Privacy Policy - PaddockReport

1. Introduction

PaddockReport ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use the PaddockReport app for iPhone (the "App"), and use our services.

2. Information We Collect

Personal Information

We may collect personal information that you provide to us, including but not limited to:

Name and contact information (email address, and a phone number if you gave us one)
Account credentials (your email address and password; we store the password only as a one-way hash)
Profile information (rider information, barn affiliation)
Communication preferences

You can create an account or sign in with an email address and password, or with Apple, Google or Facebook. When you use one of those, the provider tells us who you are, and we store the provider's account identifier with your account so we can recognize you next time. We never receive your password for that provider.

Sign in with Apple: an identifier for your Apple Account, and the email address you choose to share. That can be your real address or a private relay address that forwards to you, if you chose Hide My Email. Apple shares your name only the first time you sign in, and only if you allow it. We also keep a token Apple gives us, encrypted, so we can tell Apple to disconnect the App when you delete your account.
Google: an identifier for your Google Account, your email address and whether Google has verified it, and your name. We don't store your Google profile photo, and we don't get access to your Google data beyond these.
Facebook: we use Facebook Limited Login, which gives us an identifier for you that is specific to our App, your name and, if you allow it, your email address. It does not give us access to your Facebook friends, posts or other Facebook data, and we don't use it to post anything. We run Facebook's software with its automatic event logging and advertising identifier collection turned off.

We never use the email address a provider gives us to join your sign-in to a different PaddockReport account automatically.

Using the App

When you use the App, we also collect:

An installation record: a random identifier the App creates the first time it runs (it is not an Apple advertising identifier), the platform and its version, the App's version and build, your time zone and language, and when the App last contacted us. If you sign in, this record is linked to your account, so "Sign out everywhere" can sign out each of your devices.
Push notification registrations: if you allow notifications, the push token Apple issues for your device, so we can send you the results alerts you asked for, and a record of which notifications we sent to which device and whether they were delivered.
Your notification inbox: the results notifications we've sent you, so you can read them again in the App.
Searches: what you search for in the App is sent to our server to find the results. We don't save your searches to your account, but the search text appears in our server logs, which we keep for 30 days (see section 9).
Crash and error reports: when the App crashes or hits an error, it sends a diagnostic report to Sentry, our error-monitoring service. A report includes the error and where in the App it happened, the device model, and the operating system and App versions. Crash reports aren't linked to you: they carry no account or installation identifier, and no name or email address. We also remove sign-in tokens and passwords from them.

The App asks for your location only while you're using it, and only if you allow it, to welcome you when you're at a show: it compares your location with the show's venue on your phone and never sends it to us. It uses your camera or photo library only when you choose to send us photos (see Photo Submissions). It doesn't ask for your contacts, doesn't read your browsing history, and doesn't use Apple's advertising identifier.

Automatically Collected Information

When you use our website or the App, we automatically collect:

Your IP address and what your browser or the App reports about itself (such as the browser and operating system), in our server logs
The pages and App requests you make, in our server logs, including what you searched for when it's part of the page address
Anonymous website visit counts from Fathom Analytics, which don't identify you (see section 7)
Cookies (see section 7)

We don't work out your location from your IP address.

Account Activity History

When you're signed in, we keep a history of the pages and app screens you request: when you requested each one, whether it worked, and which archived results it showed you. It doesn't include what you search for, anything you type into a form, or your IP address.

We use it to keep the site and its results safe from misuse, and to help with support questions about your account. Only PaddockReport admins can see it.

We keep this history for 365 days. Deleting your account deletes it.

Follows and Email Alerts

When you follow a horse, exhibitor, owner, breeder, class or show, we store:

What you follow
Any optional "Who is this for?" notes you add to a follow
A history of the alerts we have emailed you

Your notes are private. Only you can see them, and we never show them publicly.

We only send alerts to an email address you have verified. To stop alerts, use the unsubscribe link at the bottom of every alert email or your email app's one-click Unsubscribe button. You can also turn alerts off under Settings → Alerts.

Follows and notes you add in the App are the same ones you see on the website. You can turn App notifications off in the App's notification settings or in your iPhone's Settings; that doesn't change your email alerts.

Paddock Picks

If you play Paddock Picks, your first name and last initial, your rank and your points appear on that contest's leaderboard to everyone who can see the contest. We show how many players picked each horse, but not who picked it.

Photo Submissions

When you send us photos of an entry list, results sheet or judges' card, we remove the photo's hidden details (including any location) before we store it. Only our admins see your photos, and we never publish them. Automated transcription services read them on our behalf. We delete the photos 30 days after we review them.

What we read from your photos, such as entries, bloodlines, owners and placings, may be published on the site and credited to you by your first name and last initial.

3. How We Use Your Information

We use the collected information for various purposes:

To provide and maintain our Service
To send you show alerts and results notifications, by email and as App notifications
To keep you signed in, and to sign you out of a device or everywhere when you ask or your password changes
To find and fix crashes and errors in the App
To manage your account
To improve and personalize your experience
To email you about your account, such as verifying your email address or resetting your password
To analyze usage patterns and optimize our Service
To comply with legal obligations

We only email you about your account and the alerts you asked for. We don't send newsletters, promotions or any other marketing email.

We may share your information in the following circumstances:

Service Providers: With third-party vendors who assist us in operating our Service, only for that purpose. These include our hosting provider and Cloudflare (which carries all traffic to our website and the App's server), our email delivery provider, Expo and Apple (which deliver App notifications, so they receive your device's push token and the text of each notification), Sentry (crash and error reports from the App), Laravel Nightwatch (performance and error monitoring for our servers, which records requests and which account made them, by account id only: not your name, your email address or what you searched for), and Apple, Google and Meta when you sign in with them.
Show Organizations: With horse show organizers for result verification
Legal Requirements: When required by law or to protect our rights
Business Transfers: In connection with mergers, acquisitions, or asset sales
Consent: With your explicit consent for specific purposes

We don't sell your personal information, and we don't share it with anyone for advertising.

5. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. All traffic is encrypted in transit. The App keeps its sign-in tokens in your device's secure storage (the iOS Keychain), sign-ins expire, and tokens a provider gives us are stored encrypted. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

6. Your Rights and Choices

You have the following rights regarding your personal information:

Access: Request a copy of your personal information
Correction: Request corrections to inaccurate information
Deletion: Request deletion of your account and personal information
Opt-out: Turn off email alerts and App notifications at any time. We don't send marketing email
Data Portability: Request your data in a machine-readable format

Deleting Your Account

You can delete your account at any time: in the App, from Account → Delete account, or on the website, under Settings → Profile. The App asks you to confirm with your password or by signing in with Apple, Google or Facebook again; the website asks for your password. If you only sign in with Apple, Google or Facebook, you have no password for the website to ask for: delete your account in the App, or first set a password with Forgot password (we email the link to your account's address) and then delete it on the website.

Removing PaddockReport in your Facebook settings doesn't delete your account. It disconnects Facebook and deletes your Facebook ID, and the email address Facebook gave us if you don't sign in with it another way. It also signs you out of the App wherever you signed in with Facebook. If Facebook is the only way you sign in, delete your account first: afterwards, signing in with Facebook again starts a new, empty account.

When you delete your account:

You are signed out on every device straight away, and your devices stop receiving App notifications.
We delete your account and your personal data: your name, email address and password, your connected sign-in methods, your follows and their notes, your notifications and alert history, your App installation and push records, your Paddock Picks entries, your submitted corrections and any files you uploaded with them.
Messages you sent through our contact form while signed in, and those sent signed out from your verified email address, are kept without your name, email address or IP address, so they no longer identify you.
If you used Sign in with Apple, we tell Apple to disconnect the App from your Apple Account.
The App removes the data it stored on your device.

We keep a record that an account was deleted and when. The record can't identify you without our key. Copies in our backups are overwritten as the backups expire (see section 9). Show results are public records published by the show organizations, so deleting your account doesn't remove you from results, horse or exhibitor pages. You can ask us to withhold your name: once we approve it, your results stay (so every count and leaderboard is unchanged) but read “Name withheld”, your exhibitor, owner or breeder page is taken down, and your name leaves our search. For anything else about show data, contact us.

7. Cookies and Tracking

Our website uses cookies to keep you signed in and to protect forms against forgery. We measure website traffic with Fathom Analytics, which doesn't use cookies or identify individual visitors. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you won't be able to sign in on the website.

The App doesn't use cookies. Neither the website nor the App tracks you across other companies' apps or websites, and we don't use your data for targeted advertising.

8. Children's Privacy

Our Service is not intended for individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal information, please contact us.

9. Data Retention and International Transfers

We keep your information only as long as we need it:

Your account, follows and settings: until you delete your account.
App sign-ins: until you sign out, and at most 90 days after you sign in. We delete the record of a sign-in 30 days after it ends.
App installation records: deleted 12 months after the App last contacted us.
Push registrations: unlinked from your account when you sign out of the App on that device, and deleted when you turn App notifications off or the installation record is deleted. If Apple tells us a push token no longer works, we stop using it.
Notifications in your inbox: 30 days.
Our records of which notifications we delivered: at most 90 days.
Crash and error reports: 90 days, in Sentry.
Server logs, which include IP addresses and search text: 30 days.
Backups: overwritten within 30 days.

Your information may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ. Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer.

10. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

Email: [email protected]
Contact form: https://paddockreport.com/contact