Privacy Policy

Who we are

Collider (collider.live) is run by Collider Technologies, ABN 25 284 564 407, Victoria, Australia. This policy says what we collect, why, who sees it and how long we keep it. Email hello@collider.live with any question or request.

What we collect from gyms

• Your name, email address and password (stored as a hash we cannot read), or your Google account's name, email and picture if you sign in with Google.
• Your gym's name, address and country, and who is on its team.
• Your Stripe customer and account references, so we can take the pass payment and connect your ticket sales to your Stripe account. Card details go to Stripe; we never see them.
• Sign-in sessions, with the IP address and browser they came from, to keep your account safe.

What we collect from climbers

• When you buy a ticket or register: your name, email, whether you are under 18 and, if so, a parent or guardian's name, your answers to the gym's questions, the time you accepted the gym's waiver, your ticket code and when you were checked in.
• When you climb: the sends you log, with the time they were saved, and a random id for your phone so your card can be recovered. Your phone's IP address and that id are kept only as hashes, for a short time, to stop abuse.
• When you pay: the Stripe payment references and your card's country. Card numbers go to Stripe; we never see them.
• When you join a waitlist: your name, email and whether you are under 18.
• When you ask for your tickets: your email, and a code we send you.

Why

To run the competition you registered for: your ticket, your scorecard, the leaderboard, the gym's check-in list and refunds. To take payments and keep the records the law requires. To send the emails listed below. To keep the service safe, with rate limits and sign-in protection. We do not use your data for advertising and we do not sell it.

Emails we send

• To gyms: sign-up confirmation, password reset, account deletion confirmation, staff invitations, and alerts about a disputed payment or a refund that needs attention.
• To climbers: a one-time code when you buy a ticket or look up your tickets, your ticket and receipt, a notice when the gym cancels or refunds, and a waitlist notice when a place opens, with a link to leave the waitlist.
• We send no marketing email.

Who sees your data

• The gym running the competition sees the details of its climbers, their check-in and their results.
• Stripe, Inc. processes payments and holds the gym's Stripe account. See stripe.com/privacy.
• Cloudflare, Inc. hosts Collider, stores its data and sends its email.
• Google, if you sign in with Google.
• No analytics, advertising or tracking services.

Cookies and your browser

We set only the cookies the service needs: your sign-in session (gyms); a climber's card key for the competition you joined, kept 30 days; a random id for your phone, kept a year; a short-lived confirmed-email cookie and a ten-minute draft of a booking while you register; a one-hour cookie for a staff invitation you opened. Your browser also keeps your scorecard's unsent sends, your theme choice and a copy of recent cards so they open offline. There are no advertising cookies.

Where your data is

Collider runs on Cloudflare's network. A competition's data is held in a Cloudflare location near the competition's time zone where possible, and may be processed outside Australia, including in the United States and Europe. Stripe holds payment data in its own regions.

How long we keep it

• A competition's climbers, registrations and results: until the gym deletes the competition or its account.
• A gym's account: until it is deleted in Settings.
• Payment, refund and dispute records: seven years, as Australian tax law requires, with the buyer's email and the Stripe references.
• One-time email codes: 24 hours. Hashed IP and phone ids used against abuse: days, not months.
• Waitlist entries: until you leave, or the competition is deleted.

Your choices

• Gyms delete their account in Settings, which deletes the gym, its competitions and its climbers' data, except the payment records above.
• Climbers can cancel a ticket from the ticket page within the gym's refund rules, leave a waitlist from the link in its emails, and find their tickets at collider.live/tickets.
• To correct a registration, ask your gym; to see or delete what we hold about you, email hello@collider.live and we answer within 30 days.
• If you think we have mishandled your information, email us first; you can also complain to the Office of the Australian Information Commissioner (oaic.gov.au). Visitors in the UK or EU have the rights the GDPR gives them, exercised through the same address.

Security

Passwords and ticket keys are stored as hashes. Connections use HTTPS. Access to production data is limited to the people who run Collider. No system is perfectly secure; if a breach affects you, we tell you.

Children

A climber under 18 registers with a parent or guardian's name, and the gym is responsible for their participation. Collider accounts are for gym staff who are 18 or over.

Changes

We may update this policy. The date at the top says when. For a change that matters to you, we tell gyms by email.