Privacy Policy

This policy covers how ITM Scouting handles your personal information. Questions or requests can be sent to [email protected].

Information collected

When you create an account, ITM Scouting collects your email address and password (or, if you sign in with Google, your basic Google profile information). You also provide a username and can customize an avatar. Any rankings, tiers, and notes you create are saved to your account.

A session cookie is set to keep you signed in. Your theme preference is stored only in your browser and never sent to the server. If you are given administrator access, your administrative actions and IP address are logged for security; regular users are not IP-logged.

ITM Scouting does not use analytics services, advertising networks, cross-site trackers, or precise location data, and does not collect sensitive personal information such as government identifiers, health data, or biometrics.

How information is used

Information is used to run the Service: to store and display your rankings, authenticate you, send transactional email (verification, password reset, important service notices), and investigate abuse. It is not sold or rented.

Sharing

Personal information is shared only with service providers that help operate the Service: Firebase (Google LLC) for authentication and database hosting, Google OAuth if you choose to sign in with Google, and Resend for transactional email. Information may also be disclosed when required by law or to protect the rights, property, or safety of users or the public.

Your rights

You can access, correct, delete, or export your personal information. To delete your account, use the Delete Account page in Settings; other requests can be sent to [email protected].

Residents of California, Virginia, Colorado, Connecticut, Utah, Texas, and other states with comprehensive privacy laws have equivalent rights under state law, including the right to opt out of the sale or sharing of personal information. ITM Scouting does not sell, share, or use your information for targeted advertising.

To submit a request, email [email protected]. We will acknowledge your request within 10 business days and respond within 45 calendar days, with the option to extend by another 45 days when reasonably necessary. You may use an authorized agent to submit a request on your behalf, and we may ask the agent for proof of authorization and verify your identity directly. If we decline a request, you may appeal by replying to our response, and we will inform you of the outcome. We will not discriminate against you for exercising any of these rights.

Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected such information, we will delete it. Because we do not sell personal information, we do not sell the information of minors.

Data retention

Account data and rankings are retained while your account is active. When you delete your account, your authentication record, profile, and rankings are removed. Administrator audit logs are retained indefinitely for security purposes.

Security

Reasonable technical and organizational measures are used to protect your information. No method of transmission or storage is completely secure, and absolute security cannot be guaranteed. If a data breach affects your personal information, we will notify you and any regulators as required by applicable law.

United States only

The Service is intended for users in the United States. It is not directed to individuals in the European Union or United Kingdom, and we do not target our services to those regions. If you access the Service from outside the United States, you do so on your own initiative.

Changes

This policy may be updated. Material changes will be communicated to registered users by email, and the date above will be revised.