Privacy Policy
Last updated: September 28, 2026
CrownForge LLC ("we," "us," or "our") operates SumoNerd (the "Service"). This Privacy Policy explains how we collect, use, and protect information when you use the Service.
1. Information We Collect
You can browse SumoNerd without an account. Creating an account is optional and is only needed for features such as fantasy leagues, comments, and following wrestlers. We may collect:
- Account data: If you create an account, we store your username, display name, email address, and a hashed password. If you sign in with Discord, Google, or Twitch, we store the account identifier that service provides. We also store what you create while signed in, such as fantasy leagues, picks, comments, and followed wrestlers.
- A SumoNerd-only account: Your account is used only for SumoNerd and is stored in SumoNerd's own database. It is separate from accounts on other CrownForge services, such as Questwright, and signing in here does not sign you in anywhere else.
- Usage data: Standard web server logs including IP addresses, browser type, pages visited, and timestamps. This data is used solely for service operation and security monitoring.
- Cookies: We may use session cookies for site functionality (such as keeping you signed in or remembering your selected tournament or division). We do not use tracking cookies or third-party advertising cookies.
2. How We Use Your Information
We use collected information to:
- Operate and maintain the Service
- Monitor for abuse or security issues
- Improve the Service over time
We do not sell, rent, or share your personal information with third parties for marketing purposes.
3. Third-Party Services
The Service relies on the following third parties:
- sumo-api.com: provides tournament and wrestler data. Their privacy practices are governed by their own policy.
- Discord, Google, and Twitch: optional sign-in. If you choose one of these, that service's privacy policy applies to the sign-in step.
- Twitch: external links to live streams. Twitch's privacy policy applies when you visit their site.
- Hosting and backups: a hosting provider runs our servers in the United States, a network provider carries traffic to them securely, and a backup provider in the United States stores an encrypted off-site copy of our backups. That copy is encrypted on our servers before it is sent, so the backup provider cannot read it.
4. Data Retention
Server logs are retained for up to 30 days for security and diagnostic purposes, then deleted. We do not retain personal data beyond what is necessary for service operation.
We keep backups to protect against data loss: hourly backups for 48 hours, daily backups for 30 days, and weekly backups for up to 12 months, on secured servers we operate with an encrypted off-site copy in the United States. Data you delete stays in a backup only until that backup expires.
5. Children's Privacy
The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we will delete it.
6. Security
We take reasonable technical measures to protect the Service and any data it handles. However, no internet service is completely secure, and we cannot guarantee absolute security.
7. Your Rights
If you have an account, you can update your display name, email address, password, and linked sign-in services from your profile page. For any other request about data we may hold about you, including access or deletion, contact us at the address below.
8. Changes to This Policy
We may update this Privacy Policy from time to time. We will update the "Last updated" date above when changes are made. Continued use of the Service after changes are posted constitutes your acceptance of the revised policy.
9. Contact
Privacy questions? Contact us at [email protected].