Privacy Policy

1. Who we are and what this covers

Danny Wave (“we,” “us,” or “our”) is the US-based operator of dannywave.com. This policy covers the main website, Arena, community polls, merch notifications, the Wavegency waitlist, the wiki, and our related communications. Contact hello@dannywave.com about your information or a person featured on the site. It explains our practices; visiting the site does not itself give consent to optional marketing or tracking.

2. Information you provide

Arena collects your email address, display name, TikTok handle, Epic Games username, and any Discord username you add. We also record email verification, your confirmation that you follow the host, registration and check-in times, lobby or waitlist assignments, game participation, and email preferences. Sign-in uses emailed verification codes. We do not ask for your TikTok, Discord, or Epic Games password.

Merch notification requests include your email and product interest. Polls collect your email, TikTok handle, and choice. Messages to us include the contact details and contents you provide. For prize fulfillment, we may need additional contact or delivery information appropriate to the prize; do not post those details in public chat. The site’s merch notification form does not collect payment-card details or place an order.

Wiki suggestions collect your name, email, request type, related article, subject, details and any supporting sources. We save requests privately and email the full request to Danny for review and possible follow-up. Requests are not automatically published, and submitting does not subscribe you to marketing emails. Contact hello@dannywave.com about access, corrections or deletion.

The Wavegency waitlist collects your email address and TikTok username, plus any streaming stage, time zone and goals you choose to share. We check the public TikTok profile, record your email consent and signup time, save the request, and notify you and Danny. Your device can suggest a time zone, which you can change or clear before submitting. These details help manage the waitlist and plan creator calls; they are not a public member profile.

3. Technical information and browser storage

Our servers process IP addresses, request times, browser information, and security or error logs. Some form submissions include approximate location inferred from IP. The lookup can send your IP address to ipwho.is; a country supplied by the hosting/CDN service may also be used. This is not GPS tracking, and the location can be inaccurate.

Arena uses an essential session cookie with a configured lifetime of 30 days to support sign-in and security. The password-protected replay uses a separate essential, HttpOnly session cookie with access lasting up to two hours. The site also uses cookies or browser storage to remember poll participation, Discord invitation dismissal, and TikTok lookup results. To recover email verification after switching apps or reloading, the site remembers the pending email address and verification step in local storage. This recovery hint is valid for 10 minutes and is cleared on successful sign-in, cancellation, or the next read after expiry; the verification code itself is not stored. Older tournament registration details may remain in your browser from the previous entry form. Analytics uses session storage for a session identifier and campaign attribution. Organizer email drafts are saved in session storage for up to 24 hours to recover unsent work after a refresh, and are cleared after a successful queue submission or sign-out. Session storage normally ends when the tab closes; local storage remains until cleared or replaced. Clearing storage can sign you out or reset preferences, but does not delete server records.

4. Public community information and TikTok photos

The wiki contains public biographies, stream stories, social links, and profile photos. Information comes from community contributions, stream history, and public social profiles or posts. These pages are public and may be indexed, quoted, or cached by search engines and other services. Contact us with the page URL to request a correction or removal, especially for personal or sensitive information.

Arena can display participant names, handles, avatars, results, and giveaway entrants or winners in community views and livestream broadcasts. Contact emails and private account records are for organizers and service providers, rather than public profiles.

We request public TikTok profile information to check handles and obtain profile names and photos. A public-profile lookup is not proof that someone owns an account or follows another account. Photos are cached on our server and periodically refreshed when pages load; TikTok and an avatar fallback service, unavatar.io, may receive the requested handle and our server request. A refreshed photo can change what appears in Arena or the wiki. No TikTok login is required to view a wiki page.

5. Why we use information and our legal bases

We use requested account and event information to provide access, verify email, organize registrations and matches, communicate event changes, and administer results and prizes. Where applicable, this processing is necessary to perform the requested service or take steps at your request before providing it.

We rely on legitimate interests, balanced against your rights, for security, abuse prevention, operational troubleshooting, responding to correspondence, and maintaining accurate community information. We rely on consent for optional marketing and for nonessential tracking where required. Legal obligations may require some records or disclosures. Sensitive personal information requires an additional legal condition where applicable; a public profile is not blanket permission to reuse all personal details.

6. Email and your choices

Arena sends verification codes and service messages about registrations, reminders, lobby access, corrections, and event follow-up. Optional Arena drops and promotional broadcasts have a separate preference. You can change it in your Arena profile or use the unsubscribe link in a promotional email. Unsubscribing from promotions does not prevent messages needed for an account or event you requested. Contact us to stop a merch notification request.

Email delivery uses our configured SMTP provider, including Mailgun. We record sending, delivery, failure, complaint, and unsubscribe information so we can manage messages and suppress unsuitable recipients. Arena currently disables provider open and click tracking. Providers still process delivery metadata, and loading remote images in an email can reveal a request to the image host. Older delivery records may include engagement events received from a provider.

Wavegency waitlist emails cover your confirmation and launch or membership updates you opt in to receive. Use the leave-waitlist link in your confirmation or contact hello@dannywave.com to stop them. We retain a suppression record to avoid signing you back up through a repeated form submission. This preference is separate from Arena and merch.

7. Analytics, advertising, and embedded media

The site integrates Google Tag Manager, Google Analytics, and Meta Pixel when configured. These tools measure page visits, navigation, media interactions, form activity, and campaign performance, and may use cookies, online identifiers, IP addresses, device information, and referral data. Google Tag Manager can load additional tags configured by the operator. Advertising tools may associate activity with information held by their providers.

Spotify players and external services such as TikTok, YouTube, Twitch, Kick, Discord, and music or store platforms have their own privacy practices. An embedded player can contact its provider when loaded; following a link takes you to that provider. Read the Google privacy policy, Meta privacy policy, and Spotify privacy policy.

A sampled performance check measures loading, responsiveness, layout stability, and server response time on public pages. It sends metric values, a public page path without query parameters, a broad mobile/desktop category, and the site release identifier through our existing analytics. It does not collect form contents or element selectors. This specific check does not run when Do Not Track or Global Privacy Control is enabled.

You can manage cookies and site storage through your browser and use the providers’ privacy controls. The site does not currently provide its own cookie-preference panel or a site-wide Global Privacy Control response. Browser controls are not a substitute for consent where required, and this notice does not grant consent to tracking. Contact us about applicable rights to opt out of sale, sharing, or targeted advertising. We do not sell account or contact lists for money; advertising disclosures can qualify as sharing or sale under some laws.

8. Who receives information and international processing

Access is limited as appropriate to Danny Wave and authorized organizers, hosting and security providers, email providers, public-profile and location services, and analytics or media providers described above. Information needed to deliver a prize may be shared with the relevant fulfillment provider. We may disclose information where legally required or necessary to establish or defend legal claims. Public wiki and broadcast information is available to anyone who views it.

The operator is US-based. Information may be processed in the United States and other countries where we or our providers operate, whose protections may differ from yours. Where applicable law requires a transfer safeguard, an appropriate legal transfer mechanism is required. Contact us for information about the recipients and safeguards relevant to your data.

9. Retention and security

Arena accounts are reusable across events, so finishing a tournament does not automatically delete your account. Registration, participation, draw and prize records, delivery history, and consent records are retained as needed to operate events, resolve issues, and document preferences or obligations. Merch requests and poll records are retained for their purpose and related administration. Wiki information remains published until updated or removed. Technical logs and caches have separate operational lifetimes; there is no single automatic deletion period for all records.

You can request deletion by email. We may need limited information to verify that the request concerns you. Some information may need to remain for legal claims, legal duties, or to honor an unsubscribe request. Removing a page cannot erase independent copies or earlier livestream recordings held by other services. We use access controls and other safeguards, but cannot guarantee that an internet service is completely secure.

10. Your privacy rights

Depending on applicable law, you may request access, correction, deletion, restriction, or a portable copy of your information; object to processing based on legitimate interests; and withdraw consent without affecting earlier lawful processing. You can object to direct marketing at any time. Where US state privacy laws apply, additional opt-out, authorized-agent, and appeal rights may be available. We will not penalize you for exercising applicable rights.

Email hello@dannywave.com with your request and the account email or page URL needed to find the information. Do not send passwords. If you disagree with our response, you may ask us to review it and contact the appropriate privacy regulator. In the EEA or UK, you can complain to your local supervisory authority. This site does not use automated decisions producing legal or similarly significant effects; automated checks and random giveaway selection are used to operate the described features.

11. Young visitors

The site is not directed to children under 13. Minors must meet applicable platform and event age rules and obtain a parent or guardian’s permission where required. An email check or TikTok lookup does not verify age. If you believe we hold information about a child who is not eligible to use these features, contact us so we can review and take appropriate action.

12. Updates

We will update this page when our practices change and revise the date above. Where required, we will provide additional notice or request consent. A policy update does not replace consent that the law requires.