Privacy Policy

We collect the following categories of information:

• Account information you provide — your name and email address when you create an account or sign the liability waiver.
• Game activity — the games you reserve, attend, or cancel, and your account balance and wallet transaction history.
• Payment information — when you add funds, card details are entered directly with our payment processor (Stripe). We do not see or store your full card number; we receive only a token, the last four digits, and the result of the charge.
• Waiver records — the version of the liability waiver you accepted and the date you accepted it.
• Messages you send us — the name, email, and contents of any message submitted through our contact form.
• Technical and usage data — your IP address (used for rate-limiting and abuse prevention), browser type, device information, and pages viewed, collected automatically as you use the Service.

We use your information to:

• Create and manage your account and authenticate you when you sign in.
• Reserve your spot in games, manage waitlists, and send game confirmations, reminders, and cancellation notices.
• Process payments, maintain your wallet balance, and issue refunds.
• Maintain a record that you accepted the liability waiver.
• Respond to your messages and provide support.
• Protect the Service against fraud, abuse, and spam (including rate-limiting and bot checks).
• Understand how the Service is used so we can improve it (analytics — only with your consent; see “Cookies and analytics” below).
• Comply with our legal obligations.

We use a small number of strictly necessary cookies and similar technologies that are required for the Service to function — for example, to keep you signed in. These are always on because the site cannot work without them.

We also use Google Analytics to understand how visitors use the site. Analytics cookies are off by default. We load Google Analytics using Google Consent Mode, which means no analytics cookies are set and no analytics data is collected until you opt in through our cookie banner. You can change your choice at any time using the “Cookie settings” link in the footer.

We do not sell your personal information. We share it only with service providers who help us run the Service, and only as needed:

• Supabase — database, authentication, and hosting of your account data.
• Stripe — payment processing for adding funds. Stripe handles your card data under its own privacy policy.
• Resend — sending transactional email (confirmations, cancellations, account notices).
• Cloudflare — DNS and bot-protection (Turnstile) on forms.
• Google Analytics — usage analytics, only after you consent.
• Fly.io — application hosting.

We may also disclose information if required by law, to enforce our Terms of Service, or to protect the rights, safety, and property of our members, the public, or us.

We keep your account and transaction records for as long as your account is active and as long as needed to provide the Service, resolve disputes, and meet legal, tax, and accounting requirements. Waiver acceptance records and payment records may be retained after account closure where we have a legal or liability reason to do so. You may request deletion of your account as described below.

Depending on where you live, you may have rights over your personal information, including the right to:

• Access the personal information we hold about you.
• Correct inaccurate information — you can update your name and email in your account settings.
• Request deletion of your account and associated personal information.
• Opt out of analytics at any time via the cookie banner or the “Cookie settings” footer link.
• Unsubscribe from non-essential email (note: we may still send essential account and game notices).

We do not sell or “share” personal information for cross-context behavioral advertising, and we do not discriminate against you for exercising your rights. To make a request, contact us through our contact page.

We use industry-standard measures to protect your information, including encrypted connections (HTTPS), scoped database access controls, and delegating card handling to Stripe. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

The Service is intended for adults and is not directed to children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us and we will delete it.

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above. Material changes will be communicated through the Service. Your continued use after an update means you accept the revised policy.

If you have questions about this Privacy Policy or your personal information, please reach out through our contact page.