Privacy notice

Last updated: 23 October 2026

Draft notice — company contact details, retention periods and international processing arrangements are still being confirmed.

Who we are and how to contact us

NextArena operates this website, its tournament and venue services, and its free tournament tools. Email info@nextarena.co for privacy questions, information requests or deletion requests.

This notice covers information handled by NextArena. Event organisers, ChatGPT and other services you choose may also process information under their own privacy notices.

Information we collect

Depending on the features used, we may collect account and organisation details, names and contact details, event registrations, teams and partner information, divisions, scores and results, payment status, waivers, rules acceptance, media consent, support messages, technical logs and analytics information, such as IP addresses, browser/device details, page views and product events.

Payment details entered into Stripe are handled by Stripe. NextArena may receive transaction, invoice, payment-status and provider-reference information. Do not send full card numbers or security codes in support messages or generator inputs.

How we use information

We use information to provide accounts and events, administer registrations and pairings, manage subscriptions and payments, communicate service information, provide support, protect the platform, investigate misuse, maintain reliability and meet legal obligations. Optional marketing requires a separate choice.

Where information comes from

Information may be supplied by you, an event organiser, an organisation administrator, a partner or an authorised scorer. Technical information is generated when your browser or a connected service uses NextArena. Required account, registration or payment information is needed to provide those specific services; without it, we may be unable to create an account, process an entry or complete a transaction. Real player names are optional for free generators.

Free website generators and Promo Creator

The website’s round-robin, Americano, Mexicano and bracket generators calculate draws in your browser. Configuration, generated rounds and entered scores may be kept in localStorage on that browser so you can return to a session. This is separate from saving an event to a NextArena account. Clearing site storage removes those local drafts; copies you downloaded or shared remain wherever you placed them.

The Promo Creator renders your chosen event details and images in your browser. Downloading saves a file to your device; choosing a share action sends it to the destination you select. Other features, such as uploading a club logo or requesting a merchandise mockup, may send images to our servers and the providers needed for that feature.

NextArena tools in ChatGPT and other MCP clients

When you use the NextArena connection, your chat service sends the arguments needed for a tool call to NextArena. These may include player or team names, player count, court count, start time, match duration, format, scoring settings, a draw seed and previous Mexicano pairings and scores. We calculate the requested draw or standings and return the result to that service for your conversation. The connection does not request your whole chat history or a NextArena account.

The free MCP tools do not create database records for your draw, save an event, publish results or link a NextArena account. Mexicano history is returned as state that the client must retain and send back with completed scores to calculate another round. The server processes that supplied history for the request rather than keeping tournament history between calls.

The MCP calculations use NextArena’s scheduling code and do not make an additional AI-model request to generate fixtures. ChatGPT itself is provided by OpenAI; its handling and retention of your conversation and tool results depend on your OpenAI account, workspace settings and applicable policies. Deleting information from a chat is separate from deleting a NextArena account record or a downloaded copy.

Our MCP rate limiter temporarily keeps a hash of the forwarded IP address and request counters in server memory to limit abuse. It uses a one-minute request window. Entries are cleared when a subsequent request starts a new window, or when the server instance ends. Hashing does not make this information anonymous. Hosting and monitoring providers may separately retain request metadata or error information under their configured retention settings.

Use numbered players or teams if you prefer not to share names. Do not send passwords, API keys, payment-card details, health information or other sensitive information through generator inputs or player names.

Lawful bases

Where we act as a controller, the applicable basis depends on the activity: performing a contract or taking requested steps before a contract for account and service delivery; legitimate interests for proportionate security, reliability and responding to enquiries; legal obligations for records we are required to keep; and consent where required for optional analytics, marketing or media uses. Our legitimate interests are operating and protecting NextArena and resolving service problems. This mapping remains subject to confirmation for each deployed feature as part of the review of this draft.

Controller and processor roles

NextArena acts as a controller for its own accounts, billing, support, security and platform operations. For some event administration, NextArena may process information on an organiser’s documented instructions. The organiser may be responsible for explaining its own event uses and lawful basis. The correct role depends on the activity and requires confirmation for player profiles, public results, analytics, recordings and streams.

Automated sporting calculations

Our tournament tools automatically calculate fixtures, rests, rankings and subsequent Mexicano pairings from selected settings and entered results. Organisers should review the output and correct inaccurate scores. The free tools calculate sporting draws and standings; they do not decide employment, credit or eligibility for unrelated services.

Visibility and sharing

Authorised organisation users can access information needed for their role. Depending on event settings, names, teams, schedules, scores and results may be visible on venue displays, public pages or broadcasts. People with a viewing link can see the information that link makes available. We do not give sponsors entrant contact lists merely because they sponsor an event.

Providers receive information needed for the features used. The application integrates with:

• Vercel: hosting, request handling and Vercel Analytics where enabled.
• Supabase: authentication, application databases and uploaded-file storage.
• Stripe: payment processing and related transaction information.
• Resend: transactional emails, including recipient addresses and message content.
• PostHog: page views, selected product events, selected server logs and signed-in account identification that may include user ID, email address and first name. PostHog session recording is disabled in the current configuration.
• Sentry: error reports, performance traces and sampled session replay. Reports can include request and application context; replay can capture page interactions subject to its masking and sampling settings.
• OpenAI: ChatGPT conversations and tool exchanges when you use that connection. Separate NextArena AI assistance or image features may send relevant messages, event context or images to OpenAI when requested.
• Mux and embedded-content providers: video delivery, playback or content such as venue maps when those features load. These providers may receive technical information directly from your browser.

Using the free MCP generator does not itself require payment, email delivery or a Supabase account. We may also disclose information when required by law or reasonably necessary to investigate misuse, protect rights or handle a dispute.

International processing

Some providers may process information outside the country where you live, including outside the UK or European Economic Area. Provider regions, transfer routes and applicable safeguards for the deployed services are still being verified. This draft does not assert that a particular transfer agreement, adequacy decision or storage location applies to every provider. Contact info@nextarena.co for the confirmed arrangements relevant to your use.

Retention, deletion and security

We retain information only for as long as needed for the relevant service, legal obligations, security and disputes. You may request deletion of your personal information by contacting info@nextarena.co. We may need to retain limited information where required by law, needed for payment/accounting records, necessary to establish or defend a claim, or held in secure backups until their normal rotation. We use proportionate technical and organisational measures, but no system can guarantee absolute security.

• Free MCP draw inputs and results: processed to answer the request, without a NextArena tournament-history database. Chat copies follow the chat provider’s retention settings. Temporary rate-limit entries follow the window and server-instance lifecycle described above.
• Browser drafts: kept in that browser’s site storage until cleared, replaced or removed by the browser. Downloads and shared copies remain under your control and the recipient service’s policies.
• Account, event, support, design and media records: retention depends on the requested service, organiser instructions where applicable, deletion requests, and accounting, security, legal or dispute-related needs. Fixed retention and deletion schedules have not yet been set and must be confirmed.
• Hosting, analytics, error reports, replay and backups: exact configured retention periods and backup rotation/deletion schedules have not yet been confirmed. This draft does not promise a fixed deletion deadline for those provider-held copies.

Deleting a live record may not immediately remove a backup, an operational log, a third-party conversation or a copy someone has downloaded. Contact us for a deletion request and information about any records that must be retained and why.

Children and media

Accounts are intended for adults under the current product model. Organisers and parents or guardians must use the stated process for junior participation. Organisers must provide appropriate notice for public results, recording and streaming. Contact the organiser or NextArena about concerns involving a child or published media.

Your rights

Depending on the circumstances, you may request access, correction, deletion, restriction or portability. You may withdraw consent where consent is the lawful basis, without affecting earlier lawful processing. Contact info@nextarena.co; we may request proportionate identity verification and will respond within applicable legal time limits.

Your right to object: you may object to processing based on legitimate interests in your particular circumstances. You may object to direct marketing at any time, including through an unsubscribe option or by contacting us.

You may complain to the Information Commissioner’s Office or another competent authority where applicable.

Cookies, analytics and monitoring choices

Our analytics choice currently controls Vercel Analytics and its custom events. You can change that choice from the Cookies and similar technologies notice. PostHog and Sentry are configured separately and are not switched off by that Vercel Analytics choice. Their configuration and any applicable consent requirements still need review; we do not describe all analytics as anonymous or consent-exempt.

Changes to this notice

We will update this notice as features and confirmed data-handling arrangements change. The date at the top identifies the latest version. This draft does not certify legal compliance or replace the outstanding factual and legal review.