Privacy Policy

QP Media (Hanoi, Vietnam) operates the tournament management platform at qpmedia.net (also known as GiaiDauPro), used by tournament organizers, teams, match supervisors and fans. This policy explains what data we collect, why, and the choices you have.

• Accounts: name, username, phone number and password. Passwords are stored only as bcrypt hashes.
• Team editor and match supervisor credentials: phone number and password created by the organizer, also stored hashed.
• Tournament data entered by organizers and teams: tournaments, teams, players (such as name, shirt number, position and photo), schedules, results, match events, sponsors and logos.
• Uploaded images (team logos, player photos, sponsor logos, banners), stored in cloud object storage.
• Facebook Page connection: Page ID and Page Access Token that an organizer enters to connect their own Page. The token is encrypted (AES-GCM) before storage and is never shown again in full.
• Browser storage: your sign-in token, basic profile and display preferences are kept in your browser’s local/session storage so you stay signed in. We do not use advertising or analytics trackers.

Only to provide the platform: managing tournaments, showing public tournament pages when an organizer makes a tournament public, producing livestream overlays and exportable graphics, and — for connected Facebook Pages — publishing posts the organizer has enabled. We do not sell or rent personal data and do not use it for advertising.

When an organizer makes a tournament public, its schedule, results, standings, teams and rosters (without contact details) are visible to anyone, and may appear in livestream overlays and shared graphics.

We use infrastructure providers that process data on our behalf: Cloudflare (hosting, application servers and file storage) and Neon (Postgres database). Facebook Graph API is called only to publish to a Page that an organizer has connected.

Passwords are hashed, Facebook Page tokens are encrypted, and access to tournament data is restricted by role (organizer, co-organizer, team editor, match supervisor) and enforced on the server. No system is perfectly secure, but we work to protect your data.

Organizers can disconnect a Facebook Page at any time in tournament settings, or revoke access from Facebook settings. To request access to or deletion of your account or personal data, contact us at [email protected].

We may update this policy as the platform evolves. The date above shows the latest revision.