Privacy Policy
Updated October 27, 2026
LapRoster accounts and team workspaces
LapRoster stores your coach email, a salted password hash, a hashed recovery code, and sign-in sessions. Your email is an account identifier. Forgot password sends a short-lived reset link to the account email; athlete recovery also checks the athlete email on the linked roster. We store a hash of the reset link, its expiry, and its use status. A backup recovery code may also be used.
Team workspaces store the name, logos, jersey images, colors, roster and contact relationships, attendance, groups, schedules, availability responses, announcements, timing results, and uploaded race video you choose to provide. Cloudflare hosts the application, database, and shared videos. Your browser also keeps team-specific cached data and may keep recordings that have not been uploaded.
The account-owning coach controls team settings, roster changes, deletion, and session resets. People given a shared team code can access the team workspace, mark attendance, organize groups, record timing, upload videos, and view the team store, but do not receive coach administration access. Athlete and parent accounts provide their own limited views. Keep team codes and private invitation links restricted to people you authorize. We use sign-in cookies and hashed network identifiers to maintain sessions and limit repeated account-access attempts. Coach and athlete sign-in sessions expire after seven days; parent sessions expire after 30 days.
Provide only information and recordings you are authorized to use, including any required permission for students. Account and team data are retained to operate the workspace. For access, correction, or deletion requests, contact laproster@gmail.com. Team registration does not enroll anyone in text messages. Your team’s text signup page identifies its messaging program and support contact.
Athlete training and schedules
Athlete accounts are for ages 13 and older. We store the athlete’s username, roster link, selected age group, password and recovery-code hashes, sessions, assigned workouts, completion updates, and submitted workout dates, distances, durations, effort ratings, and notes. Shoe records and mileage support training logs. Coaches can review training for athletes on their active roster. Schedules and availability include event details, responses, optional notes, and response times. Do not put medical or other sensitive information in free-text notes. See the athlete privacy notice for additional details.
Race recordings and voice splits
Camera and microphone access is requested for recordings. Uploaded videos, audio, timing marks, and related athlete references are stored or processed to provide recording, review, and split features. Voice split analysis sends recorded audio to Cloudflare Workers AI for speech transcription; the resulting suggestions are provided for coach review. A recording may include other people, so obtain the permissions needed to record and share it. Local recordings may remain on the device until uploaded or deleted.
Team store orders
Stripe collects payment details directly for apparel purchases. Printful receives the order items, artwork, delivery name, address, and contact information needed to manufacture and ship your order. LapRoster retains order, payment-reference, shipping, and customer-support records. Tax, transaction, and other records may be retained when required for accounting or legal obligations.
Optional notifications and linked results
If you enable iPhone push notifications, we store an Apple device token linked to your signed-in account and notification role. Apple delivers the alerts. You can disable notifications in device settings. Announcement reports and blocks are stored to protect recipients and support moderation.
The optional in-app MileSplit browser keeps its sign-in session in a separate persistent web store on your device. MileSplit handles your login; LapRoster does not collect your MileSplit password. Results you choose to import are stored with the team and athlete. Division rankings show athlete names and performance results to authorized family accounts in that division. Website privacy and subscription terms apply when using MileSplit.
Shared content review
Coaches review recordings before sharing them with family accounts. Parents can report recordings and block team video sharing. Parents and athletes can report or block announcements. Support reviews reports and may restrict content or senders. Basic text filtering does not replace human review.
Subscription billing
Stripe processes subscription payments. We share the team name, owner email, and a team identifier with Stripe to create and manage your billing account. Stripe collects payment details directly; LapRoster does not store card numbers. We retain Stripe customer and subscription identifiers, subscription status, trial and billing dates, and cloud video storage usage to provide your plan. You can manage payment details and cancellation through Subscription.
Team messaging policy
Effective September 17, 2026
This policy describes how your team handles information for its LapRoster team messaging program. It applies to team email and text notifications and the contact information used to send them.
Information we use
We use contact names, mobile phone numbers, email addresses, athlete or parent/guardian relationships, messaging preferences and consent records, and information needed to deliver team announcements. Message content and delivery records may be processed by our service providers.
Why we use it
We use this information to communicate practice and meet reminders, schedule changes, team announcements, and race results; respond to support requests; honor opt-outs; and maintain the messaging program.
Mobile information and sharing
We do not sell personal information. We do not share mobile phone numbers with third parties or affiliates for marketing or promotional purposes. Text messaging opt-in data and consent are not shared with third parties for their marketing or promotional purposes.
Information may be processed by service providers needed to operate and deliver the program, including Twilio for text delivery; Google or Microsoft when a coach connects their email account; and Cloudflare for hosting, database, video storage, voice transcription, and platform email delivery. Connected email accounts use provider authorization and stored access credentials to send the messages requested through LapRoster. Each team’s connection is associated with that team. You can disconnect it in the email setup or revoke access through the email provider. These providers receive information needed for their services. Information may also be disclosed when required by law.
Website text signup
Text enrollment takes place at the team-specific SMS signup page provided by your coach. You enter your name and your mobile number and actively select an unchecked consent box. We store the number, name, signup date and time, signup page address, the consent wording shown, and its policy version. A daily hash derived from network information is used to limit abusive signup attempts. Signup records are available to authorized team administrators, not to public visitors.
Family setup preferences
Private setup invitations are tied to an athlete roster entry and the invited parent or athlete email. We store optional communication and participation choices, the mobile number entered, and the time and version of confirmation. Coaches can see setup status. Private links expire after 90 days and should not be forwarded. A person with the link can update its preferences. Declining training disables access without deleting existing records; contact your coach to request deletion. Email preferences apply to that address for the team. Text choices remain subject to recorded consent and STOP requests.
Parent accounts
Parents can create an account through a private parent invitation. We store the parent email, a password hash, a recovery-code hash, login sessions, and links to invited children. Linked parents can view their children’s current results, team announcements and uploaded team videos, respond to schedules, and manage their own preferences. Parent accounts do not grant coach editing access. Removing the parent contact from an athlete’s roster entry removes that account’s access to the entry. Account sessions expire after 30 days; logging out ends the current session. Keep invitations, reset links, and backup recovery codes private.
Optional course maps and location
When you open a course overlay, map tiles are requested from OpenStreetMap. Its tile service receives your IP address, the LapRoster site origin, and the map areas requested. Tapping Show my location asks your device for permission to show your position and GPS accuracy on that map. LapRoster does not upload or store those device coordinates. Moving the map to your position requests tiles for that area. Coach-confirmed course alignments are stored for the team. Recording checkpoint labels are stored with videos; they are manually confirmed course locations, not a history of your movements.
Your choices
Text messages are sent only to recipients who opt in. Providing contact information or participating on the team does not by itself constitute consent to receive texts. Message frequency varies with the team schedule. Message and data rates may apply.
Reply STOP to a team text to opt out. Reply HELP for assistance, or contact laproster@gmail.com. You may also contact us to request an email opt-out, correct your information, or request deletion of your contact information. We may retain records needed to honor opt-outs or meet applicable obligations.
Support and deletion requests
The Help & account page lets signed-in users report problems and request account deletion. We store the request, account reference, status, and submission time. A deletion request is reviewed before completion; submitting it does not immediately delete an account or cancel a subscription. We complete deletion requests within 30 days and email a confirmation when finished. You may also contact laproster@gmail.com to request access, correction, or deletion. We may verify your identity and relationship to team records before acting.
Advertising and tracking
We do not sell personal information or use team, athlete, or parent data for targeted advertising or cross-app advertising tracking. Information is used to operate, secure, and support LapRoster and the team features you choose.
Retention and protection
We retain information as needed to operate the team messaging program, document consent and opt-outs, and meet applicable recordkeeping requirements. Access should be limited to authorized team administrators and service providers. No storage or transmission method is completely secure.
School-authorized accounts under 13
For schools with confirmed authorization, students under 13 may create accounts for educational team participation using a username and password. Signup does not collect their email address or phone number, and athlete email and text messaging are disabled. We record the school authorization version with the account. Student information is used to provide and secure the school-requested service, not for marketing or other commercial purposes. Parents can contact the coach or LapRoster to review, correct, delete, or stop further collection of their child’s information. See the athlete privacy notice for data categories, service providers, and retention.
Students and families
Parents and guardians may contact us about a student's contact information or messaging preferences. Do not submit another person's mobile number as an opt-in without their permission.
Updates and contact
We will post revisions here with an updated effective date. For questions or privacy requests, contact LapRoster at laproster@gmail.com.