Privacy Policy

1. Information We Collect

We collect the information you provide directly to us, including:

• Account information: display name, email address, and password
• Competition activity: competitions you create or join, scores you submit, and division assignments
• Usage data: pages visited and actions taken within the Service, for reliability and abuse prevention

2. How We Use Information

We use the information we collect to:

• Operate and maintain the Service, including leaderboards and rankings
• Authenticate your account and keep your session secure
• Communicate with you about your account or competitions
• Detect, investigate, and prevent fraudulent or abusive activity

3. Cookies and Session Data

Boxside Comp, operated by Daxta, uses a single httpOnly session cookie to keep you signed in. This cookie is not readable by JavaScript and is used solely for authentication; we do not use it for advertising or cross-site tracking.

4. How We Share Information

A competition can be public or private. Today, when a competition is public, its leaderboard is readable by anyone, with no account and no sign-in, on the competition page on this site. The competition page is not secret: anyone holding a public competition’s link can open it.

We plan to add two further public surfaces for a public competition’s leaderboard: a display screen at the venue, and a link that can be shared with anyone holding it. Neither exists in the product yet. We describe them here ahead of time, because a new use of your data should be disclosed before it starts, not after it has already begun.

What is published about you on a public competition’s leaderboard:

• The display name you chose
• Your division
• Your overall rank and total points
• Your placement, value, and status for each event
• Whether you have withdrawn from the competition
• Whether a score you submitted is awaiting the organiser’s approval

Your email address is never shown. The value of a score awaiting approval is never shown either; what is shown is only the fact that it is awaiting approval, as the marker listed above.

The lawful basis is legitimate interests: publishing the ranked results of a competition so entrants, spectators, and the venue can see who placed where.

Making a competition private stops the public page, and every other public surface, from responding on the very next request. A copy that a browser or a content delivery network already downloaded before that request can remain readable afterward, because of how those copies are temporarily cached: up to 30 seconds for a leaderboard response, and up to 60 seconds for the competition page itself and for the anonymous competition list. After that, every one of those cached copies stops too.

We do not sell your personal information to third parties.

5. Data Retention

We retain account and competition data for as long as your account is active or as needed to provide the Service. You may request deletion of your account and associated personal data at any time.

6. Your Choices

You can review and update your account information at any time while signed in, and can leave any competition you have joined.

7. Children’s Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Continued use of the Service after changes take effect constitutes acceptance of the revised policy.

9. Contact

The Service is operated by Daxta, which is the data controller for the personal data described in this Privacy Policy. General questions about a specific competition can be directed to that competition’s organiser. Questions about this Privacy Policy, about your personal data, or a request to be removed from a public surface should go to us directly at info@daxta.co.uk, and we act on them rather than passing them back to the organiser.

10. Your Right to Object

If you appear on a public competition’s leaderboard, you have the right to object to your name and results appearing on that surface. You do not need to write a formal letter: you can object verbally or in writing. Send your objection to us at the address below. If you speak to the organiser at the event instead, the organiser passes your request on to us, and the one calendar month response time below runs from when we receive it, not from the conversation at the event.

We respond within one calendar month. While a competition is still running, you can remove yourself immediately by leaving it from your own account, the same self-service route described in section 6. Once a competition has completed, that self-service option is no longer available, and the remedy is for us to act on your objection directly: contact us at the address below and we remove you within the one calendar month response time. We are building a narrower option, to hide you from public surfaces while you keep competing and everyone else’s placings stay as they are; that option will become the preferred outcome once it ships. We can refuse an objection only where there are compelling grounds to do so, and a refusal will say why and will name your right to complain to the Information Commissioner’s Office.

You can leave a competition entirely at any time from your own account while it is still running. To object or ask a question about this right, including after a competition has completed, contact us at info@daxta.co.uk.