Privacy Policy

Who we are

Collider (collider.live) is run by Collider Technologies, ABN 25 284 564 407, Victoria, Australia. This policy says what we collect, why, who sees it and how long we keep it. Email hello@collider.live with any question or request.

What we collect from gyms

• Your name, email address and password (stored as a hash we cannot read), or your Google account's name, email and picture if you sign in with Google.
• Your gym's name, address and country, and who is on its team.
• Your Stripe customer and account references, so we can take the yearly plan payment and connect your ticket sales to your Stripe account. Card details go to Stripe; we never see them.
• Sign-in sessions, with the IP address and browser they came from, to keep your account safe.

What we collect from climbers

• When you buy a ticket or register: your name, email, whether you are under 18 and, if so, a parent or guardian's name, your answers to the gym's questions, your ticket code and when you were checked in.
• When you agree to a gym's waiver (on your phone, before your scorecard opens): the time, the waiver's exact words, who agreed, and where the agreement came from: your IP address, your browser and phone as they describe themselves (including the platform and whether it is a phone, when the browser says), their language, the approximate location and network that Cloudflare reads from the IP address (city, region, postcode, country, time zone, an approximate map point, the internet provider and its network number), and a hash of your phone's id. This is the gym's record of who agreed to its waiver.
• When you climb: the sends you log, with the time they were saved, and a random id for your phone so your card can be recovered. Against abuse, your phone's IP address and that id are also kept as hashes, for a short time.
• When you pay: the Stripe payment references and your card's country. Card numbers go to Stripe; we never see them.
• When you ask for your tickets: your email, and a code we send you.

Why

To run the competition you registered for: your ticket, your scorecard, the leaderboard, the gym's check-in list and refunds. To give the gym a record of who agreed to its waiver, when and from where. To take payments and keep the records the law requires. To send the emails listed below. To keep the service safe, with rate limits and sign-in protection. We do not use your data for advertising and we do not sell it.

Emails we send

• To gyms: sign-up confirmation, password reset, account deletion confirmation, staff invitations, and alerts about a disputed payment or a refund that needs attention.
• To climbers: a one-time code when you buy a ticket, look up your tickets or open your scorecard on another phone, your ticket and receipt, and a notice when the gym cancels or refunds.
• If you start a registration and don't pay: one email a day later with the places left, and a link to stop these emails (the gym can turn this email off).
• We send no marketing email.

Who sees your data

• The gym running the competition sees the details of its climbers, their check-in, their results and their waiver records.
• If you start a registration and don't finish paying, the gym sees your email, how many places you picked, the total and when you started.
• Stripe, Inc. processes payments and holds the gym's Stripe account. See stripe.com/privacy.
• Cloudflare, Inc. hosts Collider, stores its data and sends its email.
• Google, if you sign in with Google.
• No advertising or tracking services. The anonymous screen-performance figure stays with Cloudflare, which hosts Collider.

Screen performance

To keep the live board smooth, a TV showing a competition, and a phone watching one, sends us one anonymous figure once it has tuned its effects: the kind of device and browser (for example Android, Chrome, Mali-G78 graphics), its screen size, and how many effects it plays smoothly. It carries no name, email, ticket or result, is not linked to you, and is kept for 90 days.

Cookies and your browser

We set only the cookies the service needs: your sign-in session (gyms); a climber's card key for the competition you joined, kept 30 days; a random id for your phone, kept a year; a short-lived confirmed-email cookie and a ten-minute draft of a booking while you register; a one-hour cookie for a staff invitation you opened. Your browser also keeps your scorecard's unsent sends, your theme choice and a copy of recent cards so they open offline. There are no advertising cookies.

Where your data is

Collider runs on Cloudflare's network. A competition's data is held in a Cloudflare location near the competition's time zone where possible, and may be processed outside Australia, including in the United States and Europe. Stripe holds payment data in its own regions.

How long we keep it

• A competition's climbers, registrations, waiver records and results: until the gym deletes the competition or its account.
• A gym's account: until it is deleted in Settings.
• Deleted data stays in our backups for up to 30 days, then it is gone.
• Payment, refund and dispute records: seven years, as Australian tax law requires, with the buyer's email and the Stripe references.
• One-time email codes: 24 hours. Hashed IP and phone ids used against abuse: days, not months.

Your choices

• Gyms delete their account in Settings, which deletes the gym, its competitions and its climbers' data, except the payment records above.
• Climbers ask the gym to cancel or refund a ticket, and find their tickets at collider.live/tickets.
• To correct a registration, ask your gym; to see or delete what we hold about you, email hello@collider.live and we answer within 30 days.
• If you think we have mishandled your information, email us first; you can also complain to the Office of the Australian Information Commissioner (oaic.gov.au). Visitors in the UK or EU have the rights the GDPR gives them, exercised through the same address.

Security

Passwords and ticket keys are stored as hashes. Connections use HTTPS. Access to production data is limited to the people who run Collider. No system is perfectly secure; if a breach affects you, we tell you.

Children

A climber under 18 registers with a parent or guardian's name, and the gym is responsible for their participation. Collider accounts are for gym staff who are 18 or over.

Changes

We may update this policy. The date at the top says when. For a change that matters to you, we tell gyms by email.