Privacy

Who is responsible

The World Esports Championship is an event of the International Esports Federation (IESF). IESF is the organiser of the championship and the party responsible for the personal information collected for it. The IESF privacy policy applies to this website and to everything connected with the championship. It sets out what IESF collects, why, how long it keeps it, and your rights over it. Read it at iesf.org/privacy.

What this website does

• You can sign in with your IESF account, the same email and password as on iesf.org. The account is the IESF account, so the IESF privacy policy governs it. This website does not create accounts and does not see or keep your password: it passes it to the IESF server to check it, and that is all.
• Signing in sets two strictly necessary cookies, which the IESF server sets and which the browser cannot read from the page. One keeps you signed in for up to 15 minutes at a time. The other lets the website renew that automatically for up to seven days. Both are shared across iesf.org and its sites, so they are also used on iesf.org. Neither is used for tracking or advertising. The website also keeps one short note in your browser storage, saying that you signed in here, and holds the short-lived sign-in in the page’s memory while it is open.
• Signing out ends the session on the IESF server, removes both cookies and deletes the note, and the memory is cleared when the page closes. A visitor who does not sign in has nothing stored by the website.
• The pages you reach after signing in show, and let delegates and the IESF team send, information about the championship, such as teams, athletes, officials and travel arrangements. That information goes to the IESF server and is handled under the IESF privacy policy. The website keeps no copy of it in your browser.
• The website counts its own visits with a small tool of its own that runs on IESF’s server. It loads nothing from any other company and uses no advertising or cross-site tracking. For each page you open it records the page, the time, the page you came from and any campaign tags in the link, your browser and device type, the window width rounded to 100 pixels, your language, your country and region (worked out by Cloudflare from your address), and whether this browser has visited before. Your address itself is not kept: only a scrambled code that changes every day. Pages the IESF team uses to run the championship are not counted. Visit records are deleted after 90 days.
• On the public pages it also keeps counters of where people click (a position on a grid and the name of the element, never its text and never anything you type), how far down the page they scroll, how fast the page paints, and how many errors the browser meets (a code for the message, not the message). These counters hold no address, no account and no identifier, and are kept for 12 months. Nothing of this kind is collected on the sign-in area, the nation pages, the dashboards or the athlete and guardian links; there only the visit itself is counted.
• You can stop all of it. The tool does not run when your browser sends Do Not Track or Global Privacy Control. You can also switch it off for this browser here:
• The website is delivered through Cloudflare, its network provider. Cloudflare may set its own security cookie and run its own security and performance measurement scripts in your browser. These belong to Cloudflare, not to the website’s own code, and the IESF privacy policy covers them.
• The only form on the public pages is the sign-in form. It asks for your IESF account email and password and nothing else.
• The countdown and the local times use your browser’s clock and time zone. They are worked out in your browser and are not sent anywhere.
• The web server that delivers the pages keeps standard technical logs, such as the address a request came from and the page requested. IESF uses them to keep the website running and secure.

Athletes and delegations

When entries are open, a national federation that signs in here can invite its athletes and its delegation and enter details for them. Athletes complete their own details through a personal link that opens on iesf.org. The details below are handled by IESF under the IESF privacy policy, wherever they are entered.

• For an athlete, IESF asks for the gamer name, legal first and last name (and a middle name, if they have one and wish to give it), date of birth, gender (male or female, as on their official documents), shirt size, a passport-style photograph for the accreditation pass, and the game IDs that the title needs (for example a Steam, Discord, Moonton, Krafton or PlayStation Network ID, or a link to an HLTV or Dotabuff profile). IESF also asks for the athlete’s own WhatsApp number and email address, whether they are a professional player (and if so the name of the team and its social media links), links to their own Facebook, Instagram or X accounts if they wish to give them, and their in-game role. IESF explains why it asks for these and how long it keeps them, and asks whether the athlete wants them kept for future entries, so that things like a shirt size need not be typed again; the athlete can change their mind at any time. IESF sets, for each region, how far along these steps a nation’s athletes must go and by when. Where a region asks for travel, IESF also asks for the passport (number, expiry date and a scan), the visa details (middle name, nationality, place of birth, home address, phone number, and where and when the passport was issued) and a visa photograph, the city and airport they fly from and the flight (arrival and departure dates, the optional flight numbers and the local arrival and departure times, and the ticket file), an emergency contact, and, if the person wishes, dietary needs and accessibility needs (each is a box the person ticks and, if ticked, a line for a few words). IESF no longer asks whether an athlete holds a Therapeutic Use Exemption; a yes or no answer given earlier is deleted after 90 days, and IESF asks for no medical detail. Athletes must be at least 16 years old on the first day of the championship. An athlete who is 16 or 17 on that day also needs a parent or legal guardian’s consent, so IESF asks for the guardian’s name and email and sends them a consent request, or the guardian signs a printed form that the athlete uploads. Only the IESF Secretariat can open the signed form.
• For a delegation member (an official, coach, manager or anyone else a federation adds to its delegation), IESF asks for the full name, the role on the delegation, a photograph and shirt size for the accreditation pass, and, where the region asks for travel, the same passport, visa, flight, emergency contact and dietary and access details as for an athlete, together with their date of birth, gender, nationality, place of birth, home address, middle name, contact email address and phone and WhatsApp numbers. The federation adds them by email, so IESF holds that address to send the invitation. A federation delegate who adds themselves enters their own details and ticks no authority box.
• A federation invited someone by email, so IESF holds that address to send the invitation. An athlete’s country is their federation’s country. When a team is handed in, the person who submits it gives their name, WhatsApp number and the legal name of their organisation. For past championships, IESF also keeps the names of the people who took part, with their country, title and championship, taken from the published results on iesf.gg, the IESF competition platform. This is a record of the results only: it is not linked to any account or Gamer Pass profile, and anyone named in it can ask IESF through the contact page to have their name removed.
• A national federation may enter these details for one of its own athletes or delegation members who has asked it to, for this championship only. Each time it saves a group of details (identity, shirt size, photograph, passport, visa, flight, emergency contact, dietary and access needs) it confirms that it holds the person’s authority to do so. The person is emailed which groups were entered (never the details themselves) and can correct any of them, and IESF’s record shows that the federation entered them, which federation account did so, and when. For an athlete who has asked it to, the federation’s own delegate may also record the athlete’s consent to take part, when the athlete cannot reach their own link. The record then says the consent was given by the delegate on the athlete’s behalf, never as the athlete’s own: it shows which account did so, when, and the delegate’s internet address and browser, and the delegate uploads the signed consent document, which only the IESF Secretariat and that federation can open. If the athlete later gives the consent themselves, their own consent replaces it. In the same way the federation's delegate may accept, for an athlete who has asked it to, the championship regulations, the anti-doping rules and the use of the athlete's image; the record says they were given by the delegate on the athlete's behalf, which account did so, when, and the delegate's internet address and browser, and no signed document is needed. If the athlete later accepts them themselves, their own acceptance replaces it. When the person saves the details themselves, the record shows that they did. When a save replaces something, IESF’s audit trail also notes what was replaced: the old gamer name (which is public anyway), only the fact that a shirt size was replaced, and for a name, date of birth, gender or game ID a marker that cannot be turned back into the old value. It holds no passport, photograph or health detail. This record, and the audit trail behind it, is kept as the history of how an entry was made. It is not part of the automatic deletion below, and no deletion date has been set for it.
• A federation can enter a passport, visa, flight ticket, emergency contact, dietary or access detail for its own people, but it can never read one back: after saving, the federation sees only whether each item is on file, the two flight dates and what is still missing for its region. A federation sees the other details for its own athletes and delegation members, and the progress of its own people, and no one else’s. The photograph is seen by the IESF Secretariat, the person’s own national federation and the person, and IESF also shows a cropped copy of it, with the background removed, on the national team’s public page on this site, for athletes and team staff aged 18 or over, and for athletes aged 16 or 17 on the first day of the championship whose parent or legal guardian has given consent and who agreed to the use of their image themselves (nobody younger is shown). On their own entry page each of them can choose to show a picture of their own there instead (it is then public on that page), or no picture at all, and can change this at any time. Anyone can also ask IESF through the contact page to have their photo taken off that page. Passport, visa, flight ticket, emergency contact, dietary and access details, and the Therapeutic Use Exemption answer, are seen only by the IESF Secretariat. The local organising committee sees names, roles, arrival and departure dates, flight numbers and arrival and departure times, where a person flies in from, shirt sizes, and whether a passport scan and visa photo are on file, and nothing about the competition. It does not see passports, tickets, photographs, dates of birth, gender, emergency, dietary or access details, contact details, social media links, professional-player details or game IDs. A member of the local organising committee can add or change a person’s flight numbers and arrival and departure times, and nothing else; the record shows who entered them and when. To let the Secretariat work with them, copies of the passport scan, the visa photo, the accreditation photograph and the flight ticket of an athlete, of a member of a delegation (a delegate or coach) and of an IESF official may be kept in a private Google Drive folder. Who can open it is controlled by the Google Drive sharing settings of that folder, which the IESF Secretariat administers; it is shared only with IESF staff who organise the championship. Google (a US company) stores the files for us. They are never shared by link or made public. A copy in that folder is deleted when the original is deleted, replaced or removed on the dates above, so it is never kept longer than the original.
• Passport scans and numbers, visa photos and details (including the phone number, home address and place of birth given for a visa), flight tickets, dates, flight numbers and times, the shirt size copied into the travel details, and the other travel details are deleted 14 days after the championship ends. Emergency contact, dietary and access answers, and the yes or no answer about a Therapeutic Use Exemption, are deleted after 90 days. The dietary needs and accessibility needs boxes, and any words typed beside them, are deleted 90 days after the championship ends, are seen only by the IESF Secretariat, and are never kept for future entries, even if the athlete ticked the box to keep their details. The name, WhatsApp number and organisation name given by the person who submits a team are deleted 12 months after the championship ends (IESF may set a shorter period, never a longer one); the team, its country and its title stay as the record. An athlete’s date of birth, middle name, gender, shirt size, accreditation photograph, signed consent document (where a federation delegate recorded the consent for the athlete), WhatsApp number, email address, game IDs, social media links, professional-player details (the team name and its social media links), in-game role and the technical details recorded when they agree (internet address and browser) are deleted 14 days after the last championship they are entered in ends, unless the athlete ticked the box to keep their details for future entries. Those who ticked it have them kept for at most 12 months after the last championship they are entered in ends (IESF may set a shorter period, never a longer one): an athlete entered in a later championship keeps these details for it, and the period starts again after that one. An athlete who agreed before the box existed was told 12 months and keeps that. Anyone can ask for their details to be deleted sooner. The name, gamer name, country, title and role are kept as the record of who took part. The email address an invitation was sent to, the words describing a role entered as “Other”, the position in the federation typed for a delegation member, the reason a federation gave for replacing a delegate, and the reason the Secretariat gave when it did not approve a person a federation asked to add or swap in after its team was handed in, are deleted 12 months after the championship ends. If a parent or guardian’s name, email address and relationship was ever recorded, or a signed form was uploaded, it is deleted at most 12 months after the championship ends and only the date consent was given is kept. For a delegation member, the date of birth, nationality, place of birth, home address and phone and WhatsApp numbers, middle name and contact email address are deleted with the travel details, 14 days after it ends, and the photograph and shirt size 12 months after it ends.
• When a passport scan is uploaded the person may be asked whether to remove it after the championship or keep it for future championships; the question is offered only when IESF has switched it on, and until then every passport is removed on the date above. Removing it is the default. If someone chooses to keep it, only the scan and its expiry date are kept, until the passport expires or they ask us to delete it, and the passport number and every other detail are still deleted 14 days after the championship ends.
• The record of who entered or changed what (when a federation or the Secretariat filled in a section on someone’s behalf, and the confirmation that the person had agreed to it) and the audit log are kept for as long as the championship records are kept. They show who did it and when, not the details themselves, which are deleted on the dates above. IESF has not yet set a period for this record and will set one.
• Deletion is automatic and runs once a day. It is switched on after the last championship IESF has scheduled has ended (IESF may switch it on sooner), so the details of an earlier championship can wait until then. A person removed from a team has the same windows counted from the day they were removed, if that is earlier.

Questions

To ask about your information or to use your rights, contact IESF through the contact page on iesf.org.