Privacy Policy

ALPR is a tournament operations platform for organizing Apex Legends events in Puerto Rico. The website is operated with quintanal.ai.

Privacy and data requests: [email protected]

Depending on how you use ALPR, we may collect:

• Discord user ID, display name, and avatar when you sign in with Discord (OAuth scope: identify)
• Team names, roster membership, optional team images, and in-game identifiers you provide (such as Apex username, EA ID, Steam ID, or platform)
• Event registrations (team, individual, or mixed), invite links, waitlist or hold status, check-in records, and whether a registration came from the website, Discord, or an administrator
• Visitor IP address on website and administrator-console requests (from the reverse proxy, typically X-Forwarded-For), including Discord sign-in on the site, later actions while signed in, and administrator login attempts (successful or failed)
• An append-only audit log of writes (registrations, roster changes, check-ins, admin edits, Discord commands, and similar). Administrators can review that log, including actor, action, time, event, and IP when one was recorded. Discord slash commands and Discord check-in reactions do not include a browser IP
• Optional web-push subscriptions if you enable registration-open reminders or if an administrator enables admin alerts on a device
• Match and lobby statistics when an event uses a stats token, LiveAPI, or TDM telemetry (in-game names, placements, combat stats, legends, and similar fields those systems provide)
• Technical records needed to run the service, such as hashed IP used only to rate-limit registration holds

Players do not need to give us an email address. We identify player accounts by Discord user ID, not by Discord username. Administrator emails exist only for administrator accounts that use password sign-in.

We use this information to operate events, authenticate you, show registrations, brackets, drafts, stats, and overlays that belong to a tournament, send lobby codes and schedule notices, prevent abuse, and keep a fair record for tournament integrity (including reviewing IPs and audit history that only administrators can see).

We do not sell personal information and we do not use it for third-party advertising.

ALPR uses cookies that are required to run the site:

• alpr_player: signed-in player session (HTTP-only)
• alpr_admin: administrator session (HTTP-only)
• alpr_cookie_consent: remembers your cookie choice (up to 12 months)
• NEXT_LOCALE: language preference
• CSRF token for administrator forms
• alpr_reg_hold: short-lived registration hold when a public event is full and you are waiting to complete sign-in
• alpr_team_followup: brief follow-up after a team registration flow
• alpr_impersonate: administrator debug only (register-as / impersonation); not used for ordinary players

If you choose “Accept all”, we may also store optional preferences on your device (for example whether you dismissed the welcome message, install banner, or loading animation) and register your browser for optional event notifications if you enable them. Administrators can send branded news or event details to those opted-in devices. We do not use advertising or tracking pixels.

You can change your choice anytime from Cookie settings in the footer. Session cookies use SameSite=Lax and are marked Secure on production.

Discord is an input channel, not the source of truth. Tournament data lives in our database. If you use Discord slash commands (for example /register-team), Discord sign-in, or captain check-in in the designated rules channel, we receive the Discord user ID Discord sends us.

Website registration requires membership in the ALPR Discord server. After you sign in we may grant a lasting “plays with us” role on that server, and a participation role while you are on an active event (administrators are the exception). We may send Discord DMs or channel mentions for lobby codes, check-in notices, and event date changes for events you are registered in.

Your use of Discord is also governed by Discord's own terms and privacy policy. We do not ask for your Discord password.

The homepage may show whether a configured Twitch channel is live, using Twitch's public Helix API. ALPR does not sign you in with Twitch and does not collect your Twitch account.

Event pages may list watch links and embed videos or clips from Twitch, YouTube, Kick, or TikTok. Those embeds are served by those platforms under their own policies.

Administrators may send event text they write (names, descriptions, prizes, format, rules) to OpenAI to translate or edit that copy. We do not send player Discord accounts, IPs, or audit logs to OpenAI for that purpose.

We share information only as needed to run the service:

• Infrastructure and hosting providers that store the site and database
• Discord, for sign-in, roles, DMs, and bot commands you use
• Twitch, YouTube, Kick, or TikTok, for public live-status or embeds you choose to watch
• OpenAI, only for administrator-requested event-copy translation or edits
• Electronic Arts / Respawn private-match or LiveAPI services when an administrator attaches those stats tools to an event
• When the law requires it, or to protect the safety and integrity of events

Public event pages, calendars (.ics), share cards, and OBS overlays may display team names, logos, rosters the event needs, prizes, brackets, POI draft picks, casters, sponsors, stream links, VODs, and overall or match statistics. Audit logs, blacklist reasons, lobby codes (except to the teams that should see them), and EA stats tokens are not shown on the public site.

We keep registration, account, stats, check-in, and audit data while it is needed to run events, keep a fair history, secure the service, and meet legal obligations. Audit rows are append-only and are not automatically erased if a player account is later deleted. The database is backed up daily.

You may withdraw a registration or leave a team while that event's registration window is open. Administrators can also remove registrations or bar a player from future events (blacklist; reason is visible only to administrators). To request deletion of your player account, email [email protected] from a way we can associate with your Discord user.

You can sign out at any time. While a registration window is open, captains and members can edit or leave their team as described on My teams. Check-in, when an event uses it, is separate from the registration window. You can also request access or deletion as described above.

You must meet Discord's age requirements and any age rules published for a specific event. ALPR is not directed at children under 13.

We may update this policy as the platform changes. The date at the top of this page is the latest revision. Continued use of the site after a change means you accept the updated policy.