Privacy policy

The minimum to run a league: your name and photo from Google sign-in, the email tied to that account, your club, and your year of birth. That is the whole footprint of a competitor. We ask for the year, never the date, because the year is all a category needs.

Google sign-in gives us your name, profile photo, and email address. We use the email to identify your account and send league-critical messages. There is no password anywhere in BlocLeague, so we never see or store one.

Your year of birth is requested once, when you choose your club, for a single purpose: setting your competition category. We never ask for the day or the month. It is written once and cannot be changed afterwards.

When you join, we may use an approximate location once to suggest the nearest verified gym, or you inherit a gym from the QR you scanned. BlocLeague does not track your location in the background and does not follow you between sessions.

Your name, photo, club, standings, and contributions are visible to other climbers. This visibility is the anti-cheat mechanism, not surveillance: an open witness graph is what exposes collusion and fake accounts. Your date of birth and email are never shown to other climbers.

To run the league: to compute standings, group divisions and categories, attribute the problems you set and the tops you witness, generate round recaps from real results, and, if you opt in, send you notifications. We do not build advertising profiles and we do not sell your personal data.

Push notifications are optional and opt-in, and are used for round-close results and occasional nudges. You can turn them off in your device settings at any time, and installing the app is never required to use it in a browser.

We rely on a small set of processors to operate: Google for sign-in, our hosting and database provider to store league data, and Google Places to keep the gym registry bound to real venues. They process data on our instructions to deliver the service, not for their own marketing.

We keep your data while your account is active. Competition history is meant to last, since the record book is part of the product, but you can ask us to close your account and remove your personal data. Some results may be kept in anonymized form so past seasons and the archive stay intact.

Climbers under 13 do not hold their own accounts; a guardian's account holds a child profile, which is never searchable and cannot witness, and guardian consent governs any photo. Climbers aged 13 to 17 use their own sign-in with stricter privacy defaults applied.

Data is encrypted in transit and access is limited to what is needed to run the league. Because sign-in is delegated to Google, your credentials never reach us. No online service can promise perfect security, but we design for the least data held and the fewest ways to reach it.

You can ask to see, correct, or delete your personal data, and to close your account. We will update this policy as the product grows and will signpost material changes in the app. For any privacy request, write to hello@blocleague.app.