Privacy Policy

Darts in Hand — Effective date: May 26, 2026 — Last updated: October 5, 2026

1. Who We Are

Darts in Hand is a sports management application for competitive darts players and tournament organizers, operated by Ray Acosta (“we,” “us,” or “our”). Contact: acostavapes@gmail.com.

2. Information We Collect

Information you provide directly:

• Account registration: first name, last name, email address, and a password. Your password is immediately converted to a one-way cryptographic hash (bcrypt) — we cannot read it.
• Player profile: display name, optional nickname, and vendor player IDs you choose to link (e.g., your NADO, TOC, EDC, Iowa Darts, or J&J Amusements (NTS) player name or ID). You may also optionally provide your city, state, zip code, and country, and choose a home bar. These are visible only to you and to Darts in Hand admin support — never shown to other players. Your home bar is also added to your favorite bars so its specials appear in your Bar Specials feed.

Information collected automatically when you use the app:

• Firebase device token: a push notification identifier provided by Google Firebase, used only to send you tournament and bracket notifications you have opted into. We do not use this token for advertising or cross-app tracking.
• Local device storage: your authentication token and basic preferences are stored on your device using secure local storage (equivalent to cookies in a web browser). This data never leaves your device except as part of authenticated API calls to our server.

Information we do NOT collect:

We do not collect your location, contacts, calendar, microphone, advertising identifier (IDFA/GAID), or any behavioral or cross-app tracking data. We use no analytics SDKs and no advertising networks.

Information from third-party league sources:

We aggregate publicly available player statistics and tournament sign-up data from NADO, TOC, EDC, Iowa Darts, and J&J Amusements (NTS) league websites and published player-average lists. This data is linked to your profile only if you voluntarily provide your vendor player name or ID for those leagues. Specifically:

• Player statistics (ratings, PPD, MPR, standings) scraped from public league pages.
• Tournament participation — when you appear by name on a publicly accessible sign-up roster for a vendor event, we may record that appearance and associate it with your profile if you have linked the corresponding vendor account. This data is used to power the Player Chemistry feature, which surfaces players you frequently partner with in tournaments.

We do not control or guarantee the accuracy of third-party data. Only players who have linked a vendor account in Darts in Hand are subject to this association; unmatched names are discarded.

3. How We Use Your Information

• To create and authenticate your account
• To display your player profile and statistics to other app users (as chosen by you)
• To identify players you frequently partner with in public tournaments (Player Chemistry feature), using publicly available sign-up rosters from vendor league websites
• To generate plain-language explanations of suggested tournament partners (Player Chemistry / Partner Finder), using a third-party AI service as described in Section 4
• To send push notifications for tournament updates and bracket changes (opt-in)
• To send password reset codes to your registered email address when you request them
• To allow Tournament Directors to manage event registrations, brackets, and boards
• To allow Bar Owners to manage their venue boards and events

We do not sell your data. We do not use your data for advertising. We do not share your personal information with any third party except as described in Section 4.

4. Third-Party Services

• Firebase (Google LLC): push notification delivery. Google may process device identifiers in accordance with the Google Privacy Policy.
• Railway (Railway Corp): cloud hosting provider. Your account data and player profile are stored on Railway’s servers located in the United States. See the Railway Privacy Policy.
• Resend (Plus Five Five, Inc.): used to send your account welcome email and password reset codes. Resend processes the email address and message content of those emails only. See the Resend Privacy Policy.
• Gmail / Google SMTP (Google LLC): used only for administrative account emails — for example, if an Admin resets your password on your behalf, or for internal system alerts sent to our own team. Google processes the email address and message content of those emails only. See the Google Privacy Policy.
• Anthropic (Anthropic PBC): when you use the Player Chemistry feature, we send the names and derived performance statistics (ratings, win percentages, recent-form trends) of the players suggested as potential partners to Anthropic’s Claude API, which writes the plain-language explanation shown on each suggested partner’s card. Your own rating, budget, and playing-style statistics (never your name) are included so the explanation can compare you with each suggestion. This data is retained by Anthropic for up to 30 days for safety and security purposes and is not used to train Anthropic’s models. See the Anthropic Privacy Policy.

5. Data Retention and Deletion

We retain your account data for as long as your account is active. You may permanently delete your account at any time from the Profile → Delete Account screen within the app. Deletion is immediate and irreversible. Your email address, password hash, player profile, event entries, and any tournament participation associations (including chemistry partner records derived from public sign-up data) are removed within 30 days. Anonymized, non-identifiable statistical data may be retained.

6. Your Rights

• Access: view your profile data in the app at any time.
• Correction: update your profile from the Edit Profile screen.
• Deletion: delete your account from Profile → Delete Account. Immediate and permanent.
• Portability: request a copy of your data by emailing acostavapes@gmail.com.
• Opt-out of push notifications: disable in your device Settings → Notifications at any time.

7. Children

Darts in Hand is intended for users 17 years of age and older due to its bar-venue context. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has registered, contact us at acostavapes@gmail.com and we will delete the account immediately.

8. Security

Passwords are stored as bcrypt hashes. Authentication tokens are stored in device secure storage. All API communication uses HTTPS. We implement reasonable technical safeguards, though no system is perfectly secure.

9. Changes to This Policy

We will notify registered users of material changes via in-app notice or email before the change takes effect. The “last updated” date above always reflects the current version.

10. Contact

Ray Acosta — acostavapes@gmail.com