Legal

Privacy Policy

What we collect, what we do with it, and what you can control.

Last updated: August 2026

Your Data

What We Collect and Why

We collect only what we need to run the Platform. Race results are public by design. The rest is not.

Information You Provide

We collect information that you, an event organizer, or a race official enters into the Platform:

Account information: your name, email address, and a password (stored only as a secure hash)
Profile information: sailing biography, home club, country (World Sailing MNA code), boats and sail numbers, and competitor or team profile details
Event and entry data: entries, crew lists (names, email addresses, and on-boat positions), boat details, ratings, race results, scoring data, protests, and race committee notices or documents
Compliance and waiver data: electronic signatures on event waivers and releases, the signer name and email address captured at the time of signing, and a signing-capacity attestation (signing for yourself as an adult, or as the parent or legal guardian of a minor competitor, with the minor’s name). We do not collect dates of birth.
Payment information: entry fees and platform charges are processed by our payment providers. We receive transaction records (amount, status, timestamps) but never your full card number
Communications: messages, correspondence, and support requests you send through or about the Platform

Information Collected Automatically

When you use the Platform, some information is collected automatically:

Usage data: pages visited, features used, and interactions with the Platform
Device information: browser type, operating system, and device identifiers
Log data: IP addresses, access times, and referring URLs
Error and performance diagnostics: collected through a third-party monitoring provider and configured to reduce the personal data included in reports

How We Use Your Information

We use the information we collect to:

Provide, maintain, secure, and improve the Platform
Process event entries, manage rosters, and publish race results and standings
Build and maintain competitor, team, and boat profiles and sailing statistics from event results
Generate AI event summaries and weather briefings for events
Send account, entry, and event-related email (see "Email and Your Choices")
Process entry fees and platform charges through our payment providers
Prevent abuse, investigate incidents, and enforce our Terms of Service
Produce aggregated and de-identified insights about the sport (see "Aggregated and De-Identified Information")
Comply with legal obligations

Public Information and Results

RegattaWeb is a platform for publishing sailing results, so some information is public by design. Published event details, entry lists and scratch sheets, race results, and series standings are visible to anyone and may be indexed by search engines.

If you take part in an event managed through RegattaWeb, information that is part of that event’s official record, such as your name, sail number, class, club, country, and finishing positions, may be displayed publicly as part of the results.

Competitor and Team Profiles

The Platform automatically builds competitor, team, and boat profiles from event results. Individual competitor and team profiles are public by default and include your name, results history, and the club and country recorded for you at the time of each event.

You can set your individual competitor profile to Private from your account settings. Even when a profile is private, information that forms part of an event’s official published results remains part of that event record. Team and boat profile visibility is managed together with the events those profiles appear in.

AI Summaries and Weather Briefings

We use a third-party AI service to generate short natural-language event summaries and weather briefings. These are produced from structured event facts (results, standings, schedule, and weather conditions) and are constrained by guardrails that limit the model to the facts provided. Content sent to the AI service is processed by our provider under contract and is not used to train its or any third party’s foundation models.

Weather briefings use the coordinates of the racing venue, not your device location. Those coordinates are sent to third-party weather data providers to retrieve conditions.

How We Share Information

We do not sell the personal information of individual sailors. We share information in these situations:

Event organizers and race officials: to manage entries, run their events, and communicate with participants
Other participants and the public: results, standings, rosters, and profiles, as described above
Service providers: the third-party providers described in the next section, who act on our instructions
Legal and safety: when required by law or legal process, or to protect the rights, property, or safety of RegattaWeb, our users, or the public
Business transfers: in connection with a merger, acquisition, financing, or sale of assets, subject to this Privacy Policy

Service Providers and Sub-Processors

We rely on a small set of third-party service providers to operate the Platform. They act on our instructions under contract and may process personal information only to provide their services to us:

Cloud hosting and infrastructure: hosting, database, and storage for the Platform, located in the United States
Email delivery: sending account, entry, and event email on our behalf
AI processing: generating event summaries and weather briefings from structured event facts
Payment processing: handling entry fees and platform charges under the providers’ own privacy policies
Marine weather data: retrieving conditions and buoy data for event venues using venue coordinates
Error and performance monitoring: diagnosing problems and improving reliability

Aggregated and De-Identified Information

We may create aggregated, anonymized, or de-identified information and statistics from activity on the Platform, for example participation trends across fleets, classes, and regions. This information does not identify you, your boat, or any individual competitor.

We may use and disclose aggregated and de-identified information for any purpose, including research, product improvement, and providing insights to the sailing community and industry. We do not attempt to re-identify de-identified information, and we do not sell the personal information of individual users.

Payments

Entry fees are set by event organizers, and platform charges are billed to organizing authorities. Payments are handled by third-party payment providers, who collect and process card and payment-account details directly under their own privacy policies.

RegattaWeb does not receive or store full card numbers. We keep records of transactions, such as amount, currency, status, and timestamps, that are necessary to administer events and our platform.

Email and Your Choices

Some email is essential to using the Platform, such as address verification, password resets, entry access links, and fee notices, and is always sent while you have an account or an active entry.

Other email, such as results notifications and event updates, includes an unsubscribe link and a List-Unsubscribe header. You can opt out of non-essential email at any time using that link or from your account preferences. We keep a suppression list of addresses that have hard-bounced or filed a complaint so we stop contacting them.

Cookies and Tracking

RegattaWeb uses session and authentication cookies to keep you signed in and to operate core features. We do not use third-party advertising cookies or cross-site tracking. Essential cookies are required for the Platform to function.

Data Storage, Security, and Location

Your data is stored on cloud infrastructure located in the United States. If you access the Platform from outside the United States, your information will be transferred to and processed there.

We use industry-standard safeguards including encryption in transit and at rest, role-based access controls, hashed passwords, and session revocation on password reset. No method of electronic storage or transmission is completely secure, and we cannot guarantee absolute security.

Data Retention

We retain account information for as long as your account is active. Event data, race results, and standings are retained indefinitely as part of the historical sailing record. Waiver and release signatures are retained as legal evidence and are kept on an append-only basis.

You may request deletion of your account and personal data. Deleting a profile does not remove your name or results from an event’s official published record, and a minimal signer snapshot (name and email captured at signing) may be retained where a signature record requires it.

Your Privacy Rights

Depending on where you live, you may have the right to:

Access the personal information we hold about you
Request correction of inaccurate information
Request deletion of your personal data
Object to or request restriction of certain processing
Request a portable copy of your data
Set your individual competitor profile to Private from your account settings

California Privacy Rights

If you are a California resident, the California Consumer Privacy Act (as amended) gives you the right to know what personal information we collect and how we use and disclose it, to request access to or deletion of that information, to request correction of inaccurate information, and not to be discriminated against for exercising these rights.

In the past 12 months we have collected the categories of personal information described in this policy: identifiers (such as name, email, and IP address), internet or network activity, commercial information related to entry fees, and audio/visual information (such as profile photos). We collect this information from you, from event organizers and race officials, and automatically through your use of the Platform, and we use and disclose it for the purposes described above.

We do not sell or share (as those terms are defined by California law) the personal information of individual users, and we do not use sensitive personal information to infer characteristics about you. We may disclose aggregated and de-identified information, which is not personal information.

To exercise a California right, use the account controls described in "Managing Your Data" below. We are in the process of establishing a dedicated request channel and will update this section when it is available.

Children’s Privacy

RegattaWeb is not directed to children under 13, and accounts are intended for adults. Minors may compete in events managed through the Platform. Where a waiver is required for a minor, it is signed by a parent or legal guardian. We do not knowingly collect personal information directly from children under 13. If you believe a child has provided us with personal information, please let us know so we can take appropriate action.

Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page with a revised "Last updated" date, and for material changes we will take additional steps as appropriate. Continued use of the Platform after an update means you accept the revised policy.

Managing Your Data

You can review and update your account information, set your individual competitor profile to Private, and manage your email preferences from your account settings. Every non-essential email we send also includes a one-click unsubscribe link. We are setting up a dedicated channel for other privacy requests and will update this page when it is available.