STFU Flippy Manage narrative settings in your profile Manage Settings

Privacy Policy

Privacy Policy for FL!PT Leagues

Last updated: April 21, 2026

This Privacy Policy describes how FL!PT LLC ("FL!PT Leagues", "we", "us", or "our") collects, uses, and discloses information when you use our disc golf league management service at fliptleagues.com and related subdomains (the "Service"). By using the Service you agree to the collection and use of information in accordance with this policy.

1. Who We Are

FL!PT Leagues is operated by FL!PT LLC, a Utah limited liability company. You can reach us at support@fliptleagues.com for any privacy-related questions.

2. Information We Collect

2.1 Information you provide

  • Account information. Email address, password (stored hashed), display name, profile photo (optional), and phone number (optional).
  • Player profile. PDGA number (optional), home course, division, and any additional profile details you choose to share.
  • Payment information. Billing name, address, and payment method. Full payment-card numbers are collected and stored by our payment processors (Stripe, AuthorizeNet, and PayPal) on our behalf. FL!PT Leagues never stores full card numbers.
  • Tax information. For league winnings above applicable reporting thresholds (for example, $600 per IRS 1099 rules), we collect the name, address, and taxpayer identification number required to produce a 1099-NEC.
  • League content. Round scores, standings, challenge results, comments, messages, photos, and other content you or your league director submit through the Service.
  • Communications. Messages you send to support, survey responses, and feedback.

2.2 Information collected automatically

  • Device and connection data. IP address, browser type and version, operating system, device identifiers, and approximate geolocation derived from IP.
  • Usage data. Pages visited, features used, referring URLs, timestamps, and interaction events (clicks, submissions).
  • Cookies and similar technologies. See Section 6.

2.3 Information from third parties

  • PDGA lookups. When you provide a PDGA number, we query the Professional Disc Golf Association's public API to retrieve your current rating, division, and sanctioning status. The PDGA is an independent controller of its own data. See the PDGA's privacy policy for their practices.
  • Payment processors. Stripe, AuthorizeNet, and PayPal share transaction metadata (approval status, last four digits of the card, card brand, and payout destinations) with us to confirm and reconcile payments.

3. How We Use Your Information

We use the information we collect to:

  • Create and manage your account, authenticate you, and provide the Service.
  • Process registrations, run scoring and payouts, and generate tax documents.
  • Send transactional emails and SMS messages (via Twilio) you've opted into, such as league reminders, challenge notifications, and payout confirmations.
  • Operate league-director features like roster management, standings, and reporting.
  • Measure performance, diagnose issues, and improve the Service through aggregated analytics (PostHog and Google Analytics 4).
  • Detect, investigate, and prevent fraud, abuse, and security incidents.
  • Comply with legal obligations, including IRS reporting and law-enforcement requests backed by valid legal process.

4. Legal Bases for Processing (EEA / UK Users)

If you are in the European Economic Area or United Kingdom, our legal bases for processing your personal data are:

  • Contract: where processing is necessary to provide the Service you've signed up for.
  • Legitimate interests: for analytics, service improvements, and fraud prevention, provided those interests are not overridden by your rights.
  • Legal obligation: for tax, accounting, and law-enforcement compliance.
  • Consent: for optional SMS notifications and non-essential cookies. You may withdraw consent at any time.

5. How We Share Information

We share information with:

  • Service providers that process data on our behalf under contract: Amazon Web Services (hosting, storage, CDN via CloudFront), Heroku (application hosting), Stripe/AuthorizeNet/PayPal (payments), Twilio (SMS delivery), PostHog (product analytics), Google (Google Analytics 4, Google Tag Manager), SendGrid (transactional email), and similar vendors. Each is bound by confidentiality and data-processing obligations.
  • League participants. Your display name, profile photo, PDGA number (if provided), round scores, bag-tag standings, and public league activity are visible to other players in your leagues.
  • League directors. Directors of leagues you join see your registration and payment status, division, and scorecards.
  • PDGA. If a league is PDGA-sanctioned, we transmit round scores and player identifiers to the PDGA for official rating calculations.
  • Law enforcement and legal process. When required by valid legal process or to protect rights, safety, or property.
  • Business transfers. In the event of a merger, acquisition, reorganization, or sale of assets, personal information may transfer to the acquiring party, subject to this policy or a notice of material change.

We do not sell personal information and have not sold personal information in the past twelve months.

6. Cookies and Similar Technologies

We use cookies and similar technologies for three purposes:

  • Strictly necessary (always on): authentication cookies, CSRF protection, theme preference, session state.
  • Analytics: PostHog (distinct ID cookie) and Google Analytics 4 (_ga, _ga_*) to measure feature adoption and diagnose performance. These may be disabled via browser Do Not Track or a future cookie-consent prompt.
  • Third-party embeds: when a league director embeds a Stripe payment element, Stripe sets cookies governed by its own policy.

Most browsers let you refuse or delete cookies. Disabling strictly-necessary cookies will prevent you from using the Service.

7. Data Retention

  • Account and profile data: retained while your account is active. You may request deletion at any time (see Section 9).
  • League history and scores: retained indefinitely to preserve the integrity of league records, career statistics, and bag-tag lineage, unless you request removal.
  • Transactional records: retained for seven years after the transaction date to comply with tax and accounting requirements.
  • Analytics data: aggregated analytics retained per the defaults of our analytics providers (currently up to 14 months in GA4 and 7 years in PostHog).
  • Support conversations: retained for two years after last contact.

8. Data Security

We use industry-standard technical and organizational measures to protect personal information, including HTTPS/TLS in transit, encryption at rest for sensitive data, access controls, audit logging, and regular security reviews. No system is perfectly secure. If we experience a breach that materially affects your personal information, we will notify you and applicable regulators in accordance with applicable law.

9. Your Rights

9.1 All users

You may:

  • Access and update your profile through your account settings.
  • Download a copy of your account and league data on request.
  • Request deletion of your account. Some information (transactional records, league-finalized results) may be retained as permitted or required by law.
  • Opt out of SMS notifications at any time by replying STOP. Opt out of marketing email by using the unsubscribe link in any marketing message. Transactional messages (payouts, security alerts) cannot be disabled while the account is active.

9.2 California residents (CCPA and CPRA)

California residents have the right to:

  • Know what personal information we collect, disclose, or sell (we do not sell).
  • Access specific pieces of personal information collected in the preceding 12 months.
  • Request deletion of personal information, subject to retention exceptions.
  • Correct inaccurate personal information.
  • Limit the use and disclosure of sensitive personal information.
  • Not be discriminated against for exercising these rights.

To exercise these rights, email support@fliptleagues.com with the subject "California Privacy Request". We will verify your identity before responding.

9.3 EEA and UK residents (GDPR and UK GDPR)

In addition to the rights above, you have the rights to restriction of processing, data portability, objection to processing based on legitimate interests, and to lodge a complaint with your local supervisory authority. Email support@fliptleagues.com to exercise any of these rights.

10. Children's Privacy

The Service is intended for users 18 years of age or older. We do not knowingly collect personal information from children under 13 in compliance with the Children's Online Privacy Protection Act (COPPA). If we learn we have collected personal information from a child under 13, we will delete it promptly. A parent or guardian who believes a child has submitted personal information may contact us at support@fliptleagues.com.

11. International Data Transfers

FL!PT Leagues is operated from the United States. If you use the Service from outside the US, your information will be transferred to, stored, and processed in the US. By using the Service you consent to this transfer. For transfers from the EEA or UK to the US, we rely on Standard Contractual Clauses or other lawful mechanisms in our agreements with sub-processors.

12. Do Not Track

Some browsers send Do Not Track (DNT) signals. We currently treat DNT signals as a request to opt out of non-essential analytics cookies. Strictly-necessary cookies and server logs are unaffected because the Service requires them to operate.

13. Third-Party Links and Services

The Service may contain links to third-party websites (for example, PDGA profiles, sponsor pages, social media). This policy does not apply to those sites. Review the privacy policies of any third parties before providing them personal information.

14. Changes to This Policy

We may update this Privacy Policy. Material changes will be announced with at least 30 days' notice via in-app banner or email, and the "Last updated" date at the top of this page will be revised. Your continued use of the Service after the effective date constitutes acceptance of the updated policy.

15. Contact Us

For questions, requests, or complaints about this Privacy Policy or our data practices, contact:

FL!PT LLC
support@fliptleagues.com