Wise Scoring – Privacy Policy

1. Information We Collect

Wise Scoring collects only the information necessary to operate our scoring, competition management, and authentication services.

a. Information You Provide

We collect information you voluntarily provide, including:

• Account information — name, date of birth, email address, password, and optional phone number when you create a Wise Scoring account (required for meet administrators, competition managers, and system administrators).
• Competition information — when managing a competition, you may provide event details, location, and related data for public display.
• Athlete information — athlete names, gender classification, and team affiliations are entered by meet administrators.
• Feedback and support messages — any information you submit via contact forms or email.

b. Information Automatically Collected

When you visit or use the Site, we may collect:

• Browser type, device information, IP address, and usage data for analytics and security purposes.
• Cookies and session data to maintain secure logins and remember preferences. We do not use third-party tracking cookies for advertising.

c. Information from Competitions

Competition results are public by nature and may include athlete names, teams, and competition groups. Wise Scoring does not publish or distribute athlete birthdates. Birthdates are stored only for legitimate administrative use (e.g., to verify athlete division eligibility) and are visible only to meet managers or system administrators. When results are published, only the generic age range (competition group) is shown — not the athlete's specific age or birthdate.

2. How We Use Information

We use collected information to:

• Operate and maintain the Wise Scoring system.
• Authenticate and authorize user access using secure tokens.
• Verify that account holders meet the minimum age requirement (18+) for account creation and administrative access.
• Display live and historical competition results.
• Communicate with account holders about their competitions or technical support.
• Provide official score submissions to governing bodies and National Organizing Committees (see Section 5).
• Improve our services and protect against unauthorized access or misuse.

We do not sell or rent user data.

3. Authentication and Security Model

Wise Scoring uses a token-based authentication system designed for privacy and security:

• Access Tokens (JWTs) — short-lived (≈10 minutes) tokens used to authenticate API requests.
• Refresh Tokens — securely stored, opaque tokens that allow continued access without re-login.
• Both are delivered via Secure, HttpOnly cookies to prevent client-side access.
• Judges use one-time competition-specific codes that never expose personal data.
• Tokens contain only minimal claims (user ID, roles, optional competition ID); personally identifiable information (PII) is never embedded inside tokens.

This system limits stored data to the minimum necessary for account and session management.

4. Athlete Data

Wise Scoring stores basic athlete data such as:

• Name, gender classification, team affiliation, and age range (competition division).
• Competition participation, round results, and scores.

This data is entered by meet administrators and is publicly viewable in scoreboards, rankings, and result books as required by standard gymnastics scoring procedures.

However:

• Athlete birthdates are never displayed publicly or shared outside competition administration.
• Birthdate data is used only to determine appropriate age divisions and eligibility and is accessible only to meet managers and system administrators.

In the future, athletes may be able to claim their profile to view their personal competition history and receive score notifications. For athletes under 18, parent or guardian consent will be required to create or link an account.

5. Data Sharing

We may share limited data only with:

• Competition organizers (for event management).
• National Organizing Committees (NOCs) such as USA Gymnastics (USAG) or equivalent governing bodies, for official score submissions, qualification tracking, and regulatory compliance.
• System service providers (for secure hosting, storage, and analytics).
• Legal authorities, if required by law, court order, or to protect rights or safety.

We never sell data to advertisers or unrelated third parties.

6. Cookies and Tracking

We use strictly necessary and functional cookies for:

• Authentication (Access and Refresh tokens).
• Session continuity.
• Security and fraud prevention.
• Basic analytics (e.g., traffic volume, error rates).

You can disable non-essential cookies in your browser settings, but doing so may affect login or site performance.

7. Data Retention

We retain data only as long as necessary to:

• Provide competition and scoring services;
• Maintain historical competition records; or
• Comply with legal obligations.

User accounts can be deleted upon verified request (see Section 10). Competition results, however, are retained as part of public historical records.

8. Children's Privacy

Wise Scoring allows minors to view public competition data (scores, rankings, schedules). However:

• Only adults (18+) may create accounts or manage competitions.
• If an athlete under 18 later claims a profile, we will require verifiable parental or guardian consent before activation.

We do not knowingly collect personal information from children under 13 without such consent. If you believe we have done so inadvertently, contact us and we will remove the information.

9. Data Security

We implement industry-standard security controls including:

• Encrypted HTTPS transport.
• Secure cookie handling (Secure, HttpOnly, SameSite).
• Password hashing with strong algorithms (bcrypt or Argon2).
• Token rotation and reuse detection to prevent session hijacking.
• Regular audits and key-rotation procedures.

Despite these measures, no system is completely secure, and we cannot guarantee absolute protection of your information.

10. Your Rights and Choices

Depending on your location and applicable law, you may have the right to:

• Access, correct, or delete your personal information.
• Request a copy of your stored data.
• Withdraw consent where applicable.

For deletion or data requests, contact privacy@wisescoring.com. We may need to verify your identity before fulfilling requests.

11. International Users

Our systems are operated in the United States. If you access the Site from outside the U.S., your data may be transferred to and processed in the United States, where privacy laws may differ from those in your country.

12. Changes to This Policy

We may update this Privacy Policy periodically. When we make changes, we will update the "Effective Date" and post the new version on this page. Your continued use of the Site after changes constitutes acceptance of the updated Policy.

13. Contact Us

If you have questions or concerns about this Privacy Policy or your data, contact us:

Email: privacy@wisescoring.com