Privacy policy

• A child’s page exists only after their parent or guardian approves it, and shows only what that guardian chose — which can be as little as a jersey number.
• Children never use this service, never have accounts, and we never collect anything from a child. Everything about a child comes from their guardian, with their consent.
• Child pages are unlisted and tagged so search engines don’t index them. No ads, no tracking pixels, no analytics scripts on any child’s page or any checkout — enforced technically, not just promised.
• We never see card numbers or bank details. Payments are handled by Stripe, and donations go to the team’s own Stripe account, not ours.
• We do not sell anyone’s data. There is no version of this product where we would.

Coaches and organisers — an email address and a password (stored only as a hash), the team’s name, and what the fundraiser is for. Organisers also affirm, when creating a fundraiser, that they are authorised to raise money for the team; we keep a dated record of that affirmation.

Parents and guardians — an email address, supplied by the organiser so we can ask your permission. Guardians never need an account: you manage your child’s page through a private link. We record your consent choices — what may be displayed, whether a photo appears — and when you made them.

Children — only what their guardian approves, chosen from: a first name (or a nickname, or just a jersey number), an optional photo the guardian uploads, an optional position and goal. We never collect a child’s last name, birthday, school, email, phone, or address — there is nowhere in the product to even enter them. Children do not use Back The Side; information about a child is provided to us only by their guardian.

Donors — no account, ever. An email address only if you want a receipt, used only to send that receipt. Your payment details go directly to Stripe; we never see or store card numbers. If you leave a message of support, the guardian decides whether it appears.

When an organiser adds a player to a roster, we email that player’s parent or guardian an invitation. Nothing about the child is public at that point. The guardian opens the invitation, chooses exactly what the page may show — including the option of no name and no photo at all — and only then does a page exist. That choice is recorded, and the guardian can change or withdraw it at any time from their private manage link: revoke the page’s link and it stops working immediately, indistinguishably from a page that never existed.

If you received an invitation naming a child who is not on that team, or you didn’t expect one at all, please use the “something isn’t right” link on any fundraiser page — it goes to a person.

• No advertising, and no advertising trackers. Anywhere.
• No third-party analytics or scripts on child pages or checkout pages. Our security policy (CSP) blocks them at the browser level; the only third party those pages may talk to is Stripe, for payment.
• No view counters on a child’s page, and no countdown clocks — data that only ever gets used to pressure families.
• No selling, renting, or sharing of personal data for marketing.
• No email lists. A donor’s receipt email is used for the receipt; a guardian’s email is used to ask permission and for notices about their own child’s page.

Only the services that make the product run, and only what each needs: Stripe processes payments (the team’s own Stripe account receives donations; Stripe’s own privacy policy covers what it collects), Resend delivers our emails, and Vercel and Supabase host the application and database. None of them may use this data for their own purposes. Nothing about a child — no roster, no name, no photo — is sent to Stripe. We will disclose information if the law genuinely requires it, and we report suspected fraud involving fundraisers to law enforcement.

When a fundraiser closes, a deletion clock starts: 120 days later — the card-dispute window — participant records and photos from that campaign are purged automatically. Financial records (donations, refunds, the ledger) are kept longer because money records have to add up and tax rules apply to them. A guardian’s revocation takes effect immediately, without waiting for that clock.

Guardians hold the direct controls: change what a child’s page shows, remove the photo, or revoke the page entirely — no request to us needed. For anything else — a copy of what we hold about you, correction, or deletion — email us and a person will handle it. If you are a parent and believe we hold information about your child that you did not consent to, tell us and we will delete it and investigate how it got there.

Back The Side is used by adults — organisers, guardians, donors — and is not directed at children. Children do not create accounts and cannot submit information. Information about a child appears only when provided and approved by that child’s parent or guardian, who may review, limit, and delete it at any time as described above. If we learn we hold personal information about a child without a guardian’s consent, we delete it.

All traffic is encrypted in transit. Passwords are stored only as modern hashes. Access to data is scoped — an organiser sees roster status, never another team’s data; a guardian’s link controls only their own child’s page. If a breach ever affects you, we will tell you plainly and quickly; anything involving a child’s data is treated as the most serious category we have, regardless of scale.

If this policy changes in a way that matters — anything touching children’s data most of all — we will say so plainly on this page and in the release notes, not bury it. The date at the top is the date of the last change.