Privacy Policy

Last updated: July 19, 2026

This Privacy Policy describes what information TableRally collects, how we use it, and the choices you have. It applies to the TableRally website and the events, stores, and accounts on it.

1. What we collect

When you create an account, we collect:

• Your name and email address;
• Your password, which is never stored in plain text;
• If you enable two-factor authentication, the information needed to verify it (we never see or store your authenticator app's secret in a recoverable form beyond what's needed to verify your codes).

If you create or claim a store, we additionally collect:

• The store's street address, used only to determine the store's time zone for scheduling purposes -- we don't display a precise map pin from it;
• A contact email and, optionally, phone number, used to verify you're authorized to represent the store. We keep this only as long as needed to complete and audit that verification.

When you register for an event, we record which events you've registered for or attended. We do not collect precise device geolocation, and TableRally never asks your browser or phone for your location.

To help you find events near you, you can optionally tell us a city, state, or ZIP code -- either just for one visit (kept only in your own browser's storage, sent to us as nothing more than a one-time lookup each time you search) or saved to your account from Account Settings so you don't have to re-enter it. This is entirely your choice, it's never more precise than city-level, and a saved location can be removed at any time from Account Settings.

We do not currently process payments. If we add paid subscriptions in the future, billing will run through a third-party payment processor, and TableRally's own servers will never receive or store your raw card details.

2. How we use it

We use the information above to:

• Create and secure your account, and let you sign in;
• Operate event registration, waitlists, and the store dashboard;
• Verify a store claim before granting admin access to it;
• Send you account-related email (verification, password reset, event-related notices, and, if you're on a waitlist, a notice when a spot opens up);
• Respond if you contact us.

We do not sell your personal information, and we do not use advertising-tracking cookies.

3. Who we share it with

We use a small number of service providers to operate TableRally, each acting on our behalf and only for that purpose:

• Cloudflare -- hosting, our database, file storage, and bot/spam protection;
• Resend -- delivering account-related email (verification, password reset, notifications);
• OpenStreetMap's Nominatim service -- looks up coordinates for a store's address (to determine its time zone) and, if you use it, for a city/state/ZIP you enter to find events near you. Nothing you search is stored by Nominatim on our behalf beyond the single lookup.

We don't share your personal information with these providers' other customers, and we don't share it with advertisers.

4. Cookies

We use a session cookie to keep you signed in and a security cookie for bot protection during signup and login. We don't use third-party advertising or tracking cookies.

5. Your choices

You can update your name and password, and manage two-factor authentication, from your account settings at any time. To request a copy of your data, or to request that we delete your account and associated personal data, contact us through our contact page. We'll process deletion requests promptly, though we may retain limited records where needed for security, fraud prevention, or to document a trust-and-safety enforcement action taken on an account.

6. Children's privacy

TableRally requires account holders to be at least 13 years old, and we do not knowingly collect personal information from anyone younger. Account holders between 13 and 17 should only use TableRally with a parent or guardian's permission.

7. Security

Data is encrypted in transit and at rest. Access to account data by TableRally staff (for example, to review a store verification request) is limited to what's needed for that purpose.

8. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we'll update the date at the top of this page.

9. Contact

Questions about this policy, or a request about your data? Reach out through our contact page.