrew.com/delete-account. Once we accept the request, you can no longer play with that account. We delete the account and its data from our live systems within 24 hours and remove backup copies and the record of the request no later than 30 days after accepting it. Other players' points don't change. Deletion can't be undone.
Your rights
Under the GDPR you have the right to access your data, correct it, delete it, restrict its processing, receive it in a portable format, and object to processing based on our legitimate interest. You can withdraw your consent to promotional emails at any time in the app or via the link in each email; this does not affect processing before the withdrawal.
Write to support@bragcrew.com. We reply within one month.
You can also lodge a complaint with the Czech data protection authority, Úřad pro ochranu osobních údajů (www.uoou.gov.cz), or the authority in your country.
Age
BragCrew is for people aged 16 and over. We do not knowingly process data of anyone younger; if you think someone under 16 uses BragCrew, write to us and we will delete the account.
Security
Data travels encrypted (HTTPS). Sign-in tokens and codes are stored only in a protected (hashed) form. Backups are encrypted.
Changes
If we change this policy, we will publish the new version here with a new effective date. If the change is significant, we will tell you in the app before it takes effect.