Account & privacy

Your account

TotalUp accounts are host-only. One email, one password, one set of leagues. There's no separate "player" account, players participate through the public URL and don't need to sign in.

Changing your password. Use the Forgot password link on the sign-in page. You'll receive a reset link by email. For security, we always show the same confirmation message whether or not the email is registered, so don't worry if the copy feels ambiguous.

Changing your email. Not yet available in the MVP. If you need to move a league to a new address, email us from the current address and we'll migrate it.

Deleting your account. Also not yet self-service. Send us a deletion request and we'll remove your account and all associated leagues, sessions, teams, and scores. Public URLs will 404 once deleted.

Profile settings

Click your name in the top-right and choose Profile settings to control how you appear on your public league pages:

Display name - shown on every public standings page as "Hosted by [you]." Leave blank to fall back to your account name. This is the fastest way to use a stage handle without changing your account identity.
Website - optional link rendered next to your display name (opens in a new tab).
Bio - optional short blurb, up to 500 characters, shown under your name on the public league page.
Avatar - upload a JPG, PNG, or GIF up to 2 MB. Shown on public pages and in the top-right of the app. Remove the current avatar with the trash icon.

Nothing you set here is required; the public page degrades gracefully (initial in a circle instead of an avatar, account name instead of display name, etc.).

Archiving leagues. A league you're done running can be archived from its edit page. Archived leagues disappear from your main dashboard grid; reveal them again with the "Show N archived leagues" toggle at the bottom of the dashboard, and un-archive directly from the card with one click.

What we store

We store the minimum needed to run the product:

Your name, email, and profile fields (display name, website, bio, avatar path) — host identity.
A hashed password (we can't read it).
The leagues, sessions, teams, and scores you create.
Basic timestamps (when things were created, verified, finalized).

We don't track players. Visitors to public pages are not identified, and we don't run third-party analytics on those pages.

Privacy in practice

Your email is never shown on any public page.
Your draft sessions are never shown on public pages.
Teams on public pages are labeled with the team names you entered, so if you type a team name that includes a real full name, it'll appear publicly. Use nicknames if a team cares.
Your profile bio and website are public, only write things there you're comfortable sharing broadly.

Our full Privacy Policy has the legally precise version. This page is the plain-English summary.