Privacy Policy

Who we are

Lowzone LLC (“Lowzone”, “we”) is a Colorado company that provides a scoring platform for climbing competitions. When a gym hosts an event on Lowzone, the gym decides what competitor information to enter and is responsible for the consents behind it (including parental consent for minors on its roster); Lowzone processes that data on the gym’s behalf to run the event.

What we collect

• Account information — email address and password when a gym account is created. Passwords are handled by our authentication provider; we never see them.
• Contact form submissions — name, email, gym/organization, and your message when you contact us through the site.
• Competition data — event names, categories, scores, and competitor names as entered by the hosting gym, or a display name entered by the competitor. For youth categories, competitor-entered names are stored as first name and last initial only.
• Climb photos — photos of climbing routes uploaded by routesetters. These are photos of walls, not people.
• Anonymous sessions — judges, spectators, and routesetters access events via access codes through anonymous sessions. No personal information is collected from them.
• Server logs — like nearly every website, our infrastructure providers keep short-lived request logs (IP address, browser type, pages requested) for security and operations. We don’t use them to identify or track you.

How we use it

We use this data exclusively to operate the platform: running events, displaying scoreboards, enabling judge and self-service scoring, and responding to your messages. We do not sell personal data, use it for advertising, profile anyone, or pool competitor data across gyms.

Payments

Event payments are processed by Stripe. Your card details go directly to Stripe and never touch our servers; we receive only confirmation that a payment succeeded.

Service providers

We use a small set of infrastructure providers to run the service: Supabase (database, authentication, and file storage, hosted on AWS), Netlify (application hosting and DNS), Resend (transactional email), ImprovMX (inbound email forwarding), Cloudflare (Turnstile bot protection on the contact form), Google (Fonts for font delivery, Maps Platform for address lookup in the admin tools), and Stripe (payments). Each processes data only as needed to provide its service to us.

Cookies and local storage

Signed-in sessions store an authentication token in your browser’s local storage. That’s it — we use no analytics, no tracking cookies, and no advertising pixels. Because we don’t sell data or serve targeted advertising, there is nothing to opt out of, and browsers sending a Global Privacy Control signal are honored by default.

Data security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information, including row-level access controls on all competition data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Data retention

We retain personal information for as long as reasonably necessary for the purposes described in this policy — running events, keeping historical results available, and meeting business and legal obligations. Anonymous sessions are ephemeral and not retained beyond the session. You can request deletion of your account at any time, and we delete it and its associated data within 30 days.

Your Colorado privacy rights

Under the Colorado Privacy Act you may request access to the personal data we hold about you, correct it, delete it, or receive a portable copy. You also have the right to opt out of targeted advertising, the sale of personal data, and profiling — none of which we do.

To exercise any of these rights, email us at support@lowzone.live. We will respond within 45 days (extendable once by a further 45 days for complex requests, in which case we’ll tell you). We may need to verify your identity before acting on a request, and we will never discriminate against you for exercising your rights. If we decline a request, you may appeal by replying to our response; we will answer the appeal within 45 days. If you disagree with the outcome, you may contact the Colorado Attorney General.

If your name appears in an event because a gym entered it, the gym controls that data — we’ll forward your request to them, or you can contact the gym directly.

Children

Competitors in youth categories who enter their own name have it stored as first name and last initial only, and public scoreboards default to showing first name and last initial for everyone unless the hosting gym — holding the required parental consents — enables full names for its event. Roster names for minors are entered by the hosting gym under consent it collects from parents or guardians. Parents or guardians can ask us to remove a child’s name at any time at support@lowzone.live.

International users

The service is operated from the United States. If you use it from elsewhere, your information is transferred to, stored in, and processed in the United States, where data protection laws may differ from those of your jurisdiction.

Changes to this policy

If we change this policy, we’ll update the date at the top. Material changes will be announced to account holders by email.

Contact

Lowzone LLC
1500 N Grant St Ste R
Denver, CO 80203, US
support@lowzone.live