Privacy Policy
Effective date: March 14, 2026
Last updated: March 14, 2026
This Privacy Policy describes how the New York Footbag Association ("NYFA," "we," "us," or "our") collects, uses, and protects your information when you use our website at newyorkfootbag.com ("the Site").
1. Information We Collect
Information you provide through sign-in
When you sign in with Google or GitHub, we receive your name and email address from your OAuth provider. We use this information to subscribe you to our mailing list and identify your session.
Information collected automatically
We use Plausible Analytics, a privacy-focused analytics tool that does not use cookies, does not collect personal data, and does not track individual users across sites. Plausible collects aggregate data such as page views, referral sources, and general geographic region (country level). No personal information is stored.
2. How We Use Your Information
We use your information to:
- Subscribe you to our mailing list when you sign in
- Send you updates about sessions, tournaments, road trips, and community news
- Send you a welcome email when you first join
- Identify admin users for site management
3. How We Share Your Information
We do not sell your personal information. We share your information only with the following service providers, which process data on our behalf:
| Service | Purpose | Data shared |
|---|---|---|
| Dex (self-hosted) | Authentication broker | OAuth tokens (not stored) |
| Listmonk (self-hosted) | Mailing list management | Email address, name |
| Plausible (self-hosted) | Privacy-focused analytics | No personal data |
| Cloudflare | CDN and DDoS protection | IP address (in transit) |
Dex, Listmonk, and Plausible are self-hosted on our own infrastructure. Your data does not pass through third-party SaaS platforms for these services.
4. Data Storage and Retention
Your email address and name are stored in our self-hosted Listmonk instance. Session data is stored in a signed, encrypted cookie that expires after 1 hour. We do not operate a user database beyond the mailing list.
If you unsubscribe from the mailing list, your subscription status is updated but your record may be retained for list management purposes. To request full deletion, contact us.
5. Your Rights
You can:
- Unsubscribe from our mailing list at any time using the link in any email
- Request deletion of your data by emailing us
- Sign out at any time to end your session
6. Cookies
We use a minimal set of cookies required for authentication. See our Cookie Policy for details. We do not use tracking cookies or advertising cookies.
7. Children's Privacy
The Site is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it.
8. Security
We use reasonable measures to protect your information, including encrypted connections (TLS), secure session cookies, and self-hosted infrastructure. However, no method of transmission over the internet is 100% secure.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date.
10. Contact
If you have questions about this Privacy Policy, contact us at [email protected].