Privacy Policy

1. Information we collect

Account and profile information: name, email address, and optional profile photo for organization staff and attendees.

Event and participation data: registrations, check-ins, squad and stage assignments, scores and results (which may appear on leaderboards and scoreboards), membership tier and validity, and practice session records.

Waiver records: the waiver version you signed, a hash of the signed text, your typed name, and a timestamp — retained immutably for compliance.

Payment data: payment processing is handled by Stripe. We receive and store transaction metadata (amounts, status, references to what was paid for) but never full payment card numbers.

Technical data: session identifiers, device pairing records for kiosks and scoreboard displays, log and diagnostic data (including error reports), and IP addresses.

2. How we use information

To operate the Service: running events and scoring, displaying leaderboards, managing memberships, processing registrations and check-ins, and facilitating payments through Stripe.

To communicate: transactional email such as one-time login codes, registration confirmations, payment requests and receipts, and event reminders.

To secure and improve the Service: authentication, fraud and abuse prevention, debugging, and aggregate analytics.

We do not sell personal information.

3. Email preferences and CAN-SPAM

Participant-facing notification emails include a one-click unsubscribe link, honored per notification category, consistent with the CAN-SPAM Act. Transactional messages required to deliver something you requested (for example, a login code or a payment receipt) are not subject to marketing unsubscribe.

4. Cookies and sessions

The Service uses cookies and similar technologies for authentication sessions, security, and remembering device pairings (for example, a kiosk or scoreboard display staying signed in). We do not use third-party advertising cookies.

5. How we share information

With the Organization whose events you participate in: your registration, participation, scores, membership, waiver, and payment status are visible to that Organization’s authorized staff.

Publicly, where the Organization enables it: names and scores may appear on public leaderboards, scoreboards, and tokenized public pages.

With service providers acting on our behalf: Stripe (payments), Microsoft Azure (hosting, storage, email delivery), Sentry (error monitoring), and similar processors bound by contractual confidentiality and data-protection obligations.

For legal reasons: where required by law, regulation, legal process, or to protect the rights, safety, and property of ShotScore, our users, or the public. Records are also retained as required by applicable financial-reporting and audit obligations.

6. Data retention

We retain personal information for as long as needed to provide the Service and for legitimate business and legal purposes. Some records have fixed retention behavior: signed waiver records are immutable; financial transaction records are retained as required by audit and tax obligations; device pairing sessions expire automatically.

7. Security

We use administrative, technical, and organizational safeguards appropriate to the data we handle, including encryption of secrets in a managed key vault, role-based access control, organization-scoped data isolation, and audit trails on sensitive operations. No system is perfectly secure; please use a strong, unique password and protect your login codes.

8. Your choices and rights

You may access and update your profile information through your account, unsubscribe from notification categories via the links in our emails, and contact us to request access to, correction of, or deletion of your personal information, subject to records we are legally required to keep. Depending on your state of residence, you may have additional rights under US state privacy laws; we honor verified requests as required by applicable law.

9. Children

The Service is not directed to children, and we do not knowingly collect personal information from children online. Minors may appear in event rosters only where registered by an Organization consistent with applicable law and parental consent obtained by that Organization.

10. Changes and contact

We will post any changes to this Policy on this page with an updated "last updated" date and, for material changes, provide additional notice where appropriate. Privacy questions and requests: privacy@shotscore.com.