RallyRoom Privacy Policy

Last Updated: June 27, 2026

RallyRoom is a platform for lightweight group games, asynchronous activities, and event-style participation experiences. RallyRoom is operated by CrackShot Games ("RallyRoom," "we," "us," or "our"). This Privacy Policy explains how we collect, use, disclose, and protect information when you access or use RallyRoom, including the RallyRoom website, account hub, product applications, game links, subdomains, communications, and any other service that links to this Privacy Policy.

This Privacy Policy applies to:

• organization owners, admins, account users, and other people who create or manage RallyRoom workspaces or games;
• players, participants, guests, voters, viewers, or other people who join a RallyRoom-powered game or activity through a public link or invitation; and
• visitors to RallyRoom websites, pages, and related online services.

By using RallyRoom, you acknowledge the practices described in this Privacy Policy.

1. Information We Collect

We collect information in different ways depending on how you use RallyRoom.

1.1 Information from RallyRoom account holders and administrators

If you create or use a RallyRoom account, we may collect:

• your email address;
• your name or profile information associated with your account, including information provided through Google sign-in if you choose to use it;
• authentication, account, and user identifiers;
• organization or workspace information you create or manage;
• your membership, permissions, or role within an organization, such as owner or admin;
• organization invitation activity and account-management events;
• settings and preferences associated with your account, organization, or games;
• content you upload or configure, such as organization logos, branding colors, game names, game prompts, images, GIFs, backgrounds, templates, copy, and other customization assets; and
• messages, requests, feedback, or support communications you send to us.

We use third-party authentication and infrastructure providers to help operate secure account sign-in, account recovery, session management, and related service features.

1.2 Information from public game players and participants

Some RallyRoom products allow people to participate in a game or activity through a public link without creating a full RallyRoom account. Depending on the product, game settings, and organizer configuration, a public participant may be asked to provide information such as:

• first name;
• last name;
• display name, nickname, or other participant label if supported by the game;
• optional email address where email collection is enabled by the organizer;
• game responses, selections, votes, rankings, submissions, stamps, entries, drawings, tile placements, images, GIFs, or other game-specific activity;
• the game session or game instance joined;
• player card, bracket entry, board state, tier list entry, alignment-chart placement, canvas contribution, or similar game-specific state;
• game progress, participation status, winner or eligibility status, and related results;
• timestamps related to joining, activity, messages, updates, or participation; and
• browser or device information used to keep a participant connected to the correct game session or to remember a lightweight join flow on the same device.

A participant email address is optional unless a specific game flow clearly states otherwise. When email collection is disabled for a game, the public participant email field should not be shown or required for that game.

1.3 Information visible to organization administrators

If you participate in a game created by an organization, certain information about your participation may be visible to that organization's authorized RallyRoom or product administrators. Depending on the product and game configuration, administrators may be able to view information such as:

• your name, display name, or participant label;
• your optional email address if provided and if the game supports email collection;
• your participation status, card, board, entry, upload, response, vote, ranking, placement, or other game-specific activity;
• your progress, results, timestamps, and last activity indicators;
• whether you are close to winning, have won, or are eligible for a result; and
• information needed for the administrator to moderate the game, communicate with participants, verify entries, determine results, or delete participant data.

Organizations and organizers are responsible for using participant information appropriately for their group, workplace, event, class, community, stream, club, or other use context.

1.4 Billing and payment information

RallyRoom offers paid subscriptions, one-time purchases, product licenses, and other paid features. Payments are processed through third-party payment providers such as Stripe. When an organization purchases or manages paid access, we may receive information necessary to operate billing and product access, such as:

• billing contact information;
• subscription, purchase, renewal, cancellation, license, trial, or entitlement status;
• Stripe customer, checkout, invoice, subscription, transaction, or payment identifiers;
• plan type, product license type, access level, and billing metadata;
• payment confirmation or failure status; and
• other billing-related information needed to operate the service, provide access, prevent duplicate purchases, resolve support issues, and maintain financial records.

Payment card details are handled by Stripe or other payment providers through their payment systems. RallyRoom does not intentionally store full payment card numbers in its own application database.

1.5 Uploaded content, files, and customization assets

RallyRoom products may allow account holders, administrators, or participants to upload, submit, or configure content. Depending on the product and settings, this may include:

• organization logos and branding assets;
• game backgrounds, images, GIFs, prompts, templates, titles, descriptions, labels, and instructions;
• participant submissions, rankings, votes, placements, drawings, canvas actions, uploaded images or GIFs, or other game-specific content;
• email or message templates configured by admins; and
• other materials used to customize or operate a RallyRoom experience.

Please avoid uploading sensitive personal information unless it is necessary and appropriate for the purpose of the service. Organizers are responsible for making sure they have appropriate rights and permissions for content they upload or ask participants to submit.

1.6 Technical, device, and usage information

When you use RallyRoom, our systems and service providers may automatically receive technical and usage information such as:

• IP address;
• browser type and version;
• device type and operating system;
• pages, routes, subdomains, or game links requested;
• referring or exit pages where available;
• approximate timing of requests and service activity;
• authentication, session, cookie, redirect, and account events;
• error logs, diagnostic events, and performance information;
• security-related request metadata; and
• general usage information needed to operate, troubleshoot, secure, and improve the service.

2. Cookies and Similar Technologies

RallyRoom uses cookies, local storage, and similar browser technologies to make the service work properly and to support low-friction gameplay. These technologies may be used to:

• keep authenticated account users signed in;
• maintain secure sessions;
• remember the currently selected organization or workspace;
• preserve return paths during sign-in, product launch, and cross-subdomain handoffs;
• support movement between RallyRoom and Rally product applications on RallyRoom subdomains;
• remember a public participant's game participation on the same device;
• remember participant name or optional email information for autofill where that feature is enabled;
• reduce repeated join steps for returning participants;
• detect errors, abuse, fraud, or unauthorized access; and
• improve reliability and performance.

Some cookies are essential for RallyRoom to function correctly. Blocking or deleting cookies may cause parts of the service to stop working as intended, including sign-in persistence, workspace selection, product launch, and participant return flows. RallyRoom does not use personal information for cross-context behavioral advertising.

3. How We Use Information

We use the information we collect to:

• provide, operate, maintain, and improve RallyRoom and its product applications;
• authenticate account users and protect organization workspaces;
• create and manage accounts, organizations, memberships, admin roles, invitations, settings, and product access;
• launch, operate, and manage games and activities;
• create, retrieve, display, moderate, and delete participant records and game data;
• maintain continuity when participants return to a game or use autofill features on the same device;
• display game progress, results, standings, eligibility, and winner status;
• send account, security, invitation, billing, support, service, and game-related communications;
• support organization-configured game messages where email collection and sending features are enabled;
• process subscriptions, purchases, permanent product licenses, billing events, and entitlement rules;
• apply feature limits, product access, quotas, and plan rules;
• personalize organization branding and configured game experiences;
• detect, investigate, and prevent abuse, fraud, spam, security incidents, and unauthorized access;
• respond to support, legal, privacy, and operational requests;
• enforce our Terms of Service, Acceptable Use rules, and other policies;
• comply with legal, accounting, tax, and regulatory obligations; and
• protect the rights, property, and safety of RallyRoom, organizations, admins, participants, and others.

4. How We Share Information

We do not sell personal information for money. We do not use personal information for cross-context behavioral advertising. We may share information in the following situations.

4.1 With the organization or organizer running a game

If you participate in a game hosted by an organization, your participation information may be visible to that organization's authorized administrators as described in this Privacy Policy. This may include your name, optional email address if provided, game status, uploads, entries, responses, progress, results, and related participation details.

4.2 With service providers

We rely on service providers to operate RallyRoom. These providers may process information on our behalf for functions such as hosting, database storage, authentication, payments, email delivery, security, analytics, diagnostics, and related infrastructure. Current or expected service providers include:

• Supabase for authentication, database, storage, and related backend infrastructure;
• Vercel for hosting, deployment, and application infrastructure;
• Stripe for payments, billing, checkout, subscriptions, invoices, customer portal workflows, and payment-related records;
• Resend for email delivery;
• Google when a user chooses to sign in with Google OAuth; and
• other vendors or infrastructure providers that support the operation, security, delivery, and improvement of RallyRoom.

These providers may process information as needed to perform services for RallyRoom or as otherwise described in their own terms and privacy materials.

4.3 For legal, safety, or security reasons

We may disclose information if we believe in good faith that disclosure is reasonably necessary to:

• comply with law, regulation, legal process, subpoena, court order, or government request;
• enforce our agreements or policies;
• investigate fraud, abuse, spam, security incidents, unauthorized access, or technical issues;
• protect the rights, property, or safety of RallyRoom, CrackShot Games, users, organizations, participants, service providers, or the public; or
• prevent harm or illegal activity.

4.4 In connection with business changes

If RallyRoom or CrackShot Games is involved in a merger, acquisition, financing, reorganization, sale of assets, transfer of business operations, bankruptcy, or similar transaction, information may be disclosed, transferred, or evaluated as part of that process, subject to applicable law.

4.5 With your direction or consent

We may share information where you direct us to do so, where an organization configures the service to send or display information as part of a game, or where you otherwise provide consent.

5. Organization-Controlled Uses of Game Information

Organizations and organizers control many aspects of how RallyRoom games are configured and how participant information is used inside their games. For example, an organization may:

• create, configure, duplicate, archive, or delete games;
• share public game links or invite participants;
• choose whether a game collects optional participant email addresses where supported;
• configure game-related emails, updates, templates, or notifications where supported;
• review participant activity, progress, entries, uploads, and results;
• moderate participation, remove content, or delete player data;
• use game information to administer its own workplace, event, stream, class, community, club, friend group, or other activity.

If you participate in a game run by your employer, school, organization, streamer, event host, teacher, club, or another organizer, that organizer may have its own policies, notices, expectations, or rules that apply to its use of information. You may contact the organizer directly with questions about how it uses information from a RallyRoom-powered game.

6. Emails and Communications

RallyRoom may send or facilitate several types of communications.

6.1 Account and security emails

These may include email confirmation, password reset, magic sign-in links, account-related notices, security alerts, and other authentication or account-management communications.

6.2 Organization and administrative emails

These may include admin invitation emails, workspace-related notices, billing-related notices, product access communications, support messages, and account-management communications.

6.3 Game-related emails

Some RallyRoom products may allow organizations to send game-related emails to participants who provide an email address in a game that supports email communications and where email collection is enabled. These emails may include welcome messages, game updates, reminders, results, winner notifications, or similar participation-related communications. Some RallyRoom products may not offer participant email features.

6.4 Marketing communications

If RallyRoom sends promotional or marketing emails, we will provide required choices or opt-out instructions. Transactional, service, security, billing, organization, and game-operational messages may still be sent where necessary to provide the service, manage accounts, complete requested interactions, or operate a game.

7. User Content and Uploaded Materials

RallyRoom products may include user-generated content or organizer-uploaded materials. Examples may include images, GIFs, logos, game prompts, backgrounds, templates, bracket items, bingo tiles, rankings, alignment-chart entries, canvas contributions, responses, comments, labels, or other submitted material.

Content submitted through RallyRoom may be visible to the organizer, other participants, viewers, or the public depending on the product, game settings, link-sharing behavior, and display mode. Do not submit content that you do not want shown in that context.

Administrators can delete player data and games through available product controls. RallyRoom may also remove, restrict, or disable content where we believe it violates our Terms, policies, law, third-party rights, privacy, safety, or the integrity of the service.

8. Children, Classrooms, and Youth Groups

RallyRoom is a general-audience service for organizers and groups. RallyRoom account creation is intended for organizers, administrators, and authorized users, not for children under 13. Public participants can usually join a game through a link without creating a RallyRoom account.

RallyRoom is not directed to children under 13, and we do not knowingly collect personal information online from children under 13 in a manner that requires parental consent under applicable law. If we learn that we have collected personal information from a child under 13 in a manner that requires deletion, we will take appropriate steps to delete it.

Organizers who use RallyRoom with classrooms, students, children, youth groups, or similar settings are responsible for using appropriate settings and collecting only information that is appropriate for their group and authorized by their school, organization, parent/guardian process, or applicable law. Organizers should avoid collecting full legal names, email addresses, images, GIFs, or other personal information from children or students unless appropriate and authorized.

Where a school or teacher uses RallyRoom for an educational purpose, RallyRoom uses participant information to provide the requested game experience and related service functions. RallyRoom does not sell participant information or use participant information for targeted advertising.

Parents, guardians, schools, and organizers may contact us using the information in Section 17 to request help with reviewing or deleting information associated with a RallyRoom-powered game.

9. Data Retention

We retain information for as long as reasonably necessary to operate RallyRoom, provide the service, maintain accounts and organizations, support active or historical game records, provide billing and entitlement records, comply with legal obligations, resolve disputes, enforce agreements, and maintain security and auditability.

The exact retention period may vary depending on the type of information and the context in which it was collected. For example:

• account information may be retained while an account remains active;
• organization data may remain while the organization continues using RallyRoom;
• billing records may be retained as needed for financial, tax, accounting, legal, and audit purposes;
• game and participant data may remain until deleted, archived, expired, or otherwise removed through product or administrative controls;
• technical logs may be retained for security, troubleshooting, fraud prevention, reliability, and operational purposes; and
• some information may be retained longer where required or permitted by law.

As a privacy and security principle, we aim not to retain information longer than needed for legitimate business, operational, security, or legal purposes.

10. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information against unauthorized access, loss, misuse, alteration, or disclosure. These safeguards may include:

• authenticated account access;
• secure session handling;
• organization-level authorization controls;
• server-side access checks;
• role-based admin permissions;
• row-level security and scoped access patterns where applicable;
• restricted access to sensitive credentials;
• trusted infrastructure providers;
• monitoring, logging, and diagnostic practices;
• deletion and administrative controls where available; and
• other security practices appropriate to the service.

No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security. We work to protect RallyRoom and the information entrusted to it, and we may update our safeguards as the service evolves.

11. Your Choices and Privacy Rights

Depending on your relationship to RallyRoom and where you live, you may have choices or rights regarding your information. These may include the ability to:

• update certain account, organization, or game information;
• choose whether to provide optional participant email information in games where email collection is enabled;
• control cookies and local storage through your browser or device settings;
• request access to personal information we maintain about you;
• request correction or deletion of personal information, where applicable;
• request information about how personal information is used or disclosed; and
• opt out of marketing communications where applicable.

If you are a public participant in an organization-run game, you may also contact the organization or organizer that created the game, especially for requests related to that organization's use of your participation information. We will review and respond to privacy requests as required by applicable law. To submit a privacy request, contact us using the information in Section 17.

12. U.S. State Privacy Notices

Some U.S. state privacy laws provide eligible residents with rights to know about, access, delete, correct, or receive information about certain personal information, subject to legal exceptions and applicability thresholds. If a state privacy law applies to RallyRoom and to your request, we will process the request in accordance with that law.

RallyRoom does not sell personal information for money and does not use personal information for cross-context behavioral advertising. If our practices change, we will update this Privacy Policy and provide any required choices.

13. International Processing

RallyRoom and its service providers may process and store information in the United States or other jurisdictions where they operate. If you access RallyRoom from outside the United States, you understand that information may be processed in locations that may have different data-protection rules than your home jurisdiction.

14. Third-Party Services and Links

RallyRoom may include links to third-party websites or use third-party services as part of its functionality, such as payment pages, sign-in providers, email infrastructure, hosting providers, or externally linked policies. This Privacy Policy does not control the privacy practices of third parties. We encourage you to review their policies where relevant.

15. Account, Organization, and Game Deletion

RallyRoom provides administrative controls that may allow authorized organization users to delete games, participant records, uploads, or other game data. Deleting information from active product interfaces may not immediately remove every copy from backups, logs, billing records, legal records, or security records, but we will handle deletion requests and retained records consistent with this Privacy Policy and applicable law.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time as RallyRoom evolves, as our practices change, or as legal requirements develop. When we make changes, we will update the "Last Updated" date at the top of this page. If a change is material, we may provide additional notice where appropriate. We encourage you to review this Privacy Policy periodically.

17. Contact Us

If you have questions about this Privacy Policy or would like to submit a privacy-related request, contact:

CrackShot Games / RallyRoom

Email: crackshotgamestudios@gmail.com