Privacy Policy

Effective Date: April 19, 2026 | Last Updated: April 19, 2026

ℹ️

✔ We collect basic info when you apply, compete, vote, or donate
✔ We use it to run the competition, match teams, and communicate with you
✔ We share limited data with StateCF.com only when teams advance (separate entity)
✔ We never sell your personal information to anyone
✔ You can request your data, correct it, or delete it anytime
✔ We use standard security measures to protect your information
✔ Donors: Your donation info stays private (we don’t publish donor names without permission)
✔ Athletes: We only share what’s needed for competition (name, sport, bio—not private contact info)
✔ We use cookies for basic site functionality (not invasive tracking)

Questions? Email privacy@capitalforgeleague.com

Section 1 — WHO WE ARE

Capital Forge League ('CFL') is a 501(c)(3) nonprofit educational organization based in Tampa, Florida. We pair military veterans with elite athletes to develop sports-tech business skills.

What We’re NOT: broker-dealer, funding portal, investment adviser, or securities intermediary.

Contact: privacy@capitalforgeleague.com | (813) 555-1234 | Tampa, FL

Section 2 — WHAT INFORMATION WE COLLECT

When You Apply

Full name, email, phone, address, DOB, athletic/military background, venture idea, skills, availability

When You Compete

Team name, project description, traction metrics, photos, milestone documents

When You Vote/Donate

Name, email, account credentials, voting activity, payment info (processed by third party), donation amount

Automatically Collected

IP address, browser type, device, pages visited, cookies

Section 3 — HOW WE USE YOUR INFORMATION

→ To operate the competition platform (match teams, process votes, calculate rankings, award milestones)
→ To improve our services (analytics, debugging, program effectiveness)
→ To comply with legal obligations (subpoenas, tax reporting, nonprofit regulations)

→ To communicate with you (application updates, match notifications, newsletters, tax receipts)
→ To maintain security and integrity (prevent fraud, enforce Code of Conduct, verify traction claims)
→ For fundraising and donor relations (process donations, issue tax receipts, invite to events)

Section 4 — HOW WE SHARE YOUR INFORMATION

Public Competition Info

Team names, project descriptions, member names/photos/bios, yard line position, votes, rankings, milestones. NOT public: email, phone, address, DOB, detailed military/athletic records.

With StateCF.com (Limited)

Only when teams reach 100 yards — team name, project description, basic contact info. StateCF is a SEPARATE legal entity with its own privacy policy.

With Service Providers

Payment processors (Stripe/PayPal), email services (Mailchimp), web hosting, analytics (Google Analytics). All are contractually required to protect your data.

For Legal Compliance

Subpoenas, court orders, tax reporting, nonprofit regulations, fraud prevention.

What We NEVER Do: ❌ Sell personal information ❌ Share donor lists ❌ Rent or trade emails ❌ Share athlete contact info with recruiters ❌ Provide investor lists

Section 5 — YOUR PRIVACY RIGHTS

Access Your Information

Request a copy of all personal data. Email privacy@capitalforgeleague.com with subject "Data Access Request". Response within 30 days.

Correct Your Information

Update your profile directly or email us with corrections.

Delete Your Information

Request deletion. Some data is retained for legal compliance (donation records 7 years per IRS). Email with subject "Deletion Request".

Opt Out of Communications

Unsubscribe from marketing emails. Cannot opt out of essential communications (application status, tax receipts).

California Residents (CCPA)

Right to Know, Right to Delete, Right to Opt Out of Sale (we don't sell data), Right to Non-Discrimination.

European Residents (GDPR)

Right to Data Portability, Right to Lodge a Complaint with a data protection authority.

Section 6 — DATA SECURITY

Technical Measures

SSL/TLS encryption, encrypted storage, secure password hashing, regular security audits, firewall protection, MFA for admin accounts

Organizational Measures

Access controls, employee training, confidentiality agreements, regular backups, incident response plan

Payment Security

No full credit card storage, PCI-compliant processors (Stripe/PayPal), tokenization for recurring donations

Data Retention

Active participants: duration + 2 years | Donor records: 7 years (IRS) | Applications: 1 year | Email: 2 years | Analytics: 26 months

Section 7 — COOKIES

We use Essential Cookies (required for login/security), Analytics Cookies (Google Analytics — optional), and Preference Cookies (settings/preferences — optional).

We do NOT use: ❌ Advertising cookies ❌ Third-party tracking pixels ❌ Social media tracking ❌ Retargeting cookies

To opt out: Browser settings or Google Analytics Opt-Out Add-On at tools.google.com/dlpage/gaoptout

Section 8 — STATECF.COM RELATIONSHIP

Important: StateCF.com (Sprowtt Crowdfunding, Inc.) is a SEPARATE legal entity — registered Florida crowdfunding intermediary (FL §517.0611) with its own privacy policy.

What CFL shares with StateCF: Team name, project description, basic contact info (only when teams reach 100 yards).

What CFL does NOT share: Private contact info without consent, detailed application materials, internal communications, donor information.

What CFL does NOT receive from StateCF: Investor names/emails, investment amounts, offering terms, securities transaction data.

Section 9 — CHILDREN'S PRIVACY

CFL is NOT intended for children under 18. We do not knowingly collect information from anyone under 18. If discovered, we will immediately delete the information. Contact privacy@capitalforgeleague.com if your child has provided information.

Section 10 — UPDATES TO THIS POLICY

Material changes: 30-day email notice before changes take effect. Minor changes: "Last Updated" date updated. Continued use = acceptance.

Section 11 — CONTACT US

Privacy Questions

privacy@capitalforgeleague.com | (813) 555-1234

Data Rights Requests

privacy@capitalforgeleague.com | Subject lines: "Data Access Request" / "Deletion Request" / "Correction Request" / "Opt-Out Request" | Response within 30 days

Data Breach Reports

security@capitalforgeleague.com | Change password immediately | Enable two-factor authentication