Security

We keep this page plain. It describes what we do today, not what we plan to do. If you need a detail that is not here, email [email protected].

Payments

• Card payments are processed by Stripe.
• The Rooster does not store full card numbers.
• Organizer payouts run through Stripe Connect, and Stripe performs its own identity checks.
• Teams see the full total, including fees, before they confirm a payment.

Accounts

• Sign-in is handled by our authentication provider, not by passwords we store in plain text.
• Directors control who can manage an event.
• You can delete your account yourself. See delete your account.

Data

• Traffic to this website and the app is served over HTTPS.
• Event data is stored with our hosting and database providers, not on personal devices.
• We limit staff access to what is needed to support you.
• Our Privacy Policy lists the categories of data we collect and the providers we use.

Reporting a problem

If you find a security issue, email [email protected] with the steps to reproduce it. Please do not post it publicly before we have had a chance to fix it. We will confirm we received your report and tell you what we are doing about it.

What we do not claim

We do not currently publish a formal security certification such as SOC 2. If your league or venue requires one, tell us what you need and we will be straight with you about where we stand.