Primal Defender Challenge
Privacy Policy
Version 1.0 · Effective July 29, 2026
1. What we collect
- Account data (via our authentication provider, Clerk): email, display name, and any social-login profile info you authorize.
- Athlete profile data you provide: date of birth (used only to compute your age division — never displayed), sex, country, and optionally state/province, city, height, weight, occupation/service tags, crew/affiliation, and profile photo.
- Challenge data: submitted scores, levels, categories, timestamps, witness names you provide, and verification videos you upload.
- Payment data: processed by Stripe; we receive transaction status and receipt info but never your card number.
- Technical data: standard server logs and privacy-respecting site analytics. We do not run third-party advertising trackers.
2. What is public
The leaderboard is public by design. If your profile is public (the default, disclosed at signup), the following are visible to anyone: display name, profile photo, country/state/city as you provided them, age group (band, not birth date), sex division, crew, occupation tags, scores, levels, percentile bands, verification status, and verification videos unless marked “review only.”
Your email, date of birth, height, and weight are never publicly displayed. You can set your profile to private at any time, which hides you from public boards while keeping your private history.
3. How we use data
To operate the Challenge (rankings, percentiles, divisions), review verification videos, generate share cards you choose to share, prevent cheating and abuse, process payments, send transactional email (receipts, review outcomes, season notices), and — only if you opt in — send marketing email about the Primal Defender brand.
4. Service providers
We share data only with processors needed to run the Service: Clerk (authentication), Convex (database/backend), Vercel (hosting), Stripe (payments), Mux (video storage/streaming), and our email provider. Each receives only what its function requires. We do not sell personal information.
5. Retention & deletion
Account data is kept while your account is active. You may delete your account from your dashboard or by emailing steven.barrow@patronusenergy.com; we delete or de-identify personal data within 30 days, except records we must retain for legal, payment, or integrity purposes. Public scores may persist in de-identified form (e.g., “Athlete removed”) to preserve historical rankings.
6. Your rights
Depending on your jurisdiction (e.g., California, EU/UK), you may have rights to access, correct, delete, or export your data, and to object to certain processing. Requests: steven.barrow@patronusenergy.com. We honor verifiable requests within the timelines required by applicable law. We do not discriminate for exercising rights.
7. Age
The Service is for adults 18+. We do not knowingly collect data from anyone under 18; if we learn we have, we delete it.
8. Security
Data is encrypted in transit; access to review tooling is restricted to authorized reviewers. No system is perfectly secure; report concerns to steven.barrow@patronusenergy.com.
9. International
Data is processed in the United States. If you use the Service from elsewhere, you consent to U.S. processing.
10. Changes
We'll post updates with a new effective date and notify you of material changes.
Contact
steven.barrow@patronusenergy.com · [ADDRESS]