Slipstream Privacy Policy

Slipstream (“Slipstream,” “we,” “us”) is a platform for running competitive esports leagues and tournaments (currently Rocket League), a product of Saelum Labs (operated by Godswill Erhunmwunse), based in the United Kingdom, run as a small organizing team.

• Publisher: Saelum Labs (Godswill Erhunmwunse)
• Contact: privacy@playslip.stream
• Where we operate: United Kingdom

By creating an account or registering a team, you agree to the collection and use of information as described here. If you don’t agree, please don’t create an account.

• Discord account (sign-in): Slipstream uses Discord OAuth for sign-in. We receive your Discord user ID, username/display name, avatar, and email address. We never see or store a separate password — Discord handles authentication. Your name on Slipstream is always your Discord username: it can’t be changed here, and if you rename yourself on Discord it updates the next time you sign in.
• Game accounts connected to Discord: each time you sign in, we ask Discord for the accounts you’ve connected to it. We keep only the Steam, Epic Games and PlayStation accounts Discord has verified (their ID and name), and discard the rest (e.g. Xbox, Spotify, YouTube). They become the platform IDs on your profile, below; each sign-in replaces the list.
• Epic Games, Steam, and PlayStation Network IDs: your profile stores the Epic display name, SteamID64 and PSN online ID of the verified accounts above, so league staff can identify you in-game and check your reported rank. They come only from Discord — you can’t type one in — and they’re updated each time you sign in, so disconnecting an account on Discord removes it here too. If you add a Tracker Network link yourself, we store it for the same purpose. Your rank stays self-reported.
• Player profile data: region and self-reported rank, and, if you choose to add them, a short bio, your platform, when you play, the team sizes you’re looking for and a self-reported rank for each playlist. Shown to other signed-in players and captains (e.g. on your player page, the free-agent pool or a team roster) — not used for any automated matchmaking or seeding.
• Team & roster data: team name, tag, logo and banner, region, captain/manager designation, roster membership, and, while it’s recruiting, what it’s looking for (open spots, role, rank and when it plays).
• Match and season data: scheduled matches, reported scores, and division/standings placement. Slipstream is built to pull per-game stats (goals, assists, saves, shots, demos, boost usage, map, duration) from ballchasing.com replay parsing, but that pipeline isn’t live yet — no replay data is currently collected. This policy will be updated before it launches.
• Administrative records: dispute submissions, resolution notes, and administrative match overrides, including the reason text an admin enters.
• Uploaded files: team logos and banners, league logos and banners, and season banner images you or a league admin upload, stored via our file-upload provider.
• Discord server membership (leagues that use the Slipstream bot): when your team is approved for an event in a league that has added our Discord bot to its server, we ask Discord, using your Discord user ID, whether you’re a member of that server. We keep only whether everyone on the team was found and who wasn’t, at the last check.
• Reminder preference: whether you’ve asked the bot to DM you your match reminders.
• Technical logs: session cookie data, IP address, and basic request logs, kept for security and to keep the service running.
• Error reports: when something goes wrong while you use the site, the details of the error and your Slipstream user ID, sent to our error-monitoring provider (§5).

We do not currently collect payment or financial information. If entry fees or prize payouts are introduced, payments will go through a licensed payments provider (e.g. Stripe Connect), and this policy will be updated before that launches.

Standings, brackets, schedules, and team rosters are intentionally visible to anyone browsing Slipstream — that’s the point of a league site. If you don’t want a piece of information visible to other participants and spectators, don’t submit it to a public-facing field (e.g. a team name or logo).

Your player page, with your free-agent status, self-reported ranks, region and any optional profile details you add, is visible to other signed-in players and captains browsing for teammates or evaluating an invite — not to anonymous visitors. It and the free-agent list also show your Discord avatar, your teams, the events you’ve played and which of your platform IDs are verified, but never the IDs themselves. Their “Message on Discord” button links to your Discord profile, so it carries your Discord user ID, which signed-in players can therefore see. A team’s page, its roster with each player’s rank, its record and events, and, if it’s listed as recruiting, its note and what it’s looking for are shown to signed-in players, as are its captain’s name, avatar and Discord profile link.

Your platform IDs and Tracker link are shown only to the staff of an event your team registers for, so they can check eligibility and rank. That’s a league’s staff, or for an independent tournament, the players running it: any player can run their own tournament, and its admins and moderators see the same roster details a league’s staff do for the teams that enter it. They don’t get any other access to your team. Other players, captains, and visitors never see them. Your Discord email is never shown to anyone else.

• To create and manage your Slipstream account and team/league participation.
• To place teams into divisions, generate groups and brackets, and run the season's schedule.
• To display standings, brackets, schedules, and team rosters.
• To let captains find and invite free agents, and manage their roster.
• To resolve disputes and record administrative decisions with an audit trail.
• To communicate with you about registration, matches, or disputes.
• To maintain platform security.

UK GDPR requires a legal basis for each of these. Ours are:

• Contract: running your account, your teams, and the events you enter — we can’t do that without the data in §2.
• Legitimate interests: keeping the platform secure, finding and fixing errors (§5, Sentry), keeping an audit trail of disputes and staff decisions, alerting a league’s staff about disputes, and keeping standings and results as the league’s historical record. We’ve weighed these against your interests, and you can object (§9).
• Consent: optional performance measurement and error replays (§6), and match reminders by Discord DM if you turn them on. You can withdraw either at any time (DMs on your profile).

If your league uses the Slipstream bot, running its events includes posting them in its Discord server (§5): that’s part of the contract basis above.

We do not sell your personal information or share it with advertisers or data brokers.

We share limited data with a small number of service providers who help us run Slipstream, each bound to use it only for that purpose:

A league’s staff channel is a Discord channel that the league’s own staff set up and control. Once a message is posted there, it is visible to whoever that league lets into the channel, and Discord’s privacy policy covers how Discord stores it. The same goes for the bot’s threads: they’re in a server the league controls, its staff can read them, and they stay in Discord after the event.

Transfers outside the UK. Some of these providers (Vercel, UploadThing and Discord, and Neon depending on the hosting region) store or process data in the United States. Where they do, the transfer is covered either by the UK–US data bridge, for providers certified to it, or by the International Data Transfer Addendum to the Standard Contractual Clauses in that provider’s data processing terms. Contact us for more detail on the safeguard for a particular provider.

We don’t share your personal data with advertisers, data brokers, or any party outside this list. We may disclose data if required by law, to investigate a report of abuse, or to protect the safety of players or the platform.

We set no advertising or cross-site tracking cookies. Everything below is first-party. The sign-in cookies are strictly necessary — they exist only to sign you in and keep that session safe, so they can’t be switched off without breaking sign-in, and we don’t ask for consent to use them. The names below are shortened: in your browser the sign-in cookies start with __Secure-next-auth. (the CSRF cookie with __Host-next-auth.), which tells your browser to send them only over HTTPS, and your cookie choice is saved as slipstream.cookie-consent.

Optional — performance measurement. If you accept in the cookie banner, we load Vercel Speed Insights to measure how quickly pages load. It stores nothing on your device and doesn’t identify you; it sends Vercel page timings along with the page address and your device and browser type. It’s not needed to run the league, so it stays switched off unless you opt in. Reject and it never loads.

Optional — error replays. With the same choice, we also load Sentry Session Replay. For one visit in ten, and for any visit where something breaks, it records what happens on the page (clicks, scrolling and page changes) with all text, inputs and images hidden, so we can see how an error happened. Reject and it never loads; withdraw your choice and recording stops.

You can change your mind at any time: Cookie choices in the page footer clears your answer and brings the banner back. Clearing your browser’s site data for Slipstream does the same.

Discord may set its own cookies when you interact with it directly (e.g. during the OAuth redirect); those are governed by Discord’s own privacy policy, not ours.

• Account data: kept while you use Slipstream. If you haven’t signed in for 12 months and aren’t on a team in an event that’s still running, we delete your personal details automatically, the same way as deleting your account (below).
• Discord connections: replaced at every sign-in, and deleted with your account.
• Match and standings data: kept indefinitely as the historical competitive record.
• Moderation records (disputes, admin overrides): retained for the life of the platform.
• Session/request logs: rolling 90 days, then deleted.
• Error reports and replays (Sentry): up to 90 days, then deleted.

Deleting your account preserves de-identified match/stat records (so season history and standings stay intact) but removes your personal identifiers.

Slipstream’s platform-wide minimum age is 13, matching Discord’s own terms (or higher where local law requires) — this is the floor for creating an account at all.

Individual leagues or events hosted on Slipstream may set a stricter minimum age than the platform floor, particularly where prize money, sponsorship, or identity verification is involved. Where an event does this, the age requirement will be stated on that event’s registration page, and registration is conditioned on meeting it. See Slipstream’s Terms of Service for how event-specific eligibility rules interact with prize/payment terms.

If you are in the UK or EU, you have rights under UK GDPR / GDPR, including the right to access, correct, delete, or export your personal data, and to object to or restrict certain processing. To exercise these rights, contact privacy@playslip.stream. We’ll respond within one month.

You can delete your account yourself at any time from your profile page. If you’re a team’s manager, or its captain with teammates still on the roster, you’ll need to hand that role over first.

Because match results, stats, and standings are the competitive record of the league, we can’t retroactively remove your results from a completed match — deleting your account removes your personal identifiers but not the historical record. Messages already posted to a league’s Discord channel are held by Discord and controlled by that league; we can’t recall them.

If you’re unhappy with how we’ve handled your data, you can complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk/make-a-complaint. We’d appreciate the chance to put it right first, so please contact us before you do.

Questions, data requests, or reports about this policy: privacy@playslip.stream.

We’ll update the “Last updated” date above whenever this policy changes, and will post a notice ahead of any change that affects payments.