Skip to content
TaMaarta

Privacy

Privacy Policy

TaMaarta runs hybrid competitions and community programs around the complete athlete — what you can do in competition and how you present your physique work. This policy explains what personal information we collect, why we have it, who helps us process it, and how you can exercise your rights.

What personal information we collect

  • Account and identity: details you provide when you create or maintain an account (for example name and contact paths we need to run authentication and support).
  • Event participation: registrations, rosters, check-ins, scoring inputs, and related operational metadata tied to competitions you enter.
  • Submissions and media: uploads or links you send as part of a contest workflow (videos, scoresheets, supporting materials) plus timestamps and integrity checks we need to validate them.
  • Communications: messages you send through forms, preference centers, support threads, and transactional notices tied to your activity (confirmations, receipts, operational alerts).

Why we collect it

We use this information to operate competitions safely and fairly, deliver the hybrid format TaMaarta is built on, send operational and (where permitted) marketing messages, secure accounts, meet legal obligations, and improve the product over time. We do not invent surprise uses: if the scope changes materially, we update this policy and the touchpoints where we collect data.

Who we share information with

TaMaarta partners with service providers who process information on our instructions — things like hosting, payments, email and SMS delivery, analytics, error monitoring, and DNS / edge infrastructure. Processors in scope for League-era operations include:

  • Supabase — database, authentication, storage, and edge functions that power the platform.
  • Stripe — payment processing for registrations, tickets, and related commerce flows.
  • Resend — transactional email and audience tooling for marketing messages where you have opted in.
  • Twilio — SMS delivery where you have consented or where operational texting is required.
  • PostHog — product analytics and feature flags (session replay stays off by platform default).
  • Sentry — error and performance telemetry so we can diagnose outages responsibly.
  • Vercel — hosting, cron, and Web Analytics for core routing and delivery.
  • Cloudflare — DNS / CDN / edge services when those products are in use for tamaarta.com.

Cross-border processing

Data is processed and stored in the United States. By using TaMaarta, you consent to this transfer.

Canadian participants (PIPEDA) and Quebec

TaMaarta launches from Detroit — Windsor and the broader Ontario corridor are part of the lived geography of the brand. For Canadian provinces outside Quebec, we apply the same practical posture we use for United States participants unless law clearly requires something different.

Quebecoperates under Law 25, which is stricter than PIPEDA in several respects. If you live in Quebec, assume TaMaarta treats Law 25 seriously even though Year 1 surfaces ship lean — reach out through the channels below if you need language-specific materials or have provincial questions.

Your privacy rights and how to reach us

To exercise your rights regarding your personal data (access, correction, deletion, export), contact us at privacy@tamaarta.com. We will respond within 30 days.

Prefer self-serve? Signed-in athletes can start an export or schedule account deletion from /portal/privacy using Export My Data and Delete My Account. Deletion flows include a 30-day soft-delete window so you can cancel if you change your mind; financial and audit artifacts may persist in pseudonymized form where the law requires it.

Cookies and analytics (Year 1)

TaMaarta does not run a cookie consent banner in League #1. We keep analytics narrow: PostHog honors Do Not Track when your browser sends it, and we configure captures to drop IP-derived fields rather than chasing granular ad-tech graphs.

Data retention

We retain accounts and operational records while your relationship with TaMaarta is active or while we need them to meet legal, safety, or dispute-resolution obligations. When you delete your account through the portal flow, we execute a staged deletion process that removes or pseudonymizes personal fields while preserving forensic audit records required for regulators and financial integrity.

Related statements

Accessibility posture lives at /accessibility; competition terms continue to live at /terms.