Privacy Policy

AllOutMaine ("we," "us") helps people find and organize pickup sports and activities in Maine, and sells AllOutMaine merchandise at shop.alloutmaine.com. This policy explains what information we collect — in the app and in the shop — how we use it, and the choices you have. By using either, you agree to this policy and to our Terms of Service.

Information we collect

• Account information you provide: your first name, last name, gender, email address, and a password (which we store only in encrypted/hashed form, never as plain text).
• Optional profile details you choose to add: your ZIP code, favorite sports and how far you'll travel, notification preferences, a profile photo, and links to your social accounts. The photo and links are shown to other players — that's their purpose — so add only what you're comfortable being seen.
• Content you create: games you host or join, check-ins, comments, guests you add, friend connections, any locations you enter, league and tournament sign-ups, the sessions you log in your Passport, and the private notes you write there.
• Activity records the app keeps for you in your Passport (formerly your game history): which games you played and when; the venues you checked in at, when, and whether your phone confirmed you were there; sessions you logged yourself; and the streaks, stamps, badges, and stats that come from them. Your Passport and notes are private to you. Counts — a badge, a streak, how many stamps or counties you have — can show on your profile, but never which places or when.
• Sign-in records: if you choose "stay signed in," a long-lived token in a cookie on that device; if you sign in by emailed code, the code itself, briefly, until it's used or expires; and a short log of sign-in attempts (time and IP address) that we keep to slow down anyone guessing passwords. In the iPhone app, we also issue a sign-in token for that phone so the Apple Watch app and widgets can reach your account. It's kept in the phone's and Watch's secure storage (the Keychain), we store only a scrambled copy, and it stops working when you sign out.
• Google sign-in: if you choose "Continue with Google," Google tells us your name, your email address (and that Google has verified it), and an account ID Google issues for AllOutMaine, so we can sign you in next time. We don't get your Google password, contacts, or anything else in your Google account.
• Sign in with Apple (in the iPhone app): if you choose "Continue with Apple," Apple tells us an account ID it issues for AllOutMaine, your email address (or a private relay address, if you choose "Hide My Email"), and, the first time only, your name. We also keep a token Apple gives us so that, if you delete your account, we can tell Apple to end AllOutMaine's access too. We don't get your Apple ID password or anything else in your Apple account.
• Messages with your friends: the text of direct messages you send and receive, any games you share in them, when they were sent, and when each of you last opened the conversation (to show "Seen"). Only friends can message each other. See Direct messages below.
• Places you follow and people you block: the venues you follow (so we can tell you about games there), anyone you've blocked, and any reports you send about another member. Reports are seen only by AllOutMaine admins; the person reported isn't told who sent it.
• Phone alert subscriptions: if you turn on phone alerts, the push subscription your browser issues for that device, or in the iPhone app the device token Apple issues for that phone, so we can deliver them.
• Your marketing choice: whether you've said yes to AllOutMaine news — in the app or at the shop's checkout — and when. See Marketing consent.
• Giveaway entries: when a giveaway is running, a record that you earned an entry by hosting or joining a game during its window.
• Organization details, if you administer one: the organization's name, description, and contact details, and which accounts administer it.
• Usage and device data collected automatically through Google Analytics, such as your approximate location (from IP address), device and browser type, pages viewed, and how you interact with the site. This is collected using cookies and similar technologies.
• What we do not collect: your device's precise location. The map and the check-in screen can use where you are if you ask them to, but that position is never sent to us and never stored. See Location below.

Location

The map has a locate button (◎). If you tap it, your browser asks your permission and then gives the page your device's location. We use it for exactly two things, both of which happen inside your own browser: drawing the dot that shows where you are, and calculating how far away each court or field is.

Checking in works the same way. When you tap Check in (or Find spots near me on the check-in screen), your browser asks your permission and gives the page your location once. Your phone compares it with the venue you picked, right there in your browser, and the only thing sent to us is the answer: on site or not on site. We use that answer to decide whether the check-in collects the venue's Passport stamp. The position itself is thrown away before anything is sent.

Your location is never sent to our servers, and we never store it. There is no place in AllOutMaine where your device's location is saved, and no way for another player to see where you are. We hold it in the page's memory only while you're looking at the map or the check-in screen — the moment you leave it, it is discarded, and closing the tab discards it too. What we do keep is the record you choose to create by checking in: which venue, when, and that on-site yes or no (see Activity records above). You can remove any check-in or logged session from your Passport.

We only ask when you tap one of those buttons. We never request your location in the background, and we never track you as you move around. If you say no, everything else keeps working — distances simply fall back to the ZIP code saved in your Settings.

There is one further use, and only for AllOutMaine administrators: when an admin adds a court or field to the directory, the same button can drop that venue's pin where they're standing, so a place can be added accurately from the spot itself. What gets saved there is the court's location — public information about a public place — and the record carries no link back to whoever placed the pin. That save is always a deliberate action, and it is the only circumstance in which a position read from this button is ever written down.

You can withdraw permission at any time in your browser's site settings or your phone's privacy settings, without affecting your account.

This is separate from the approximate location that Google Analytics infers from your IP address, described under Cookies & analytics below. That happens on every website visit and is not precise device location.

Direct messages

• Only you and the friend you're talking to see your messages in the app. Only people who are friends can message each other. If you remove a friend you both keep the conversation but neither of you can send new messages; if you block someone, the conversation is hidden from both of you.
• Messages are deleted 7 days after they're sent. They're removed from our database automatically. Our web host's routine backups can hold them, still encrypted, for a short time after that, until those backups are replaced.
• Message text is encrypted when we store it, with a key kept separately from the database, so the database and its backups contain only scrambled text. Our server decrypts a message to show it to you and your friend. That means these messages are not end-to-end encrypted: AllOutMaine could technically read them, but we don't, except as described next.
• Reports. If you report someone from a conversation, the reported message and up to 20 messages before it are kept past the 7 days so an AllOutMaine admin can read them and decide what to do. They return to normal deletion once the report is resolved.
• Alerts. A phone alert for a new message shows who it's from and the start of the message (phone alerts are encrypted on the way to your device). In the iPhone app, alerts are delivered through Apple's push notification service, so Apple handles the alert's title and text to get it to your phone. Email alerts never include the message text, only who sent it. You can turn message alerts off in Settings → Notifications.

The shop

shop.alloutmaine.com is a storefront we built on Hostinger's ecommerce platform. Browsing it needs no account and the shop doesn't know who you are in the app — the two aren't linked, even if you're signed in.

• Your cart lives in your own browser (local storage), as a list of item IDs and quantities. It never leaves your device until you check out, and nothing about it is sent to us.
• At checkout you're handed to Hostinger's hosted checkout, which collects your name, email address, shipping address, what you ordered, and any discount code you use. Payment is taken by Stripe. We never see or store your card number — it goes straight to Stripe. Hostinger and Stripe each handle that information under their own privacy policies.
• What we keep: the order itself — name, email, shipping address, items, and amounts — in Hostinger's order system, for as long as we need it to fulfil the order, handle any problem with it, and meet tax and record-keeping obligations.
• Our printer never gets your details. Orders are made to order by a Maine branding shop, but what it receives is a count of items, sizes, and colors. Your name and address stay with us; we do the shipping.
• Emails about your order — confirmation, tracking, and anything we need to ask you — are sent because you ordered. They aren't marketing, and you can't turn them off while an order is open.
• Buying something is not signing up for news. Placing an order never adds you to a marketing list. If the checkout offers a box for AllOutMaine news and you tick it, that's a separate, deliberate choice — see Marketing consent.
• Analytics on the shop work the same way as on the app, through Google Analytics — see Cookies & analytics below.

How we use your information

• To run the service — show games and venues, manage sign-ups and check-ins, and power friends and private games.
• To display your name to other players (you control whether your full last name is shown in your settings).
• To understand how the site is used and improve it.
• To contact you about the service — sign-in codes, and, if you've turned them on, game and friend notifications by email or phone alert.
• To send occasional news and community highlights, only if you opted in, and always with an unsubscribe link.
• To run giveaways you've earned entries in, including contacting a winner.
• To fulfil and support shop orders.
• To keep the service secure — for example, limiting sign-in attempts.

Marketing consent

We only send marketing email to people who asked for it. "Marketing" here means occasional AllOutMaine news, tips, community highlights, and word of new gear in the shop. It does not mean the emails the service has to send — a sign-in code, a game you're in being moved, an order confirmation. Those keep coming while you have an account or an open order, whatever you choose here.

In the app, consent is the box at sign-up that says "Send me occasional AllOutMaine news, tips, and community highlights." It is unchecked until you check it. You can change your answer any time in Settings.

In the shop, consent is a box at checkout offering AllOutMaine news, if one is shown. It is separate from the order: leaving it unticked changes nothing about your purchase, and ticking it is the only way a shop order puts you on the list.

One choice, wherever you made it. We keep a single list. Say yes in the app or at checkout and you're on it; say no in either place — the unsubscribe link in any email, or the switch in Settings — and you're off it everywhere, promptly, no questions. Withdrawing consent doesn't affect your account, your orders, or the game alerts you've turned on.

We don't sell or share the list, we don't use it for anyone else's advertising, and we don't send more than "occasional" — if AllOutMaine ever has enough news for a weekly email, we'll ask before starting one.

Cookies & analytics

We use Google Analytics to understand site traffic and usage. Google Analytics uses cookies and may process your IP address; information is handled according to Google's Privacy Policy. You can opt out using Google's browser opt-out add-on, or by blocking cookies in your browser.

How information is shared

We do not sell your personal information. We share it only with service providers that help us operate the site — our web host, Google Analytics, Google (only if you use "Continue with Google"), Apple (to deliver alerts in the iPhone app, and if you use "Continue with Apple"), CARTO / OpenStreetMap (who serve the map images), the U.S. National Weather Service (we send it only a place's map coordinates to get forecasts, never anything about you), and, for the shop, Hostinger's ecommerce platform and Stripe — and where required by law. Some information you choose to post — your display name, profile photo, social links, and the games you host or join — is visible to other AllOutMaine users.

If you sign up for a league or tournament run by an organization on AllOutMaine, that organization receives your name and contact details for that purpose, and its own privacy practices apply from there.

A note on the map: like any image loaded from another site, requesting map tiles from CARTO reveals your IP address and which part of the map you're viewing to them. Your device's precise location is not included in those requests — it never leaves your browser.

Your choices

• You can view and edit your name, ZIP, gender, favorite sports, photo, social links, notification settings, marketing preference, and name-privacy options anytime in the app's Settings.
• You can withdraw marketing consent with the unsubscribe link in any of those emails, or in Settings — one action takes you off the list for both the app and the shop. Order emails and game alerts you've turned on aren't affected. See Marketing consent.
• You can sign out of a device at any time, which discards that device's "stay signed in" token, and you can turn phone alerts off in Settings or in your phone's notification settings.
• You can delete your account yourself any time: Settings → Delete account, on the website or in the app. It's immediate and signs out every device. Can't sign in? Email us and we'll do it. What's deleted and what isn't. Shop order records are kept as long as tax and record-keeping rules require, but we'll remove anything beyond that.
• You can limit analytics tracking via your browser or Google's opt-out tools.
• You can grant or withdraw location permission for the map and check-ins anytime in your browser's site settings or your phone's privacy settings. AllOutMaine works fine without it — check-ins still count toward your streak, they just don't collect stamps.
• You can remove any check-in or logged session from your Passport. Points you've already earned from it stay on your account.
• You can stop anyone from messaging you by removing them as a friend or blocking them. Messages disappear on their own after 7 days.

Age requirement

You must be 18 or older to create an account and participate in games on AllOutMaine. The service is not directed to anyone under 18, and we do not knowingly collect personal information from minors. If we learn that someone under 18 has created an account, we will delete it and the associated information.

Data retention & security

We keep your information for as long as your account is active or as needed to provide the service. Direct messages are deleted 7 days after they're sent (longer only while a report about them is open); sign-in codes expire within minutes; sign-in attempt logs are kept briefly; shop orders are kept as long as tax and record-keeping obligations require. We take reasonable steps to protect your data (for example, passwords are hashed, direct messages are encrypted in storage, and card details never touch our systems), but no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

Changes

We may update this policy from time to time. Material changes will be reflected by updating the date above.

Contact

Questions about this policy or your data? Email Alex@alloutmaine.com.

‹ Back to AllOutMaine · Terms of Service