Privacy Policy
Effective August 3, 2026 · Last updated August 3, 2026
SightSmash is operated by Field & Forge Sports (“SightSmash,” “we,” “us,” or “our”). This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when people use SightSmash websites, applications, mobile experiences, and connected sports services. Because the Services support families and may involve information about children, the Children’s Privacy section is especially important.
1. Information we collect
Account and identity information. Name, email address, authentication identifiers, account settings, role, organization relationships, session and security information, and information used for account recovery or multi-factor authentication.
Household and athlete information. Household relationships, guardian permissions, athlete name, age or date of birth, contact details where appropriate, team membership, jersey number, position, graduation year, profile information, access grants, and family preferences.
Registration, eligibility, and document information. Program selections, registration answers, waivers, signatures, emergency contacts, eligibility records, physicals, insurance information, identity or age-verification documents, and approval status. Sensitive documents are shown only to authorized people and services.
Team, league, club, facility, and event information. Rosters, staff assignments, schedules, availability, attendance, volunteer commitments, carpools, travel, facilities, reservations, officials, standings, brackets, incidents, rules, discipline, support cases, and organization records.
Payments and transactions. Purchases, subscription status, fees, discounts, refunds, payouts, receipts, fundraising, store orders, and payment-provider identifiers. Payment processors handle card and bank details; SightSmash does not store full card numbers.
Sports, performance, and media information. Scores, statistics, evaluations, goals, practice activity, uploaded video and photos, audio, tags, clips, reels, streaming activity, device capture information, and automated analysis. A child’s image, voice, precise location, biometric identifier, or persistent identifier may be personal information under children’s privacy law.
Communications and support. Messages, announcements, replies, notification preferences, customer-support requests, feedback, reports, and related attachments.
Website, device, and security information. IP address, browser and device type, operating system, referring page, approximate region, page and performance events, timestamps, cookie or similar identifiers when used, bot-detection signals, logs, and information needed to prevent abuse and maintain reliability.
Information from others. We may receive information from a parent, team, league, club, facility, school, coach, payment processor, identity provider, calendar provider, media provider, import selected by the customer, public organization source, or another integration. The provider of that information must have authority to share it.
2. How we use information
We use personal information to provide and personalize the Services; create and secure accounts; connect households, athletes, teams, organizations, facilities, and events; process registrations and transactions; operate schedules, communications, competition, media, and support; honor consent and access choices; prevent fraud and abuse; maintain safety and competition integrity; diagnose errors; measure aggregate use and performance; improve existing features; comply with law; enforce agreements; and protect our users, the public, and SightSmash.
We do not use private youth, health, eligibility, film, message, or precise-location data for behavioral advertising. We do not sell personal information or build advertising profiles about children. If we introduce a materially different use of children’s personal information, we will provide direct notice and obtain new parental consent where required.
AI feature information. When an authorized user invokes film-query interpretation, practice-brief generation, or roster parsing, the service processes supplied prompts and relevant sports records to produce the requested output and record operational usage. Generated outputs carry disclosure metadata. See AI Transparency.
3. How information is disclosed
Within the ecosystem at your direction. Information is shared with authorized household members, team staff, organization administrators, league personnel, facility operators, officials, or recipients according to the role, event, consent, and sharing choices attached to the record. Uploading information does not make it public.
Service providers. Providers may process information for hosting, database and file storage, authentication, email, notifications, payment processing, customer support, security, analytics, media processing, streaming, maps, calendar connections, and automated sports analysis. They may use information only to provide the contracted service and must protect it appropriately.
Current provider categories include Cloudflare for infrastructure, security, analytics, and bot protection; Stripe for payments; Resend for transactional email; selected identity providers for sign-in; push-notification services; error-monitoring services; and media or compute providers when a customer uses those features. Availability and the exact provider may vary by feature.
Legal, safety, and business events. We may disclose information when reasonably necessary to comply with law or valid legal process; protect a child or other person; investigate fraud, security, abuse, or rights violations; enforce agreements; or complete a merger, financing, acquisition, reorganization, or sale subject to appropriate confidentiality and notice.
Public information. An organization may publish a profile, program, schedule, standings, bracket, result, facility listing, event, stream, review, or approved media. We provide controls and context for public information, but public information may be copied by others.
4. Children’s privacy and parent rights
Children under 13 may not independently create a SightSmash account. When the Children’s Online Privacy Protection Act applies, SightSmash provides direct notice to a parent or legal guardian and obtains verifiable parental consent before collecting, using, or disclosing the child’s personal information, unless a legal exception applies. We collect only information reasonably necessary for the child to participate in the authorized sports experience.
Depending on the features a family or organization uses, children’s personal information may include name, age, team, sport information, account identifier, persistent device identifier, photo, video, audio, location related to a scheduled activity, performance statistics, communications, documents, and information combined with those identifiers. We use it for registration, participation, eligibility, scheduling, communication, safety, scoring, media, development, and the family-controlled athlete record.
A verified parent or guardian may review personal information collected from their child, correct it, revoke consent, refuse further collection, request deletion, and choose whether information may be disclosed to third parties when the disclosure is not integral to the Service. Revoking consent may make a feature or the child’s participation unavailable where the information is reasonably necessary. Official shared records may be retained in de-identified or limited form to preserve competition, financial, safety, or legal integrity.
Organizations must not use SightSmash to bypass parental notice or consent. Schools or organizations relying on a school-authorized educational exception are responsible for confirming that the arrangement and use comply with applicable law. Questions or parent requests may be sent to privacy@sightsmash.com.
5. Cookies and online technologies
The marketing website uses Cloudflare Web Analytics for aggregate, privacy-focused traffic and performance information. Cloudflare states that Web Analytics does not collect or use visitors’ personal data. The contact form uses Cloudflare Turnstile to detect automated abuse; Turnstile evaluates browser and device signals and may use a short-lived clearance cookie when pre-clearance is enabled.
The SightSmash application may use strictly necessary cookies or local storage for sign-in, security, session continuity, preferences, and offline functionality. We do not use advertising cookies or cross-site behavioral advertising trackers. See the complete Cookie Policy for categories, providers, purposes, and controls.
6. Retention and deletion
We retain personal information only as long as reasonably necessary for the purpose collected, the active account or organization relationship, transaction and tax obligations, safety and fraud prevention, dispute resolution, backup and recovery, and legal requirements. Retention depends on the record: short-lived security counters may expire within minutes; active account and athlete records may remain for the life of the account; financial records may be retained for required accounting periods; and media remains until deleted, expired, or removed under the applicable plan and policy.
When information is no longer needed, we delete it, de-identify it, or isolate it from ordinary use until secure deletion. A deletion request may not remove another person’s data or an official shared record. Where deletion would corrupt a completed result, transaction, incident, or opponent record, we may retain the minimum information needed or anonymize the person’s identity.
7. Security
We use administrative, technical, and physical safeguards appropriate to the sensitivity of the information, including encrypted connections, access controls, individual accounts, scoped roles, private-by-default media, signed access links, audit history, rate limits, input validation, provider controls, monitoring, backup and recovery procedures, and additional protection for privileged access.
No system is perfectly secure. Use a unique password, protect your email account and device, review sharing choices, and report suspected compromise to support@sightsmash.com. Security researchers should follow our security reporting policy.
8. Your choices and privacy rights
Depending on your location and relationship to the data, you may have the right to access, know, correct, export, or delete personal information; withdraw consent; restrict or object to processing; opt out of sale, sharing, targeted advertising, or certain automated decisions; appeal a denied request; and receive equal service and pricing when exercising a privacy right.
You can update many details and preferences in the Services. You may unsubscribe from marketing email using the link in the message; essential account, safety, consent, transaction, and schedule communications may continue. To submit a privacy request, email privacy@sightsmash.com with the account email, the right requested, and enough information for us to locate the relevant account. We will verify identity and authority, respond within the period required by applicable law, and use request information only to fulfill and document the request. An authorized agent may submit a request where permitted, subject to proof of authority.
9. California privacy information
California residents may have rights to know the categories and specific pieces of personal information collected; know the sources, purposes, and recipient categories; correct inaccurate information; delete information; opt out of sale or sharing; limit certain uses of sensitive personal information; and receive non-discriminatory treatment.
In the preceding 12 months, SightSmash may have collected the categories described above: identifiers; customer records; protected classification information such as age where needed for sports participation; commercial information; internet or electronic activity; approximate or activity-related geolocation; audio, visual, and similar information; education-related information supplied for eligibility; inferences used for product experience; and sensitive personal information such as account credentials, precise location when a feature requires it, health or eligibility documents, and information about a child.
We collect and disclose these categories for the business and service purposes described in this Policy. We do not sell personal information, share it for cross-context behavioral advertising, or use sensitive personal information to infer characteristics beyond the purposes permitted by law. We therefore do not provide a “Do Not Sell or Share” link. If those practices change, we will update this Policy and provide required controls before the change.
10. International users and policy changes
SightSmash is based in the United States, and information may be processed in the United States and other locations where our providers operate. Where required, we use lawful transfer mechanisms and contractual safeguards. Users outside the United States may contact us to exercise local privacy rights or ask about the applicable transfer mechanism.
We may update this Policy as the Services, providers, or law changes. We will provide reasonable notice of a material change and obtain renewed consent where required. The effective date at the top identifies the current version.
11. Contact us
Privacy questions, parent requests, and data-rights requests: privacy@sightsmash.com. Legal notices: legal@sightsmash.com. Product support: support@sightsmash.com.