Youth Privacy & Consent Policy
Last Updated & Policy Version: v1.0-2026 • Gloves Up Guns Down 609
1. Private by Default Architecture
Gloves Up Guns Down 609 places the privacy and physical safety of minor participants above all else. All participant records—including full legal names, dates of birth, emergency contact telephone numbers, and registered nurse medical notes—are stored in encrypted PostgreSQL database tables protected by Row-Level Security (RLS).
- Anonymous public visitors have zero query access to any private participant table.
- Guardians can exclusively view and manage their verified, linked children.
- Coaches can exclusively access assigned youth on their active training roster.
- No private participant data is ever cached in service worker storage or offline client caches.
2. Separation of Consents
In compliance with youth sports safety standards and COPPA principles, we maintain a strict legal separation between:
3. Instant Consent Withdrawal Cascade
A parent or legal guardian may withdraw media consent at any moment via the Guardian Portal with one click. By automated database trigger:
- The participant’s public showcase profile is instantly toggled to
is_published = false. - The participant ceases to appear in public search and API query results.
- An automated takedown alert is created in the administrative audit log for manual review of any event group photography.
4. Payment & Financial Data
All community support gifts are processed through Stripe-hosted Checkout in test sandbox mode during platform preview. Gloves Up Guns Down 609 never stores, views, or logs full payment card numbers or CVV codes. Payment status is verified exclusively via cryptographically signed webhooks.