Draft — legal review required
This Privacy Policy is starter text for organizers. It is not legal advice. Have qualified counsel review and replace it before you rely on it. An internal checklist lives in the repository at docs/legal-review-privacy.md.
Privacy Policy
Last updated: May 13, 2026
This policy describes how Celestial Circuit (“we”, “us”) handles personal information when you use our race hub website, create a hub account, or submit signups. For race rules and public participation terms, see Race rules and public terms.
What we collect
- Account and authentication — If you use email sign-in, our provider (Supabase Auth) stores your email address and issues your user id. We use magic links sent to that email; we do not manage passwords in this app.
- Hub profile — We store your user id and a hub role (for example participant or suspended) tied to your account.
- Team signup — Team name, Discord handle(s) for the captain and teammates, optional contact email, and any notes you enter on the form.
- Marshal signup — Display name, Discord handle, preferred system, availability, experience level, and optional notes.
- Staff access — If you are granted organizer or staff access, allowlists may store your email to authorize controller tools.
- Technical data — Like most sites, hosting providers and our database vendor may process IP addresses, timestamps, and diagnostic logs when you use the service.
Why we use it
- Operating hub accounts and magic-link sign-in.
- Processing and reviewing team and marshal signups.
- Running races: coordination, verification, safety, and fraud or abuse prevention.
- Communicating about your signup or account when needed.
Who we share with
We use service providers (“subprocessors”) to run the site, including Supabase for authentication and data storage. When configured for operations, Discord may receive limited notifications derived from database events (for example new signup rows). Email magic links are sent through infrastructure tied to our auth provider. We do not sell your personal information.
Retention
We keep information as long as needed to run the event series, meet legal obligations, and resolve disputes. Exact retention can depend on signup status and organizer practice; contact us if you need a specific record handled.
Your choices and rights
Depending on where you live, you may have rights to access, correct, delete, or export personal data, or to object to certain processing. To exercise those rights or ask questions about this policy, email [email protected]. We may need to verify your request before acting on it.
International users
Our providers may process data in the United States or other regions. If that involves international transfers, we rely on appropriate safeguards required by applicable law once confirmed by counsel.
Children
The hub is intended for community participants able to contract or participate with any consent your region requires. If you believe we have collected a child’s data in error, contact us and we will address it.
Changes
We may update this policy from time to time. We will post the new version on this page and update the “Last updated” date unless counsel directs a different notice process.
