Privacy Policy
Last updated: June 30, 2026 · wallfire.net
Overview
WallFire ("we", "us", "our") is a darts community platform operating at wallfire.net. We are committed to protecting your personal information and being transparent about what we collect and why. This policy applies to all users of wallfire.net.
We comply with the California Consumer Privacy Act (CCPA), the General Data Protection Regulation (GDPR), and other applicable privacy laws.
What data we collect
| Data type | Why we collect it | Retention |
|---|---|---|
| Email address | Account login, notifications, security | Until deletion request |
| Name | Public profile display | Until deletion request |
| Password (hashed) | Authentication — never stored in plain text | Until deletion request |
| City, state, country | Location display on public profile | Until deletion request |
| Photo | Profile avatar — you upload, we store on S3 | Until deletion request |
| Player stats (PPD/MPR) | Optional — you choose what to share | Until deletion request |
| Phone number | Optional — visibility controlled by you | Until deletion request |
| IP address (login) | Security, fraud prevention, GDPR consent logging | 90 days |
| Session token (cookie) | Keeping you logged in | Session / 30 days |
| Audit log entries | Security and GDPR compliance | 12 months |
| Messages | In-app communication between users — see note below | Until deletion request (see note) |
Note on messages:Messages you send to other users remain in the recipient's inbox if you delete your account — they are also the recipient's data. Your profile is disassociated from your messages (they appear as from a deleted account) but the message content is not removed from the recipient's view. To request removal of specific message content from a recipient's inbox, contact [email protected].
How we use your data
- To operate and provide WallFire services (league finder, player profiles, messaging)
- To send transactional emails (account confirmation, password reset, deletion confirmation)
- To send the weekly WallFire community newsletter (opt-out available in settings)
- To send automated SMS match call notifications via Twilio (if you provide a phone number and consent to SMS)
- To generate AI-assisted player spotlight content for the newsletter using your public profile data (see Third-party services below)
- To display your public profile to other users and search engines (per your visibility settings)
- To match players with teams and vice versa
- To maintain security and prevent fraud
- To comply with legal obligations
We do not sell your data. We do not share your data with third parties for marketing purposes. We do not display advertising.
Third-party services we use
We do not sell your data. However, operating WallFire requires us to share certain data with the following service providers. Each is bound by their own privacy policy and data processing agreements.
| Provider | Data shared | Purpose |
|---|---|---|
| Brevo (Sendinblue) | Email address, name | Transactional emails and weekly community newsletter |
| Amazon Web Services (S3) | Profile photos (uploaded by you) | Secure file storage for player avatars |
| Twilio | Phone number (if provided) | Automated SMS match call notifications |
| Anthropic (Claude AI) | Name, bio, stats, team names, walk-on song, tournament results | AI-assisted player spotlight writing in the weekly newsletter. Content is reviewed before sending. |
| Mapbox | Venue address / city & state | Venue map display and geocoding |
| Cloudflare | IP address, request metadata | Content delivery, DDoS protection, DNS |
| Google / Facebook | OAuth token only — no profile data beyond email and name | Optional social login (if you choose it) |
AI-generated content disclosure: The weekly WallFire newsletter includes a player spotlight section. This content is written with the assistance of Claude (Anthropic) using player profile data you have provided. All AI-generated content is reviewed and approved by WallFire before sending.
Your controls
You have full control over your data on WallFire:
- Visibility settings — Control who can see your email, phone, skill stats, and league/team associations. Settings available in Account Settings.
- Update or correct data — Edit your profile at any time.
- Export your data — Request a copy of all data we hold about you.
- Delete your account — Request full deletion of your account and all associated data (see below).
- Withdraw consent — You may withdraw marketing email consent at any time from settings.
Cookies
We use the following cookies:
| Cookie | Purpose | Type |
|---|---|---|
| next-auth.session-token | Keeps you logged in | Essential |
| wf_cookie_consent | Remembers your cookie preferences | Essential |
We do not use advertising cookies, tracking pixels, or third-party analytics by default. Optional analytics cookies may be enabled with your explicit consent via the cookie banner.
Request data deletion
You have the right to request deletion of your account and all associated data. Once submitted, your request will be processed within 30 days. You will receive an email confirmation when deletion is complete.
Note: Some data may be retained in anonymized form for legal compliance or security purposes (e.g., anonymized audit logs). We will tell you what, if anything, is retained.
Contact
For any privacy questions or concerns, contact us at [email protected]. We aim to respond within 72 hours.