Privacy Policy

1. Who We Are

GameDaySnap (“GameDaySnap,” “we,” “us,” or “our”) operates the GameDaySnap marketplace platform at gamedaysnap.com and associated mobile applications. We are the data controller responsible for your personal information.

Contact: For privacy questions or requests, email us at privacy@gamedaysnap.com or write to: GameDaySnap, Privacy Team, [Address], United States.

2. Information We Collect

2.1 Information You Provide Directly

• Account registration: Full name, email address, password (stored as a bcrypt hash — never in plain text), and optional profile information (bio, website, Instagram handle) for Photographers.
• Purchases: Email address for download link delivery. Payment information (credit card numbers, bank details) is processed directly by Stripe, Inc. and is never stored on GameDaySnap's servers.
• DMCA / Legal Requests: Name, email, phone number, and information provided in takedown notices.
• Support communications: Content of emails or messages you send to us.
• Legal agreements: Timestamps and records of legal checkboxes agreed to by Photographers at registration (for legal compliance purposes).

2.2 Information Collected Automatically

• Usage data: Pages visited, search queries entered (state, city, sport, team, date), gallery views, photos selected, and time spent on pages.
• Device & browser data: IP address, browser type and version, operating system, device type, and screen resolution.
• Cookies & similar technologies: Session cookies (required for login), preference cookies (optional, to remember search settings). We do not use advertising tracking cookies. See Section 9 for cookie details.
• Server logs: Automatically collected by Netlify (our hosting provider) and Supabase (our database provider), including IP addresses and request timestamps. These logs are retained for up to 90 days for security purposes.

2.3 Information from Third Parties

• Google OAuth: If you sign in with Google, we receive your name, email, and Google profile picture. We do not receive your Google password.
• Stripe: We receive confirmation of payment status, last 4 digits of the card used, and Stripe customer/account identifiers. We do not receive full card numbers.

3. How We Use Your Information

• To create and manage your account;
• To process photo purchases and deliver download links;
• To onboard Photographers and manage their Stripe Connect payouts;
• To display gallery search results matching your search criteria;
• To send transactional emails (purchase confirmations, download links, DMCA notices);
• To enforce our Terms of Service and investigate violations;
• To comply with legal obligations, including COPPA, DMCA, and tax reporting;
• To improve Platform performance, fix bugs, and develop new features;
• To detect and prevent fraud, abuse, and security threats;
• To respond to your support requests or legal notices.

We do not sell, rent, or share your personal information with advertisers. GameDaySnap does not display advertising and does not have advertising partners.

4. Legal Basis for Processing (GDPR / EEA Users)

If you are located in the European Economic Area, our legal bases for processing are:

• Contract performance: Processing necessary to fulfill your purchase or Photographer agreement;
• Legitimate interests: Security monitoring, fraud prevention, platform improvement;
• Legal obligation: Tax reporting, DMCA compliance, law enforcement cooperation;
• Consent: Optional preference cookies (which you may withdraw at any time).

5. Information Sharing & Disclosure

We share personal information only in these limited circumstances:

• Stripe, Inc.: Payment processing and Photographer payouts. Stripe's privacy policy governs data shared with Stripe: stripe.com/privacy
• Supabase, Inc.: Database and file storage (photo originals and watermarked previews).
• Netlify, Inc.: Application hosting and CDN delivery.
• Resend, Inc.: Transactional email delivery (purchase confirmations, download links).
• Legal requirements: We may disclose personal information when required by valid legal process (subpoena, court order, or governmental request), or when we believe disclosure is necessary to prevent imminent harm to any person, including children.
• Business transfers: In the event of a merger, acquisition, or sale of substantially all assets, personal information may be transferred as part of that transaction, subject to the same privacy commitments in this policy.

6. Data Retention

• Account data: Retained while your account is active and for 3 years after account deletion, for legal compliance purposes.
• Purchase records & order history: Retained for 7 years for tax and legal compliance purposes.
• Download tokens: Signed download URLs expire 48 hours after generation. Token records are retained in our database for 90 days for dispute resolution purposes.
• Photographer photos (originals): Retained while the Photographer's account and gallery are active. Deleted within 30 days of gallery or account removal.
• Watermarked previews: Same retention as photo originals.
• Legal agreement records (Photographers): Retained indefinitely for legal compliance and dispute resolution.

7. Children's Privacy — COPPA Disclosures

7.1 Our Platform Is Not Directed at Children

GameDaySnap's website and marketplace are directed at adults (parents, guardians, and photographers) aged 18 and older. We do not knowingly market to, solicit, or collect personal information directly from children under the age of 13. Children under 13 may not create an account or make purchases on GameDaySnap. If we discover that we have inadvertently collected personal information from a child under 13 without parental consent, we will delete such information immediately.

7.2 Photographs of Minors on the Platform

GameDaySnap acknowledges that the primary photographic subjects on the Platform are children and youth (minors) participating in organized athletics. We take the following specific measures to protect these individuals:

• Context restriction: Photographers are contractually required to upload only photographs depicting minors engaged in organized athletic activity in publicly-accessible venues. Photos must not depict minors in private settings, in states of undress, or in any context unrelated to their athletic participation.
• No personal data collection from minors: We do not collect names, contact information, birthdays, school names, or any other personal information about the children depicted in photographs. Photographs are searchable only by the sports event metadata provided by the Photographer (team name, sport, date, city).
• Purchase restriction: Only registered adults (18+) may purchase photographs. Downloaded high-resolution files are delivered via secure, time-expiring links exclusively to the verified email address provided at purchase.
• Personal use only: All purchased photographs are licensed for private, personal use by the purchasing individual only. Commercial use, redistribution, or public posting in a commercial context is strictly prohibited by our Terms of Service.
• Watermarking of previews: All publicly-visible preview images are watermarked at reduced resolution to prevent unauthorized use.
• Takedown rights: Individuals may request removal of photographs depicting themselves or minors in their care at any time using our DMCA/Privacy Takedown form. See gamedaysnap.com/dmca. We will process valid removal requests within 48 hours of verification.
• Photographer vetting: All Photographers must affirmatively agree to our child safety content standards at registration, representing that they have obtained all necessary permissions to photograph at athletic venues.

7.3 Parental Rights

If you believe that a photograph of yourself or a minor in your care has been published on GameDaySnap without appropriate authorization, or if you have concerns about how the image is being displayed or used, you have the right to:

• Request immediate removal of the photograph(s) via our DMCA/Takedown form;
• Contact us directly at privacy@gamedaysnap.com to discuss your concern;
• Request that we provide you with information about what photographs are available on the Platform (subject to identity verification).

We respond to all verified takedown requests within 48 hours and remove qualifying content immediately upon verification.

7.4 State Law Compliance

In addition to COPPA, GameDaySnap is committed to complying with applicable state child privacy laws, including the California Consumer Privacy Act (CCPA) as it relates to minors, the Illinois Biometric Information Privacy Act (BIPA), and similar laws. We do not use facial recognition technology, biometric identifiers, or any automated means to identify individuals depicted in photographs.

8. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of personal data we hold about you;
• Correction: Request correction of inaccurate data;
• Deletion: Request deletion of your account and personal data (subject to legal retention requirements);
• Portability: Request your data in a machine-readable format;
• Objection / Restriction: Object to or request restriction of certain processing activities;
• California residents: Exercise rights under the California Consumer Privacy Act (CCPA) by contacting privacy@gamedaysnap.com with “California Privacy Request” in the subject line.

To exercise any of these rights, email privacy@gamedaysnap.com. We will respond within 30 days of verification.

9. Cookies

GameDaySnap uses the following cookies:

• Strictly necessary (session cookies): Required to maintain your login session. These cannot be disabled without breaking the Platform. They expire at the end of your browser session or after 30 days for “remember me” sessions.
• Functional cookies: Remember your search preferences (e.g., last-used state/city filters) to improve your experience. These can be cleared by clearing your browser cookies.

We do not use advertising cookies, third-party tracking pixels, or behavioral profiling technologies of any kind.

10. Security

We implement industry-standard security measures including: TLS encryption for all data in transit; AES-256 encryption for data at rest in our database; Row-Level Security (RLS) on all database tables ensuring users can only access their own data; time-expiring signed URLs for all high-resolution photo downloads; and regular security reviews.

Original high-resolution photographs are stored in a private, non-publicly-accessible storage bucket. They are only made available via time-limited signed URLs generated server-side upon verified purchase. No high-resolution original is ever served via a permanent public URL.

Despite these measures, no electronic transmission or storage system is 100% secure. You use the Platform at your own risk.

11. International Users

GameDaySnap is operated from the United States. If you access the Platform from outside the United States, your information will be transferred to and processed in the United States, where data protection laws may differ from those in your country. By using the Platform, you consent to this transfer.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email to registered users at least 30 days before taking effect. The updated effective date will always be displayed at the top of this page. Continued use of the Platform after changes become effective constitutes acceptance of the revised policy.

13. Contact

For privacy questions, data requests, or to report a concern about photographs of minors:

• Email: privacy@gamedaysnap.com
• DMCA / Photo Removal: gamedaysnap.com/dmca
• Response time: We respond to all privacy inquiries within 5 business days.