Privacy Policy

CNC Leagues (“CNC Leagues,” “we,” “us,” or “our”) runs a competitive NHL Pro Clubs hockey league through the website at cncleagues.com (the “Website”), a Discord community, and an administrative bot known as “The Commissioner” (collectively, the “Service”).

CNC Leagues is a community-run competitive league, not a commercial business. We exist to run the most legitimate hockey league we can. That means the person who signs up is the person who actually plays — no shared logins, no fake accounts, no letting a stronger player take someone else’s slot. To make that possible, and to keep stats and records honest, we collect and check more identifying information than a casual gaming server would. This Policy explains exactly what we collect, why, and what we do (and don’t) with it. Please read it carefully.

Account security records. We record login times, observed IPv4 or IPv6 addresses, browser user-agent information, a first-party security cookie, and browser-reported screen dimensions, pixel ratio, color depth, language and timezone. When enabled, our dedicated network checks attempt separate IPv4 and IPv6 connections. These signals help identify accounts requiring staff review; shared addresses or similar browser settings do not establish that accounts belong to the same person. Detailed matching records are restricted to authorized CNC security reviewers and Admins. Logout, session expiry and account removal do not automatically delete this history; the retention provisions below apply. Browser settings can change or be unavailable, and they do not reliably identify a physical monitor or console.

Account identity history. We retain the verified mobile identity, authenticated Discord ID and connections returned by Discord when your CNC profile is created. These records remain associated with the CNC account after logout, removal of a connection in Discord, or deletion of the CNC profile. A new mobile number alone does not override an existing association. Members cannot unlink these identities. Authorized CNC security reviewers and Admins can release an incorrect association after reviewing supporting evidence; the original record, reviewer, time, reason and evidence reference remain in the security history. We retain this history without an automatic expiry, subject to applicable legal obligations. Contact CNC staff to request a correction.

Doogle / Double Counter account checks. When enabled, we send the Discord account ID obtained through your Discord sign-in to Doogle (powered by Double Counter) to request its existing account-security records and Discord identity card. These may include Discord profile information, associated account IDs and relationships, confidence levels, a behavioural fingerprint and counts of past VPN attempts and server verifications. We retain complete responses as dated, encrypted records alongside a matching summary. Only authorized CNC security reviewers and Admins can access these reports. We do not send your phone number, email, Discord access token or Google/YouTube data to Doogle. Reported associations may allow account creation and MyCNC access while league registration waits for staff review; their confidence is retained and a match is not automatically a finding that two people are the same. Doogle outages, incomplete results and new matches do not prevent an existing account from signing in. Staff corrections require documented supporting evidence. Historical VPN records are not a determination that your current browser or console is using a VPN. These reports follow the security-record retention and correction provisions in this policy; contact CNC staff to dispute an association.

By creating an account, verifying your identity, connecting your Google/YouTube account, joining our Discord server, or otherwise using the Service, you acknowledge that you have read and understood this Policy.

CNC mobile app. Signed-in app access and game-availability submissions record the server-observed connection IP address, time and user-agent information when available. Availability edits retain their associated game and response history; the connection record is restricted to authorized CNC security reviewers and Admins. Wi-Fi and cellular connections can have different or shared addresses, so an IP address does not uniquely identify a phone or person. The app does not collect a phone’s MAC address, serial number or GPS location for these checks. Security-record retention and correction provisions below apply. When you choose to load an embedded draft broadcast or open an external streaming channel, that streaming provider receives your connection information and handles playback under its own privacy policy. Native video players may also provide app identity and device-integrity signals required by the provider.

1. Who we are and how to contact us

CNC Leagues operates and is responsible for the Service. CNC Leagues is operated from Ohio, United States, and our members come from many states, provinces, and countries around the world.

• Contact email: contact@cncleagues.com
• Privacy contact: League Commissioner, reachable at the email above.

If you have questions about this Policy or want to exercise any of your rights (see Sections 10–12), contact us at that email.

2. Information we collect

We collect the following categories of information.

2.1 Information you provide directly

• Registration details you enter when you sign up, which may include a username/handle, email address, date of birth, jersey number, the hand you shoot with, and league preferences. Providing your gender is optional. We use your date of birth to confirm you meet our minimum age (see Section 8) and to give birthday shout-outs. We do not publish your date of birth or age on your player profile or anywhere else on the Website, and birthday shout-outs never reveal your age.
• Phone number. We may ask for a phone number to contact you about giveaways and, where enabled, to secure your account with two-factor authentication (2FA). Where we use phone-based 2FA, a phone number may be required to create or keep an account; this also helps us prevent one person from registering multiple accounts. To deliver 2FA codes and to check the number’s type (for example, to detect virtual/VoIP numbers used to create duplicate accounts), we share your number with a third-party phone-verification provider — see Section 5.
• In-game identity, such as your EA / Pro Clubs gamertag, gaming platform (e.g., PlayStation, Xbox), and club affiliation.
• Communications you send to us, including support requests, appeals, and messages to league staff.

2.2 Console verification and box-score submissions

Console verification for Hockey. After CNC Hub account creation, Hockey verification connects your selected gaming account, player details, YouTube upload check and console check. You do not repeat phone or Discord signup. A private, expiring link is opened from the console. We record the server-observed IP address and browser user agent, a first-party security cookie, and browser-reported display dimensions, viewport, pixel ratio, color depth, orientation, language, timezone, platform, touch support, available logical processors, approximate memory and graphics vendor/renderer where the browser permits. Connection-type and browser platform hints may also be recorded. Unavailable information stays unavailable; we do not bypass browser privacy protections. We cannot obtain a console MAC address, serial number or monitor hardware identity through this website.

We retain an initial console baseline and compare later console and post-game captures with it. These records and their comparison signatures are restricted to authorized CNC security reviewers and Admins. Changes and cross-account matches are review evidence, not proof of a hardware identity, physical location, account sharing, or the network used by the game itself. Identical consoles may report identical characteristics. Cookies, IP addresses and display settings can change. A browser capture by itself does not prove that a particular person played a match. The account-security retention and correction provisions above apply.

Post-game box-score submissions. After each game, you must submit proof of the match’s box score (each tab of it). How you do this depends on your platform:

• Xbox: you upload the box-score screenshots directly through your console’s built-in browser. At the moment you upload, we capture the console’s IP address and the submission time, and we require the upload to occur within a short window after the game, so that submissions come from the registered player’s own console. We use this to protect the integrity of match results.
• PlayStation: because PlayStation does not support that direct in-browser upload, you instead upload a box-score screen recording to your own YouTube channel, which we verify as described in Section 2.4.

We are still building the file-upload feature on the Website. As it rolls out, the Xbox method above will be the primary path for Xbox players, while PlayStation players continue to use the YouTube method. Both methods are governed by this Policy.

2.3 Information from Discord

When you authorize our Discord login or link The Commissioner bot, we receive information from Discord based on the permissions (“scopes”) you grant. These may include:

• your Discord user ID, username, and avatar (identify);
• the email address associated with your Discord account (email);
• the servers (“guilds”) you belong to that are relevant to our league (guilds);
• your linked external connections — for example, Steam, Xbox, PlayStation, or EA accounts you have connected to Discord (connections); and
• the ability to write role-connection metadata back to your Discord profile for league roles (role_connections.write).

We request the connections scope specifically to help confirm account ownership and detect duplicate or linked accounts. You can review and revoke these authorizations at any time in your Discord account settings; see Section 10.

2.4 Information from Google and YouTube

Every player must have a YouTube account, verify it with us using Google OAuth, and sync it with their console; this is part of how we confirm your identity and console. On PlayStation — and for any player using the YouTube method — match participation is also verified through YouTube: after each game, you upload a screen recording of the game’s box score (including each tab of the box score) to your own YouTube channel. The recording’s filename is generated automatically from the game title and a Unix timestamp, which must correspond to the Unix time we pull for that match from EA’s NHL Pro Clubs API, and the upload must occur within a set time window after the game ends.

To verify this, when you link your Google account you authorize the following Google/YouTube permission (scope):

• https://www.googleapis.com/auth/youtube.readonly — read-only access to your YouTube account.

Using this read-only permission, we access the following Google user data:

• your YouTube channel name and channel ID, so we can associate uploads with the correct league member; and
• metadata for your own recent uploads or a clip you submit (video title, ID, channel ID, publication time, privacy status and duration), to check ownership, associate the recording with a scheduled game and support evidence review.

Game evidence review. When you submit a box-score clip for a specific game, you authorize designated league reviewers to view it and record the visible scores and player statistics. We retain the submitted link, ownership and upload metadata, game association, your consent choices, extracted or manually transcribed observations, and dated review decisions. A clip or transcription alone does not establish who played, prove cheating or change official statistics. Staff compare the evidence with the corresponding imported game record.

Optional automated transcription. Where configured and available to adults, you may separately choose to have Google Gemini analyze a public YouTube clip. We send its public link and scheduled team names to Google for that attempt. We do not send your CNC account ID, phone number, Discord credentials, private team plans or account-security records. Automated output may be wrong or incomplete and requires staff review. Declining automated analysis does not prevent a manual submission. Private and unlisted clips are not sent to this provider; staff review still requires access to the clip. We do not change a video's privacy setting. This integration remains disabled until its paid-project data handling and member disclosures have been reviewed. Provider processing is governed by Google's applicable terms; CNC does not use submitted footage or observations to train generalized AI models.

What we do NOT do with this access:

• We do not read, access, or collect data belonging to other YouTube users.
• We do not modify, upload, publish, delete, or otherwise change anything in your YouTube account. The permission we request is read-only.
• We do not download or store the video itself, and we do not access your watch history, subscriptions, comments, or any private account data beyond the upload metadata described above.
• We do not use Google/YouTube data for advertising, and we do not sell it or transfer it to data brokers.

See Section 13A for our Google API Services Limited Use disclosure, which governs all data we obtain through Google APIs.

2.5 Gameplay data

Optional Twitch game streams. If you connect Twitch, we verify your channel identity through OAuth and retain its channel ID, login, display name and connection dates. We do not request your email, stream key, chat access or channel-edit permissions. The one-time user token is not stored; we request its revocation after checking identity. Public live-channel metadata is checked using CNC's application credentials. When you choose to stream a scheduled game, we store a game-specific title code and pairing/check timestamps. Confirmed live channel links may appear on the public schedule after the game starts. Disconnecting removes active stream pairings; it does not erase retained league records. Twitch is optional and does not replace required YouTube or console evidence.

We collect match and club data from EA’s NHL Pro Clubs systems (for example, via the proclubs.ea.com API), such as match results, statistics, club rosters, and the timestamps and identifiers EA exposes for those matches. We use this to run the league, maintain standings, keep records accurate, and cross-check your box-score submissions.

2.6 Site-login data, cross-account matching, and VPN detection

To keep the league fair and secure the Service, we collect and use certain technical information whenever you access the Website:

• IP addresses captured at every login and access point;
• login and access timestamps; and
• access logs and device/browser attributes generated by our servers.

Cross-account matching. A common way people cheat in online leagues is by sharing logins or creating multiple/fake accounts so a stronger player can play on someone else’s slot. We compare IP addresses and related signals across accounts to detect when one person may be operating multiple league accounts, so that the players who sign up are the players who actually play — and the resulting stats and records are legitimate. We treat these signals as indicators, not proof. A match alone does not trigger an automatic penalty; a human reviews flags, and we recognize that shared households, networks, and devices can produce false matches. Console verification (Section 2.2) and box-score verification (Section 2.4) are our primary checks; IP matching is a supporting layer.

VPN and proxy detection. When enabled, we send the incoming connection's IP address to proxycheck.io before signup, sign-in, protected account actions and console-link verification. We also recheck while an account page is open. Detected VPN, proxy, Tor, other anonymising connections and connections classified as hosting or data centers cannot continue these actions until the check clears. A hosting classification is an access restriction, not proof of VPN use or misconduct. An unavailable check temporarily pauses the action and is recorded separately from a detection. We retain the observed IP, time, action and assessment in private security history, including attempts before account creation. A first-party security cookie can associate those earlier attempts with an account that later signs in from the same browser; shared browsers do not prove a shared identity. The console-link check assesses the browser opening the link, not continuous console game traffic. Contact CNC staff to dispute a false positive. See Section 5.

2.7 Cookies and similar technologies

The Website uses only cookies or similar local-storage technologies that are strictly necessary to keep you logged in, to operate the Service, and to support the security and anti-cheat functions described above. We do not use advertising or third-party tracking cookies.

3. How we use your information

We use the information described above to:

• create and administer your league account and Discord roles;
• verify your identity, your console, and which gaming accounts belong to you;
• confirm you meet our minimum age requirement;
• give birthday shout-outs (without revealing your age);
• contact you about giveaways and, where enabled, secure your account and limit duplicate accounts through phone-based two-factor authentication;
• verify match participation by confirming that the required box-score proof — screenshots uploaded from your console (Xbox) or a recording uploaded to YouTube (PlayStation) — was submitted with the correct content and timing;
• detect, investigate, and act on cheating and other violations of our league rules, including shared logins, multi-account use, and evasion via VPNs/proxies;
• run matches, maintain standings, and keep records accurate;
• communicate with you about your account, matches, rule enforcement, and appeals;
• secure the Service and prevent fraud, abuse, and unauthorized access; and
• comply with applicable legal obligations.

We do not sell your personal information, we do not “share” it for cross-context behavioral advertising, and we do not use it for advertising of any kind.

Participation is conditional on these checks. Completing verification and allowing the anti-cheat data collection described in this Policy is a condition of joining and remaining in the league. If you do not comply with how we run the league and gather anti-cheat information, we may deny or revoke your access to the league and the Website.

4. Legal bases for processing (where applicable)

If you are located in a jurisdiction that requires a legal basis for processing (such as the EU/EEA or UK), we rely on the following:

• Performance of a contract — to provide the league services you signed up for.
• Consent — for example, when you grant Discord scopes, connect your Google/YouTube account, complete console verification, or provide optional information such as your gender. You may withdraw consent (see Section 10), though doing so may mean you can no longer participate.
• Legitimate interests — to keep the league fair, detect cheating and multi-account abuse, block evasion via VPNs/proxies, and secure the Service, balanced against your rights and interests.
• Legal obligations — where we are required to process information by law.

5. How we share information

We share information only as described here:

• Discord, EA, and Google/YouTube. The Service interoperates with Discord, Electronic Arts, and Google/YouTube. Your interactions with those platforms are also governed by their own privacy policies, which we do not control.
• Optional box-score transcription provider. With your separate submission consent, the configured Google Gemini service receives the public clip link and team context described in Section 2.4 to return observations for staff review.
• Hosting provider. We host the Service with Hetzner (Hetzner Online GmbH) on servers in the European Union (Germany). See Section 9 for how cross-border access is handled.
• IP-intelligence provider. When enabled, proxycheck.io receives the current connection's IP address and returns an IP classification for the checks described in Section 2.6. We do not send it your phone number, Discord identity, email or gaming connections. Its processing is described in the proxycheck.io Privacy Policy.
• Phone-verification provider. If you provide a phone number, we share it with a third-party phone-verification and lookup service (for example, Telnyx) to send two-factor authentication codes and to check the number’s line type (such as detecting virtual/VoIP numbers). This provider processes phone numbers on our behalf for security and anti-fraud purposes only.
• League staff. Authorized league administrators may access your information to run the league and review integrity flags.
• Legal and safety. We may disclose information where required by law, to enforce our rules, or to protect the rights, safety, or property of CNC Leagues, our members, or the public.
• Transfer of the league. If CNC Leagues is handed off to new operators, information may transfer as part of that handover, subject to this Policy.

We do not sell or rent personal information to anyone. Google user data is transferred only for the disclosed feature or other purposes permitted by Section 13A.

5A. SMS Messaging and Mobile Information

CNC Leagues may collect and use a mobile phone number and SMS consent to send account-verification messages, account and league notifications, and, where separately authorized by the user, promotional messages.

CNC Leagues does not sell, rent, trade, or share mobile phone numbers, SMS opt-in data, or SMS consent with third parties or affiliates for their own marketing or promotional purposes. We may share this information only with service providers that help us operate and deliver CNC Leagues messaging services.

Message frequency varies. Msg & data rates may apply. Users may opt out of SMS messages at any time by replying STOP. For help, reply HELP or contact CNC Leagues at contact@cncleagues.com.

If you provide a mobile number, CNC Leagues sends text messages in two programs: required one-time verification codes and account/league-action notifications (registration confirmations, draft reminders, lineup notices, and schedule changes), and an optional promotional program you separately opt in to. Joining the league requires only the first program; the promotional program is never a condition of joining or of any purchase. The exact consent language shown at sign-up is publicly viewable at cncleagues.com/sms-consent.

No mobile information will be sold, rented, or shared with third parties or affiliates for marketing or promotional purposes. Information sharing to subcontractors in support services, such as our SMS provider, is permitted. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

Message frequency may vary. For account verification, one message is sent per login or verification request. For optional league updates, message frequency may vary.

Message and data rates may apply. Reply STOP to cancel, HELP for help. For assistance, contact us at contact@cncleagues.com. Full details are on our SMS Terms & Opt-In page.

6. Data retention

We keep personal information only as long as needed for the purposes in this Policy.

• Anti-cheat and verification data — including console-verification data (console IP and user agent), site-login IP records, box-score screenshots you upload, and other box-score verification records — is retained for as long as needed to run the league and protect its integrity, including after you leave or stop playing. We deliberately keep this information after a player departs so that a person cannot quit and return under a new name, or pose as a different person. We may retain it indefinitely for these integrity and fraud-prevention purposes unless we choose to delete it or are legally required to do so.
• Google/YouTube data. CNC does not download or retain a copy of the video. We retain the metadata, consent choices, observations and review history needed for submitted game evidence and verification. These records have no automatic expiry and remain subject to the integrity, correction and deletion provisions in this Policy. Disconnecting Google prevents new authorized channel checks; it does not automatically erase evidence already submitted. Contact us for access, correction or deletion requests.
• Access logs are retained for a limited period for security purposes (up to 12 months) and then deleted or anonymized.

7. Security

We take reasonable technical and organizational measures to protect your information, including protecting data in transit and at rest and restricting access to verification data, Google-derived data, and correlation data to authorized league staff. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

8. Age requirement

You must be at least 16 years old to use the Service. We ask for your date of birth at signup to confirm you meet this requirement, and we keep it on file as our record of the age you provided. Because we collect IP addresses, console and device signals, and other identifying information to keep the league fair, we do not allow accounts for anyone under 16.

We do not knowingly collect personal information from anyone under 16. If we learn that we have, we will delete it. A parent or guardian who believes their child under 16 has provided us information may contact us at contact@cncleagues.com, and we will remove it. We do not sell or share the personal information of minors, and we do not use it for targeted advertising.

9. International data transfers

CNC Leagues is operated from Ohio, United States, and our members come from around the world. We host the Service with Hetzner in its EU Central region (Germany), so your information is stored and processed on servers located in the European Union.

Because our members are worldwide and our staff are based in the United States and Canada, your information may be transferred across international borders. If you are outside the EU — for example in the United States or Canada — your information is transferred into the EU for storage. If you are in the EU/EEA or UK, your data is stored within the EU, but our staff in the United States and Canada may access it to run the league, which is treated as a transfer out of the EEA/UK. Where a transfer is subject to laws like the EU/UK GDPR, we rely on appropriate safeguards (such as the European Commission’s Standard Contractual Clauses, or an equivalent mechanism) and take reasonable steps to protect your information consistent with this Policy.

10. Your rights and choices (all users)

Wherever you live, you may ask us to:

• access the personal information we hold about you;
• correct inaccurate information;
• delete your information;
• restrict or object to certain processing;
• receive a portable copy of information you provided; and
• withdraw consent you previously gave (for example, by revoking Discord scopes or disconnecting your Google account).

How to make a request. Email us at contact@cncleagues.com and tell us what you’d like to do. We will verify your request by confirming control of the account or identifiers involved (for example, your registered email or Discord account) before acting, so that we don’t disclose or delete data for the wrong person. We respond within the timeframe required by applicable law.

Authorized agents. Where the law allows, you may use an authorized agent to submit a request on your behalf; we may ask the agent for proof of authorization and may still ask you to verify your identity directly.

No retaliation. We will not deny you league membership, charge you differently, or otherwise penalize you for exercising these rights. Note, however, that some data is essential to keeping the league fair — if you ask us to delete verification or anti-cheat data while you are an active member, we may be unable to keep your account active.

Limits. Some information is essential to protecting the league’s integrity, and we may decline a deletion request — or retain specific records after one — where the law permits, including to prevent ban or quit evasion, detect returning or duplicate accounts, resolve disputes, enforce our rules, or comply with law. Where you have a legal right to erasure (for example, under the GDPR), we will honor it except to the extent an exception applies — such as our need to retain data for these integrity and fraud-prevention purposes, or to establish or defend legal claims.

Managing third-party permissions.

• Discord: review and revoke access anytime in Discord → Settings → Authorized Apps.
• Google/YouTube: revoke our access anytime at https://myaccount.google.com/permissions, or by disconnecting your Google account within the Service.

11. U.S. state privacy rights

Several U.S. states — including California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and others — give residents specific privacy rights. If you are a resident of a state with such a law, you have the rights described in Section 10 (access, correction, deletion, portability, and, where applicable, to opt out of sale, “sharing” for targeted advertising, and certain profiling), to the extent the law applies to us.

We do not sell your personal information and we do not “share” it for cross-context behavioral (targeted) advertising, as those terms are defined under the California Consumer Privacy Act (CCPA/CPRA) and similar state laws. Because we don’t do either, there is nothing for you to opt out of on that front — but you may still exercise your other rights by emailing contact@cncleagues.com.

Categories of personal information we collect (using the CCPA’s category labels), the sources, and why we collect them:

We use each category for the business purposes described in Section 3, and we disclose categories only as described in Section 5 (to our hosting, IP-intelligence, and phone-verification providers, league staff, and where legally required). We do not collect government IDs, financial-account numbers, precise (GPS-level) geolocation, or biometric data, and we do not knowingly collect “sensitive personal information” for the purpose of inferring characteristics about you.

California “Shine the Light.” California residents may ask whether we disclose personal information to third parties for their direct marketing purposes. We do not.

If we ever deny a request, you may appeal by replying to our decision email; where your state provides one, you may also contact your state attorney general.

12. EU/EEA, UK, and other international rights

If you are in the European Economic Area, the United Kingdom, Switzerland, or another region with comprehensive data-protection law, the following also applies:

• Your rights. In addition to the rights in Section 10, you have the right to lodge a complaint with your local data-protection supervisory authority if you believe we have mishandled your information. We’d appreciate the chance to address your concern first, so please consider contacting us at contact@cncleagues.com.
• Legal bases. We process your information on the legal bases set out in Section 4.
• Transfers. International transfers are handled as described in Section 9.
• Automated decisions. We do not make solely automated decisions that produce legal or similarly significant effects about you. Anti-cheat flags are reviewed by a human before any membership action is taken (see Section 2.6). Automated VPN/proxy detection may block access to the Website, but you can contact us to resolve a false positive.

Canada (federal PIPEDA and provincial laws, including Quebec’s Law 25) and other jurisdictions: we handle your information consistent with applicable local law, and you may contact us to exercise the access, correction, and other rights those laws provide.

13. Third-party services

The Service relies on and links to third-party platforms, including Discord, Electronic Arts, Google/YouTube, our hosting provider (Hetzner), a third-party IP-intelligence service used for VPN/proxy detection, and a phone-verification service (such as Telnyx) used for 2FA delivery and number-type checks. We are not responsible for the privacy practices of platforms we link to. We encourage you to review the relevant policies:

• Discord Privacy Policy
• Electronic Arts (EA) Privacy & Cookie Policy
• Google Privacy Policy — https://policies.google.com/privacy
• YouTube Terms of Service — https://www.youtube.com/t/terms

Our use of information received from YouTube’s APIs is subject to the YouTube API Services Terms of Service.

13A. Google API Services — Limited Use disclosure

CNC Leagues’ use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Consistent with those Limited Use requirements, information we receive from Google APIs (including via the youtube.readonly scope) is:

• used only to provide and improve the user-facing match-verification feature described in this Policy;
• not used or transferred for serving advertising, including personalized, retargeted, or interest-based advertising;
• not sold or transferred to data brokers, information resellers, or other parties, except as needed to provide the feature or as required by law;
• not used to train, fine-tune, or improve generalized or non-personalized AI/ML models; and
• not read by humans, except (a) with your affirmative consent, (b) for security or abuse investigations, (c) to comply with applicable law, or (d) where the data is aggregated/anonymized and used for internal operations in line with applicable requirements.

14. Changes to this Policy

We may update this Policy from time to time. When we make material changes — including any change to how we use Google user data — we will update the “Last updated” date above, notify you where appropriate (for example, an announcement in our Discord server), and, where required, prompt you to consent before the new use takes effect. Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

15. Contact

If you have any questions or concerns about this Privacy Policy or how we handle your information, contact us at:

CNC Leagues — contact@cncleagues.com