Game Day · Legal

Privacy policy

Last updated: September 10, 2026

Draft for owner and legal review. Business contact details and final operating policies must be completed before launch.

Game Day Sports & Entertainment ("Game Day", "we") runs this website so you can find and book sports events, join leagues, and hear about what's coming up. This page explains what we collect, why, and what you can do about it. We follow Canada's federal privacy law (PIPEDA) and anti-spam law (CASL).

What we collect

  • When you book: first name, mobile number, email address, the event you booked, the amount paid, your waiver acceptance time and connection address, and your marketing choices. We also retain the exact waiver text and its document fingerprint accepted for each new booking.
  • Payment: handled entirely by Stripe. We never see or store your card number. Stripe's privacy policy applies to the payment step.
  • When you join the newsletter: your email, optional first name, the consent wording you agreed to, and the time and connection address of the sign-up (so we can prove consent).
  • Leagues: your team or player name and results, which appear on public standings pages.
  • Site usage: page views and booking funnel steps (view, open, checkout, paid) tied to a random session id, plus a first-touch record of where you came from (for example, an Instagram link). This identifier can be associated with a booking and is not fully anonymous. No third-party advertising cookies are configured in this draft.

Why we use it

  • To confirm your booking and remind you before your game (email or text).
  • To tell you when a waitlist spot opens, or if an event is cancelled or changed.
  • To run leagues and publish standings.
  • To send the newsletter, only if you ticked the box.
  • To understand which events people like and how the site is used.

Texts and emails

Booking confirmations, reminders and cancellation notices are operational messages, subject to configured delivery services. Newsletters require consent and include an unsubscribe link. Reply STOP to stop SMS, including operational texts; subsequent operational messages may use your booking email. Promotional follow-ups require the applicable marketing consent and include business identification and an unsubscribe mechanism. We retain delivery status and message content for troubleshooting, subject to the schedule below.

Who we share it with

Only the services that make the site work: Stripe (payments), our email provider (Resend), our SMS provider (Twilio), our hosting provider (Vercel) and our database provider (Supabase). Each is bound by its own privacy terms and only processes data on our behalf. We do not sell or rent your information.

How long we keep it

Draft retention wording — owner, accountant and counsel review required before launch. The configured weekly cleanup removes usage events older than 180 days and pending attempts older than 30 days only when they never crossed the payment-provider boundary and have no dependent recovery records. Terminal message content is minimized after 30 days; unresolved delivery records are preserved, and bounced or complained-about email addresses are retained for suppression. It clears provider error text after 90 days, removes unsubscribed newsletter subscriber rows after 730 days, and clears waiver IP addresses after 730 days. Related contact records, paid bookings, exact accepted waiver text and waiver acceptance timestamps are not automatically deleted by this job. Final retention periods and a deletion/archival process for those records remain to be approved; the application does not implement seven-year automatic deletion.

SMS replies are stored in the owner's inbox. Archived messages are removed after 90 days, except while an outbound reply still needs delivery or recovery. Support items are archived by the owner; handled consent/help commands and ratings are archived automatically. Unarchived conversations remain available for support. Newsletter drafts and uploaded public artwork are retained until the owner arranges removal. Optional AI drafting sends only the owner's writing brief to the configured AI provider; it does not send the customer list, booking history or waiver records. Daily request counters are removed after 30 days. The owner must approve these periods and update this draft policy before launch.

Your choices

  • Unsubscribe from the newsletter using the link in any email.
  • Text STOP to end SMS.
  • Ask us to see, correct or delete the information we hold about you by emailing the address below. We answer within 30 days.

Security

Data is encrypted in transit (HTTPS) and at rest with our providers. Access to the back office needs a private passcode held only by the owner. Card details never touch our systems.

Contact

Questions or requests: [owner email], Game Day Sports & Entertainment, [business address], Ontario, Canada.