Privacy Policy

This Privacy Policy explains what personal information Smasher.ca (the "Service") collects, why we collect it, and the choices you have. We handle personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial law.

1. Information we collect

When you register and use the Service, we collect: your email address; your phone number; your region/city; your birth year and birth month (we store only year and month, never your full date of birth); your display name and, optionally, gender; the invitation that brought you in and who invited you; and your activity such as the groups you join and the match scores you record. We also collect limited technical information (such as device/browser details) needed to operate and secure the Service.

2. How we use your information

We use your information to: create and secure your account; verify your email and phone; let you join groups, organise play, and record matches; operate the invite-only community; show region-level participation insights to administrators and venue partners (in aggregate, not your personal contact details); and communicate with you about your account.

3. Consent

We rely on your consent to collect and use your information for these purposes, which you provide at registration through the consent checkboxes. You can withdraw consent (subject to legal and contractual limits) by contacting us, though some withdrawals may mean we can no longer provide the Service.

4. SMS and email messages

We send one-time verification codes and account-security messages by email and SMS. By registering you consent to receive these messages. Standard carrier rates may apply to SMS. Optional product and community updates are sent only if you opt in, and you can opt out at any time.

5. Service providers

We use trusted third-party providers to run the Service, including hosting and database/authentication (Supabase, Vercel), email delivery (Resend), SMS verification (Twilio), and, for any future payments, a payment processor (Stripe). These providers process information only to provide their services to us. We do not sell your personal information. Some providers may store data outside Canada; we take reasonable steps to ensure comparable protection.

6. Storage & security

We apply technical and organisational safeguards, including row-level access controls, to protect your information. We will take reasonable steps to protect your data and to minimise the impact of any security incident; however, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a breach affecting your information occurs, we will respond and notify you and the appropriate authorities as required by law.

7. Retention

We keep your information for as long as your account is active and as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. When no longer required, we delete or anonymise it.

8. Your rights

You may request access to the personal information we hold about you, ask us to correct it, or request deletion of your account. Certain identity details are updated through an administrator-handled support request. To make a request, contact us at the address below.

9. Children

The Service is currently for adults (18+). We do not knowingly collect information from children. A dedicated parent/guardian-managed process for members under 14 — with verified parental consent — will be introduced before any minor is permitted to participate. If you believe a minor has provided information without parental consent, contact us and we will remove it.

10. Changes to this Policy

We may update this Privacy Policy at any time. The current version is always posted on this page with the "Last updated" date above, so please check back periodically. For significant changes we will make reasonable efforts to notify members.

11. Contact

For privacy questions or to exercise your rights, contact us at supportsmasher.ca@gmail.com.