1. About this policy
SmashDrop is operated by FuturePace, Inc., a Florida S Corporation (“we,” “us,” or “FuturePace”). This Privacy Policy explains what personal information we collect when you use the SmashDrop mobile app or visit smashdrop.com (together, the “Service”), how we use it, who we share it with, and the choices you have about it.
If you have questions about this policy, email us at hello@smashdrop.com.
2. Information we collect
2.1 Information you give us
Account information. When you create a SmashDrop account, we collect your email address and a password (stored only as a salted hash). If you sign in with Google or Apple, we receive the account identifier and email associated with that provider.
Profile information. You may add a display name, first and last name, phone number, location text and search radius, DUPR rating, DUPR ID, and a player attribute (such as sex/gender used for event eligibility filters). All profile fields beyond display name and email are optional, and you control which of them are visible to other players through privacy settings in the app.
Event and match data. When you host or join an event, we record the event configuration, your roster status, your match assignments, scores you submit, scores you verify or dispute, and any host actions taken with respect to you. Match data is visible to other participants in the same event because the product is designed to surface it (leaderboards, history, and so on).
Communications. If you contact us by email, we receive the contents of your message and any information you choose to include.
2.2 Information we collect automatically
Technical data. When you use the Service we automatically receive technical data sent by your device or browser, including IP address, device type, operating system version, app version, and timestamps of requests. We use this to operate the Service, prevent abuse, and diagnose problems.
Push notification tokens. If you opt in to push notifications, we store the device token issued by Apple or Google so we can deliver event-related notifications to you.
2.3 Information we do not collect
We do not collect precise device GPS location, biometric data, your contacts, microphone or camera input, or your activity on social-media platforms outside the Service.
3. How we use information
We use the information described above to:
- Operate the Service - authenticate you, run events, generate rounds, compute standings, deliver notifications, and provide history.
- Communicate with you - send transactional emails (sign-up confirmation, password reset, event-related notices) and respond to support requests.
- Protect the Service - detect and prevent fraud, abuse, and security incidents.
- Improve the Service - understand which features are used and diagnose bugs.
We do not use your information for behavioral advertising, and we do not sell or rent your personal information to third parties for marketing.
4. How we share information
4.1 With other Service users
Information you contribute to an event - your display name, match scores, standings position, and the player attributes you have chosen to make visible - is shown to other participants in that event. You can adjust which optional profile fields are publicly visible through privacy settings inside the app.
4.2 With service providers (sub-processors)
We use a small number of third-party service providers to run the Service. They process personal information only on our behalf and only to the extent needed to deliver their service:
| Provider | What they do | What they see |
|---|---|---|
| Supabase, Inc. | Authentication and database hosting | Account credentials (hashed), profile, event & match data |
| Resend, Inc. | Transactional email delivery | Email address, message contents |
| Cloudflare, Inc. | Website hosting, DNS, email routing | IP address, technical data |
| Expo (650 Industries, Inc.) | Push-notification delivery | Push token, notification payload |
| Google LLC | “Sign in with Google” identity | Google account identifier, email |
| Apple Inc. | “Sign in with Apple” identity (when launched) | Apple account identifier, email |
If we add additional sub-processors in the future (for example, a payments provider, an analytics provider, or a rating-system integration), this Policy will be updated to reflect them before they go into use.
4.3 For legal reasons
We may disclose information if we are required to by law, by valid legal process, or if we believe in good faith that disclosure is necessary to protect the rights, property, or safety of FuturePace, our users, or the public.
4.4 In a business transfer
If FuturePace is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction, subject to a successor entity honoring this Policy or providing notice and a meaningful choice before changing it.
5. Data retention
We retain your account information for as long as your account is active. Event and match data is retained so leaderboards and history features work as designed. If you delete your account, we remove your personal profile information within 30 days, and we anonymize your historical event participation (your display name is replaced with a generic identifier so other participants’ historical standings remain coherent). We may retain limited records longer where we are required to by law or to resolve disputes.
6. Your rights and choices
Depending on where you live, you may have the right to:
- Access the personal information we hold about you.
- Correct information that is inaccurate or incomplete.
- Delete your account and associated personal information.
- Export a copy of your account data in a portable format.
- Withdraw consent for processing that is based on consent.
- Object to certain processing or restrict it.
You can exercise most of these rights from inside the app (Profile → account settings). For anything not available in the app, email hello@smashdrop.com and we will respond within 30 days.
California residents may exercise the rights provided by the California Consumer Privacy Act, including the right to know, the right to delete, and the right to opt out of the sale or sharing of personal information (we do not sell or share personal information for cross-context behavioral advertising). To submit a request, email us at the address above.
EEA / UK residents may submit a complaint to your local data protection authority if you believe your rights have been violated.
7. Children
SmashDrop is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, contact us and we will delete it. Users under 18 should review this Policy with a parent or legal guardian.
8. Security
We protect your information with industry-standard safeguards including TLS in transit, encryption at rest for credentials, and password hashing. No system is perfectly secure; we recommend using a strong, unique password and enabling additional security on your sign-in provider account where available.
9. International transfers
FuturePace operates from the United States. If you access the Service from outside the United States, you understand that your information will be transferred to, stored, and processed in the United States. Our service providers may also process information in other jurisdictions.
10. Changes to this policy
We may update this Policy from time to time. When we do, we will update the “Last updated” date above. If the changes are material, we will provide additional notice (for example, an in-app message or an email to the address on your account) before the changes take effect.
11. Contact
FuturePace, Inc.
Florida, USA
hello@smashdrop.com