← Back to Squadistry
PRIVATE PILOT POLICY

Privacy Policy

How your information is handled

Effective date:

Draft — not approved for public launch. A responsible operator must fill in legal identity and monitored contact information, verify the practices described, and complete professional review. Adding this page alone does not establish legal compliance.

1. Who controls your information

The proposed operator of Squadistry is . Privacy contact: . Until these fields are completed and reviewed, this is a draft—not a finalized public privacy notice.

2. Data the current website handles

  • Browser data: search preferences, appearance settings, optional self-reported gaming platform names, and draft profile text may be stored in local browser storage. Selected pictures can appear as temporary local previews. Usual weekly play hours can be edited in the profile. They are not shared unless you separately opt in when publishing a pilot listing.
  • Account data if Supabase is connected: your email, a password processed by Supabase Auth, session tokens, a self-reported age group and account identifier. Passwords are submitted to the authentication provider, not stored in the website’s application database. Phone numbers are not requested or transmitted in this version.
  • Profile and image storage: signed-in users can save their gamer name, headline, games, ranks, usual play schedule/time zone, and two private images (avatar and banner) in Supabase. Images are converted to WEBP before upload to remove the original photo metadata. Only the signed-in account owner can retrieve these files under current storage rules. Private pilot data if approved: user-selected listing name, headline, game, broad country, platform, gameplay answers, user-designated dealbreakers and preferences, optional approximate weekly playtime after explicit opt-in, opt-in visibility, interest signals, mutual matches, chat messages, blocks, reports and timestamps.
  • Technical information: hosting and authentication providers can process IP addresses, browser and request information, security logs and service-operation data under their own terms and applicable contracts. The authentication library is loaded from a CDN only when accounts are configured.

3. How information is used

To remember your chosen settings, authenticate your account, save private profiles and images, display opt-in listings to approved members in permitted pilot cohorts, show stated dealbreakers and preferences, calculate compatibility, support mutually approved chat, prevent abuse, handle reports, maintain service security, and respond to requests. The current website does not use personal data for behavioral advertising, sell profile information, or operate an advertising network.

4. Who can see it

Browser-only settings remain on your device. Your saved avatar and banner are private to your account and are not part of the shared listing. Any signed-in account can save and preview an owner-only listing draft. Approved members in your permitted pilot cohort can see your chosen gamer listing and its dealbreakers, preferences and any weekly availability you explicitly choose to share only after you turn on visibility and save. The Copy Link feature includes your account identifier in a URL but does not grant a stranger access: viewing remains subject to account approval, cohort and block checks. Hiding your listing disables future pilot discovery and link access through the same authorization rules. Matched people can view their mutual chat. Authorized staff can access assigned abuse reports and up to 30 recent messages from the reported conversation, with each case view logged; the owner may review all reports. Staff cannot browse unrelated private conversations through the staff portal. The owner can see limited account status information and restricted moderation/audit history. Service vendors may process data for service operations or lawful requests. Do not include real names, school names, phone numbers or exact locations in visible profiles.

5. Service providers and external websites

Cloudflare provides web hosting; Supabase provides optional authentication and storage; a JavaScript CDN may deliver the Supabase client library. These providers may process technical data to deliver their services. Choosing an external LFG link opens that third party's site and its privacy policy. No third-party gaming account data is scraped or imported by the current website.

6. Browser storage, cookies and tracking

The site uses local storage to remember some choices and draft settings. Supabase Auth uses persistent browser session storage when enabled. The current custom code does not install an advertising tracker or analytics SDK. Hosting/authentication providers may set necessary technical cookies or maintain logs. Any future analytics, targeted ads, or new data collection must be assessed and this policy updated before launch.

7. Retention and security

Browser-only draft data remains until you clear it or your browser removes it. Private image files are stored until replaced or deleted under account-data procedures; replacing an image may leave an older unreferenced object until cleanup is implemented. Live account data, messages, reported conversation excerpts, staff access logs, and report records are currently held in the configured database until an authorized operator deletes them or the account records are removed; automated retention or guaranteed deletion deadlines are not implemented. This is a launch blocker requiring a documented retention schedule, secure deletion workflow and vendor verification. Security safeguards include HTTPS hosting when deployed, authentication, database access rules and pilot restrictions; no system can promise absolute security.

8. People under 18

Squadistry does not offer accounts to children under 13 in this pilot. Teen and adult stranger matching is separated in the pilot database, and access depends on independent operator approval—not self-selected age alone. These protections must be tested and independently reviewed before broad access. Parents/guardians should assist minors with account questions as required by law. Do not post school, real-world contact or precise location information.

9. Your privacy choices

You can hide your live pilot profile, block a user, and erase your on-device draft data. See Your Data for local export/deletion tools and the procedure to request cloud access or removal. The operator must implement and test account deletion and request fulfillment before general launch. Additional rights may apply depending on where you live.

10. Tournament event information

Squadistry Tourney, when connected, lets signed-in users save private event drafts and request review. Event drafts can contain a title, game, rules, start time, time zone, event type, participant cap and optional joining instructions. The account identifier is stored internally to identify the organizer. Drafts and pending events are available only to the organizer and authorized operators; after approval, event details (but not the account email) can be visible to any visitor. Do not submit addresses, school names, contact details, paid-entry requests or identifying information. Events require human review before public listing. Event deletion and moderation retention procedures require further operator review.

11. Updates and contacts

Changes to data collection, visibility, service providers, retention or advertising require an updated notice and any legally required consent. Last effective date: . Contact: .

Login security

When login protection is enabled, the service may process a pseudonymous identifier derived from the sign-in email and network source to count failed attempts and apply short cooldowns. The login guard does not store passwords, raw email addresses, or raw IP addresses in its attempt table. The operator must configure appropriate retention and security review before public launch.