GameDay Music Platform — Privacy Policy
Version: 1.0 Effective Date: May 11, 2026 Last Updated: May 11, 2026
GameDay Music LLC ("GameDay Music," "we," "us," or "our") operates the GameDay Access platform at access.gamedaymusic.app (the "Platform"). This Privacy Policy explains what personal information we collect, how we use it, with whom we share it, and your choices regarding your information.
By using the Platform, you agree to the collection and use of information in accordance with this Privacy Policy.
1. Who This Policy Covers
This Privacy Policy applies to:
- Operators — facility owners and staff who use the Platform to manage and accept bookings
- End Customers — individuals who book and pay for facility time through the Platform
- Visitors — anyone who visits the Platform's public-facing pages without registering an account
We refer to all of you collectively as "you" or "users" in this Policy.
2. Information We Collect
2.1 Information You Provide
When you create an account or use the Platform, we collect information you submit, including:
All users:
- Name
- Email address
- Password (stored as a one-way cryptographic hash; we never see your plaintext password)
End Customers (additionally):
- Phone number (if provided)
- Billing address (collected by Stripe during checkout; we receive limited fields)
- Booking history, including dates, times, areas booked, and amounts paid
- Credit balance and credit transaction history
- Acknowledgment records for Customer Agreements (timestamp, IP address, user agent, version acknowledged)
Operators (additionally):
- Business name, contact email, business address
- Stripe Connect account identifier (we do not store your bank details; Stripe holds them)
- Facility configuration, including area names, photos, descriptions, hours, pricing, and access codes
- Customer Agreement text you configure for your customers
- Customer information for your facility, including customers' names, emails, balances, and reservation history
2.2 Information We Collect Automatically
When you use the Platform, we automatically collect:
- Device and browser information — browser type, operating system, device identifiers, language preferences
- Log information — IP address, dates and times of requests, pages or features accessed, referring URLs, request identifiers
- Authentication tokens — to keep you logged in across sessions
We use Cloudflare as our hosting provider, which may collect additional network-level information for security and performance purposes.
2.3 Information from Third Parties
- Stripe — when you make a payment, Stripe shares payment status, payment intent identifiers, and transfer details with us. We do not receive your full payment card number or CVV.
- Firebase Authentication (Google) — if you sign in using Google, we receive your name, email, and a Google-issued account identifier.
- Seam — for facilities that use smart lock integration, Seam shares device status and code-management information with us.
3. How We Use Your Information
We use the information we collect to:
- Provide the Platform — process bookings, accept payments, generate access codes, manage credit balances, and deliver core platform functionality
- Communicate with you — send booking confirmations, payment receipts, password resets, security alerts, and (for Operators) operational notifications about your facility
- Maintain account security — detect and prevent fraud, abuse, and unauthorized access
- Improve the Platform — analyze usage to fix bugs, improve features, and develop new functionality
- Process payments — through Stripe Connect, including platform fee collection and operator payouts
- Comply with legal obligations — respond to lawful requests from law enforcement, comply with tax and financial regulations, and enforce our Terms of Service
- Record acknowledgments — preserve evidence that you agreed to our Terms of Service, Privacy Policy, and (where applicable) an Operator's Customer Agreement
We do not sell your personal information, and we do not use it for advertising.
4. Who We Share Your Information With
4.1 Operators
If you book a facility as an End Customer, the Operator of that facility receives your name, email, phone number (if provided), and booking details. Operators use this information to manage their customers, communicate about bookings, and operate their facility. The Operator's use of your information is governed by the Operator's own privacy practices, which may differ from ours.
4.2 End Customers
If you operate a facility, your business name, area photos, descriptions, hours, and pricing are visible to End Customers booking at your facility. Your Customer Agreement (if configured) is visible to End Customers at the time of booking.
4.3 Service Providers
We share information with third-party service providers who help us operate the Platform. These providers are contractually limited to using information only as necessary to provide their services. They include:
- Stripe — payment processing, Connect account management, 1099-K reporting (https://stripe.com/privacy)
- Firebase (Google) — authentication, database, and file storage (https://firebase.google.com/support/privacy)
- Cloudflare — hosting, content delivery, and security (https://www.cloudflare.com/privacypolicy/)
- Resend — transactional email delivery (https://resend.com/legal/privacy-policy)
- Seam — smart lock integration for facilities that use it (https://seam.co/legal/privacy-policy)
4.4 Legal and Safety
We may disclose information when we reasonably believe disclosure is necessary to:
- Comply with applicable law, regulation, legal process, or governmental request
- Enforce our Terms of Service, including investigation of potential violations
- Detect, prevent, or address fraud, security, or technical issues
- Protect against harm to the rights, property, or safety of GameDay Music, our users, or the public
4.5 Business Transfers
If GameDay Music is involved in a merger, acquisition, financing, sale of all or part of our business, or bankruptcy, your information may be transferred as part of that transaction. We will notify users of any such transfer that materially affects how their information is handled.
5. Data Retention
We retain your personal information for as long as your account is active and for a reasonable period thereafter, generally in line with the following:
- Account information — retained while your account is active, plus up to two years after deletion for record-keeping
- Booking and payment records — retained for at least seven years to comply with tax and financial recordkeeping obligations
- Acknowledgment records — retained for the duration of the agreement plus seven years for evidentiary purposes
- Logs and security records — typically retained for 90 days to one year for security and debugging
We may retain information longer if required by law, to resolve disputes, or to enforce our agreements.
6. Your Rights and Choices
6.1 Access and Correction
You may access and update your account information by signing into the Platform. If you need to correct information that is not editable through the Platform, contact us at admin.access@gamedaymusic.app.
6.2 Deletion
You may request deletion of your account by contacting us at admin.access@gamedaymusic.app. We will delete your information except where retention is required by law, necessary to complete ongoing transactions, or needed to enforce our agreements. Booking history may be retained in anonymized form for analytics and operator records.
6.3 Communications
Transactional emails (such as booking confirmations and security alerts) are part of the Platform's core service and cannot be opted out of without closing your account. We do not currently send marketing emails. If we begin doing so, we will provide an unsubscribe mechanism.
6.4 State Privacy Rights
Depending on where you live, you may have additional rights under state privacy laws. Specifically:
California (CCPA/CPRA): California residents have the right to know what personal information we collect, the right to delete personal information, the right to correct inaccurate information, the right to limit use of sensitive personal information, and the right to opt out of "sales" or "sharing" of personal information. We do not sell personal information and do not share it for cross-context behavioral advertising.
Colorado, Connecticut, Virginia, Utah, and other states with comprehensive privacy laws: You generally have rights to access, correct, and delete your personal information, and to opt out of certain processing activities. We do not engage in targeted advertising or sell personal information.
To exercise these rights, contact us at admin.access@gamedaymusic.app. We will respond to verifiable requests within the timeframes required by applicable law.
6.5 No GDPR / EU Coverage
The Platform is designed for use in the United States. We do not market the Platform to residents of the European Union, United Kingdom, or other regions with comprehensive data protection laws comparable to the GDPR. If you are accessing the Platform from outside the United States, you do so at your own initiative and are responsible for compliance with local law.
7. Security
We implement reasonable administrative, technical, and physical safeguards designed to protect your information, including:
- Encryption of data in transit (HTTPS/TLS)
- Encryption of sensitive fields at rest where supported by our service providers
- Access controls limiting employee access to personal information
- Regular review of security practices
No method of transmission or storage is completely secure. We cannot guarantee absolute security of your information. If we become aware of a security incident affecting your information, we will notify you as required by law.
8. Children's Privacy
The Platform is not directed to children under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at admin.access@gamedaymusic.app and we will delete the information.
Note that minors may participate in activities at Operator facilities, but the booking and payment are made by the adult parent or guardian, who is the platform user. Minors themselves are not platform users and do not have accounts.
9. International Data Transfers
The Platform's servers and service providers are located in the United States. By using the Platform, you understand that your information will be processed in the United States, which may have data protection laws different from those of your country.
10. Cookies and Similar Technologies
The Platform uses cookies and similar technologies for authentication, session management, and core functionality. We do not use cookies for advertising or third-party tracking.
You can configure your browser to refuse cookies, but doing so may impair Platform functionality (for example, you may be unable to stay logged in).
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Version" and "Last Updated" date at the top, and notify you by email or through the Platform. Material changes will take effect no earlier than thirty (30) days after notice.
Your continued use of the Platform after the effective date constitutes acceptance of the updated Policy.
12. Contact
For questions about this Privacy Policy or to exercise any of your rights:
GameDay Music LLC c/o Successful Inc. (Registered Agent) 111 Ogden Ave Clarendon Hills, IL 60514-1027
Email: admin.access@gamedaymusic.app
By using the Platform, you acknowledge that you have read and understood this Privacy Policy.