How we treat your data and secure the site

The names you paste into the team generator and bracket maker stay in your browser's memory. We never receive them on our servers, we never log them, and we don't have any back-end database that could store them.

We do collect standard server access logs (IP address, user agent, requested URL, timestamp) for up to 30 days for abuse detection and aggregated traffic statistics. We use Cloudflare for delivery and Google AdSense for advertising; their cookies and identifiers are governed by their own policies and disclosed in the privacy policy.

• HTTPS is enforced site-wide; HTTP requests are redirected with HSTS.
• The site is a static front-end with no user accounts, no login forms, and no admin panel — there is nothing to compromise that would expose other users' data.
• Third-party scripts are limited to the analytics and ads vendors disclosed in the privacy policy.
• Dependencies are kept on the most recent supported major version; security patches from upstream are applied within a week of disclosure.

The tools on this site are provided for personal, educational, and commercial use alike. You may use the generated brackets and team rosters in your own publications, classroom materials, and tournaments without attribution. The following uses are not permitted:

• Automated scraping or load testing of the site.
• Re-hosting the application or its source as if it were your own product.
• Using the site to harass, dox, or otherwise harm individuals (e.g. publishing brackets that single people out for abuse).

If you find a vulnerability — XSS, dependency CVE, anything that could be used to harm a user — please email hello@teambracketgenerator.com with details and reproduction steps. We will acknowledge within two business days and credit you in the fix notes if you'd like. Please don't publicly disclose the issue until we've shipped a fix.

The site itself doesn't host user-generated content. If you believe a guide, template, or page on this site contains inaccurate, misleading, or harmful material, email hello@teambracketgenerator.com and we'll review it within five business days.

The generators are routinely used by teachers in classroom settings. The tools themselves don't require an account, don't ask for personal information, and don't display age-restricted content. We don't knowingly collect personal data from anyone under 16; if you believe a child has supplied personal data through one of the optional contact forms, email us and we'll remove it.

When we materially change this page, we update the date at the bottom and post a short note explaining what changed.