Version 1.3 · effective
Privacy Policy
This tells you what FoosLabs LLC, a Texas limited liability company ("FoosLabs", "we", "us"), collects about you when you use the FoosLabs Platform at app.fooslabs.com, why, who else sees it, and what you can ask us to do about it. It is part of your agreement with us, alongside the Terms of Service.
The short version
- We collect what we need to run competitions and nothing else. No street address, no date of birth, no payment details, no location, no health information, no biometrics.
- We do not sell your information, to anyone, for anything. We do not advertise to you, we do not profile you, and there is no advertising or analytics tracking anywhere in this platform.
- Your name and your state are visible to other people using the platform, and so is a display name if you choose to enter one. During a tournament your name also appears on the club's screens at the venue. Your email address and phone number are visible to you, on your profile, and to nobody else — not to other players and not to tournament directors. Your gender is visible to nobody, including you.
- We keep the record of competitions permanently, because it is also other people's record. You can erase what identifies you within it yourself, from your profile, or ask us to; section 10 explains what happens when you do.
The rest of this document is the detail behind those four points.
What changed in this version. It describes three things that are new since version 1.2: the feedback you can send us from inside the platform, and the service that helps you write it (sections 1, 2, 6, 8 and 10); the invitation a club's tablet can send you to finish your account (sections 6 and 12); and that a profile created for you at a club's tablet is kept and erased like one a director created (section 8).
1. What we collect
What you give us when you register. Your legal name, your email address, your phone number, the state you live in, your gender, an optional display name, and a password. We do not ask for your street address, your city, or your date of birth.
What a tournament director may enter for you. If you arrive at a tournament without an account, the director running it may create a player profile for you so you can play: your name, your phone number and the state you play in, typed by the director. They do not enter your email address or your gender, and you accept nothing on their screen. The director cannot see your phone number again once it is entered; nobody can, except you once you register. If you later register with the same phone number, your registration is joined to that profile, so your results stay yours.
What you create by using the platform. Which tournaments and events you signed up for, when you were checked in and by whom; the matches and games you took part in and what they scored; results you reported; corrections and disputes involving you; and a record of each agreement you accepted, when, and the exact words you were shown.
What you send us as feedback. If your role lets you send feedback from the Menu, we keep what you write, the questions our assistant asked and your answers, the summary you confirmed, the page you were on, the tournament it was about, and which of your roles you held. Sending feedback is optional, and nothing in the platform depends on it.
What comes with signing in. Our authentication provider records your sign-ins and keeps security logs that include the IP address you connected from. We use cookies to keep you signed in. They are the only cookies we set — there are no advertising cookies, no analytics cookies, and no third-party tracking of any kind. When you register or sign in, an "I am human" check runs in your browser (section 6).
What we do not collect: payment card or bank details (no money passes through this platform), precise location, biometric or genetic data, health information, racial or ethnic origin, religious beliefs, political opinions, or your date of birth.
2. Why we collect it
| What | Why |
|---|---|
| Legal name | To identify you in a competition and on a result that stands as a record |
| Email address | To confirm your account, to sign you in, to recover it, and to send you notices about your account and these agreements. It is currently the only way to prove an account is yours |
| Phone number | So that an organizer can reach you about an event; so that a profile a director entered for you can be joined to your account when you register; and — only if you turn them on — to send you text messages about your events and matches. It is never used for marketing |
| State | So that two players with the same name can be told apart at a large event. It is shown beside your name |
| Gender | For one thing only: working out whether you are eligible for an event that is restricted by gender. See section 4 |
| Display name | An optional nickname. If you enter one, it is shown to other people using the platform beside your name. It is not displayed anywhere in the current release |
| Password | To sign you in. It is stored by our authentication provider as a one-way hash and we cannot read it |
| Competition records | To run events, produce standings, resolve disputes, and keep an accurate record of what happened |
| Acceptance records | To hold evidence that you agreed to these documents and to know which words you were shown |
| Sign-in and security logs | To keep accounts secure and to investigate misuse |
| Feedback | To find out what is broken, confusing or missing, and to decide what to build next |
3. What we do not do with it
- We do not sell your personal data. Not to anyone, under any definition of "sell", including sharing it for another company's advertising.
- We do not use it for targeted advertising, ours or anybody else's.
- We do not profile you in any way that produces legal or similarly significant effects.
- We do not use it to train anything.
- We do not send you marketing messages you did not ask for.
Because we do not sell sensitive or biometric personal data, the specific sale notices Texas law requires in that case do not appear here. If that ever changes, this document changes first and you will be told.
4. Gender, specifically
We ask for your gender for one reason: some events are restricted by gender, and the platform has to know whether you are eligible before it lets you enter one.
- It is not shown to other players, not to tournament directors, and not on any public view.
- It is not readable by anything on your device either, including by you. The platform's read permissions do not include that field for anyone.
- It is never shared and never sold.
- You cannot change it yourself. If it is wrong, write to us and we will correct it, and we will record that we did.
Some states treat information of this kind as sensitive. We treat it that way everywhere, regardless of where you live.
5. Who can see what
Other people using the platform can see your name, your state, and your display name if you entered one, beside your entries, your results and the standings of a published tournament. That is the whole of it.
At the venue, while a tournament is on, the club may show the sign-ups, the matches, the standings and the bracket on a screen (a TV) and on a tablet that players use to sign up and enter results. Those screens show your name — usually your first name — to anyone in the room or holding the screen's link, and the tablet's sign-up search also shows the state beside a name, so two people with the same name can tell which one they are. They never show your email address, your phone number or your gender. If you look yourself up on the club's tablet by phone number, the tablet records that a search was made, not the number you typed. The display name is not shown anywhere in the current release; when it does appear, this is where it appears.
An organizer or tournament director running an event you entered can see that you entered, whether you have been checked in, and your results in that event. They do not get your email address, your phone number or your gender through the platform — including a phone number they typed in themselves when they entered you. If they need to reach you, they ask you.
You can see your own email address, phone number and display name on your profile. Nobody else sees your email address or your phone number through the platform, and nobody, including you, sees your gender.
Changing your own email address or phone number is not built yet. Until it is, write to us and we will change it for you. We would rather say this than let you assume otherwise.
6. Who we share it with
We use a small number of service providers to run the platform. Each receives only what it needs, and none of them is permitted to use your information for their own purposes.
| Who | What they get | What for |
|---|---|---|
| Supabase | The database contents and your authentication details, including your email address and password hash | Hosting the database and running sign-in. This is where your information lives |
| Vercel | Web requests to the application | Hosting and serving the application |
| Resend | Your email address and the message being sent | Sending you confirmation, sign-in, recovery and agreement notices, and an invitation to finish your account if you ask for one at a club's tablet. The address you type for that invitation is not kept |
| Cloudflare (Turnstile) | Signals from your browser, including your IP address, when you register or sign in | The "I am human" check that keeps automated sign-ups and password guessing out. It does not receive your name, email address or password |
| Anthropic | The words of a feedback conversation, the page it was sent from, and the names of your roles. Not your name, email address or phone number | Asking you follow-up questions about your feedback and summarising it. Anthropic does not train its models on it, and deletes it within 30 days unless it must keep it longer to enforce its usage policy or by law |
We also share information when the law requires it — a valid legal request, a court order, or where we must to protect someone's safety or to establish or defend a legal claim. If our business is sold or merged, your information may transfer with it, and this document travels with it until it is replaced.
We do not share your information with organizations running events beyond what section 5 describes, and we do not hand any list of players to anyone.
7. Where it is kept, and how it is protected
Your information is stored in the United States.
We do not think a privacy document is the place for security theatre, so here is the substance of it. Access to every table is denied by default and permitted only by a named rule, enforced in the database rather than in the app, so a mistake in the application cannot open a door the database keeps shut. Reading a player's record is restricted to specific columns, which is why your contact details are unreadable to every client. The records that matter as evidence — what you accepted, the history of a result — cannot be altered or removed by anything the application can do; they are protected by the database itself. Nobody can bulk-delete anything.
No system is perfectly secure, and we will not tell you otherwise. If a breach affects you, we will tell you as the law requires and as we would want to be told.
8. How long we keep it
- Competition records are kept indefinitely. A result is also the other players' record, and standings are built from history. Deleting one person's results would falsify everyone else's.
- Acceptance records are kept indefinitely. They are the evidence that you agreed, and evidence that can be removed is not evidence.
- Account details — name, email, phone, display name, gender — are kept while you have an account, and until you remove it or ask us to erase them.
- A profile a director created for someone who never registered — a name, a phone number and a state — is erased 24 months after it was last entered in a tournament. The club's organizer is told the month before, so a returning player can be entered again before it goes. What is erased, and what stays, is as section 10 describes.
- A profile created for you at a club's tablet is kept and erased exactly like one a director created.
- Feedback is kept while you have an account. If you remove your account, the words of your feedback are erased (section 10).
- Sign-in and security logs are kept for as long as our authentication provider retains them, which is a limited period.
9. Your rights
Wherever you live, you may ask us to:
- Confirm whether we hold information about you, and get a copy of it;
- Correct anything that is wrong;
- Erase what identifies you — you can do this yourself; section 10 explains what happens;
- Get a portable copy of the information you gave us, in a usable format;
- Opt out of the sale of your personal data, targeted advertising, or profiling. We do none of those, so there is nothing to opt out of, but the right exists and we will honour it if that ever changes.
How to ask. Email privacy@fooslabs.com. That is the address for all of it — access, correction, erasure, a copy, or an appeal.
What happens next. We will respond within 45 days. If the request is complicated we may take another 45 days, and we will tell you before we do. We may need to verify that the request is really yours — if we cannot verify it, we will say so rather than act on it.
If we say no, we will tell you why, and you may appeal by replying to that decision or by writing to privacy@fooslabs.com with "appeal" in the subject. We will answer an appeal within 60 days. If we turn down your appeal, you may complain to your state's attorney general; in Texas, that is the Office of the Attorney General's consumer protection division.
We will not treat you differently for exercising any of this.
10. Erasure
You can remove your account yourself, from your profile, under Remove my account. It takes two deliberate steps: the page tells you what will be erased and what will stay, and you confirm that you understand it cannot be undone. It happens immediately.
Or write to privacy@fooslabs.com and ask us to erase you, and we will — for an account, or for a profile a director created for you. We will check first that the request is really yours, and we will tell you plainly what will happen and what will not — before we do anything, not after.
What we erase. Your name, your display name, your email address, your phone number and the state you play in are overwritten or removed — everywhere we hold them, including the copies our authentication provider keeps with your sign-in, anything you typed into a registration you never finished, and the words of any feedback you sent. Your account is closed and cannot sign in again. Your gender, if you gave us one, is reset to prefer not to say.
What stays, and why. Your results stay. A standings table is arithmetic over matches that were played — removing your games would not make you private, it would make everyone else's record wrong. So the tournaments you entered, the matches you played, the games and scores, any dispute you or somebody else raised, and any role you held at a club all remain. Your club memberships remain too. All of it stays attached to a record that no longer carries your name, your address, your phone or your location. It names nobody.
Your acceptance of these documents also stays. It is the proof of what we showed you and when, and we cannot alter it — not even deliberately. It points at the same nameless record as everything else.
It cannot be undone. There is no restore and no second copy of what was overwritten. That is why we tell you first.
Backups. Our database provider keeps automatic snapshots. Rows as they were before your erasure remain in those snapshots until they age out of the provider's retention window. We do not go into snapshots to remove individual people, and we will not tell you we have.
How long it takes. Removing your account from your profile is immediate. A request by email is handled by hand, and we will confirm to you when it is done.
We will not treat you differently for asking.
11. Children
This platform is for adults. You must be 18 or older to hold an account, and section 2 of the Terms of Service says so. We do not knowingly collect information from anyone under 18, we do not ask for anyone's date of birth, and we do not direct any part of this platform at children.
If we learn that an account holder is under 18, we will close the account and erase what identifies them.
12. Messages we send you
We send email about your account: confirming your address, signing you in, recovering access, an invitation to finish your account if you ask for one at a club's tablet, and telling you when one of these agreements changes.
These are not marketing and you cannot opt out of them. A notice that the agreement you are under has changed travels the same way a password reset does, because the people who would switch such notices off are exactly the people whose only record of what they agreed to is the acceptance the notice is about.
Optional messages — anything about your events, your matches or reminders — are a separate matter. They are off unless you turn them on, they live in your account settings, and they never gate your account or your entry to anything. If you turn on text messages, standard message and data rates may apply and you can stop them at any time. None of them are in operation today.
13. Changes to this Policy
We keep every version of this document, including the exact words shown to you when you accepted it.
- We publish a new version before it takes effect, normally 30 days before.
- Everyone holding an acceptance of an older version is told it changed. You cannot opt out of that notice.
- For most changes we do not ask you to accept again; your acceptance stands as the record of what you agreed to.
- If we change something that alters what you are agreeing to, we will ask you to accept the new version before you carry on.
14. Contact us
FoosLabs LLC5900 Balcones Drive #8428Austin, TX 78731
Privacy requests and questions: privacy@fooslabs.comGeneral and account: support@fooslabs.comLegal notices: legal@fooslabs.com