Privacy Notice

PathwaysPlay (pathwaysplay.com) is operated by Give it a Try, LLC, a Maryland limited liability company ("GIAT", "we", "us"). Organizers use it to run rugby tournaments and camps and to take registrations. This notice covers pathwaysplay.com and the emails it sends.

The organizer running an event is responsible for that event and for what they do with the information they receive through it. This notice explains what we do.

Organizer accounts. Your name, email address and password (stored hashed, never in plain text), the organization you run and the events you create. If you set up payouts, Stripe collects your identity and bank details directly; we keep only your Stripe account identifier and whether it is ready to be paid.

Player registrations for camps and event registration pages: the player's name, date of birth, gender, playing position and home club, the division the player registers in (or an optional age group where the page has no divisions), an optional union membership number when the organizer asks for one, an optional photo, and the registering parent or guardian's name, email and phone number (or an adult player's own).

Team registrations for tournaments: the team name and the division it enters, the contact's name, email and phone number, and the roster: each player's name, jersey number and position, and who is captain. At check-in the organizer records which of the event's paper forms each player has handed in, and whether the player is shown by initials on public pages.

Waiver acceptances. The typed name and in what capacity it was signed (a parent or guardian, or an adult player), which sections were ticked, when the text came into view and when its end was reached, the time of signing, the network address and browser it was signed from, and the exact text that was accepted. The organizer receives this record for their event.

Payments. Stripe processes every payment. We never see or store a card number. We keep the amount, the card brand and its last four digits, the receipt link, and any refund or dispute record.

Technical. The network address of a request, used to limit abuse and not attached to any account. Error reports when something breaks. A report of an error in your browser can include a replay of the screen activity from up to a minute before it and for the rest of that visit, with all text on the screen and everything typed masked, and images blocked. A sign-in cookie for organizers.

To run the event for its organizer: registrations, rosters, check-in, schedules, standings and results. To send the emails the event needs: registration confirmations, receipts, the waiver record, reminders about a payment that is due, schedule releases and organizer notices. When a club runs the event, its coaches can also send a player, or a player's family, an invitation to register, using the contact details the club already holds on Pathways. To take payment and pay the organizer, and to handle refunds and disputes. To keep the service safe and working. To meet legal and tax obligations.

We do not sell personal information. We do not use it for advertising. We do not share one organizer's registrations with another organizer.

The organizer of the event you register for, including their staff. They receive what you enter and are responsible for it.

Public pages. Unless the organizer makes a tournament private, its schedule, standings and results are public, and so are the team names. Once the schedule pairs a team with an opponent, the team's roster appears in full with its matches: each player's name, jersey number and position, who is captain, and any substitutions. A player is shown by initials instead when they, or their parent or guardian, choose that on the event's data consent form and the organizer records it at check-in. Until then the full name shows. Camp and event registrations are never public.

Service providers that process data for us, each receiving only what its job needs: Stripe (payments and payouts), Resend (email), Vercel and Supabase (hosting and database), Sentry (error monitoring) and Upstash (abuse limits).

Pathways. PathwaysPlay is part of the Pathways platform (pathways.id). When an organizer's Pathways organization links an event, that same organization can bring its registrations onto its own Pathways roster. That is the organizer's own data moving within the organizer's own account; no other organization can see it.

When the law requires it, or to protect players, families or the service.

Data is stored in United States data centers, encrypted in transit and at rest. Passwords are hashed. Database access is locked to the application. Payment card data is handled entirely by Stripe, which is certified to the card industry's security standard.

Organizers receive a sign-in cookie so they stay signed in. Families and spectators receive no cookies beyond what a page needs to load. We do not use advertising or tracking cookies.

Registrations stay with their event as part of the organizer's records. While registration is open you can withdraw a registration from your management link. Payment records are kept for as long as tax and dispute rules require. Organizer accounts are kept until you ask us to delete them.

Your management link, sent when you register, lets you view your registration and, while registration is open, withdraw it. To access, correct or delete information we hold about you or your child, or to ask what we have, email privacy@pathways.id. We answer within 30 days. The organizer also holds a copy of what you entered and may keep what their own records require.

If you live in California, you have the right to know what we collect and why, to have it deleted or corrected, and not to be sold; we sell nothing. We will never treat you differently for using these rights.

A registration for a player under 18 is made by a parent or guardian, who provides their own contact details and accepts the event waiver. We do not knowingly accept registrations from children under 13 themselves. On a tournament's public pages, a player's full name appears on their team's roster unless initials are chosen and recorded at check-in, as section 4 explains. Camp and event registrations are never public. Parents and guardians can contact us at any time about their child's information.

We will post changes here with a new date. Organizers are emailed about changes that matter to them.

privacy@pathways.id

Give it a Try, LLC, Maryland

Organizer accounts also accept the Pathways Terms of Service and Privacy Policy. Our PathwaysPlay Terms cover registrations, fees and public event pages.