Effective November 12, 2026
This policy explains what information Athlink collects, how we use and share it, and the choices you have. Athlink handles sensitive information, including identity documents and face scans for verification, so we collect as little as we can and say plainly what we do with it.
Account details. Your email address and a scrambled (hashed) version of your password. We never store your actual password.
Identity verification. When you verify, you submit photos of your government ID and a live selfie directly to our verification provider, Persona Identities, Inc. (“Persona”). Persona compares your selfie to your ID photo (see “Biometric information” below). Athlink receives and stores only: your legal first and last name, date of birth, state and country, whether the check passed, and a one-way fingerprint of your ID number, which can't be turned back into the number. Athlink does not receive or store your ID images, your selfie or your face scan.
Profile. Your bio, the sports you choose, and whether you've marked yourself available to play.
Location. With your permission, your device shares its location so we can show nearby games and players. We store only an approximate location, rounded to about 1 km (0.6 miles), and when it was last updated. Your device may also remember your last location to load faster. Locations you choose for games and tournaments are stored and shown to other users.
Activity. Games and tournaments you create or join, teams, results you report or confirm, ratings you give and receive (show-up, sportsmanship and skill), and notifications we send you.
Devices and notifications. If you turn on push notifications, we store the delivery address your browser or phone gives us for that device.
Waitlist. If you join the waitlist, your email and, optionally, your state.
Technical data. Our hosting provider automatically records basic request information such as IP address, browser type and timestamps, for security and troubleshooting. To protect your account from password-guessing attacks, we also remember the network (IP) addresses you've successfully logged in from, for 90 days. We use one essential login cookie to keep you signed in. We don't use advertising or cross-site tracking cookies.
To confirm you are the person on your ID, Persona creates a scan of your face geometry from your selfie and ID photo (“biometric information”). Persona processes it on our behalf as a service provider.
See Persona's own privacy policy at withpersona.com for how Persona handles data.
Athlink is built on real, verified identities, so some information is visible to other verified users:
We keep your information while your account is open. When you ask us to delete your account, we delete your account details, profile, location, devices and notifications within 30 days. Game results and ratings that involve other players are kept with your name removed, so other people's records stay accurate.
To stop banned users from rejoining and to prevent fraud, we may keep the one-way ID fingerprint and the reason for removal for up to three years after an account is closed. We may also keep information where the law requires it. Waitlist emails are deleted when you ask, or once you sign up.
Depending on where you live (for example California, Colorado, Connecticut, Virginia, Texas and other states), you may have the right to know, access, correct and delete your personal information, to get a copy of it, and to opt out of its sale, of targeted advertising and of certain profiling. Athlink doesn't sell personal information or use it for targeted advertising. You may also limit the use of sensitive information; we use sensitive information (such as ID details, biometric information and approximate location) only to provide the Service. You can use an authorized agent, and we may need to verify your identity before acting on a request. If we deny a request, you can appeal by replying to our decision. We won't discriminate against you for using these rights.
We use reasonable safeguards, including encrypted connections (HTTPS), hashed passwords, a one-way fingerprint instead of storing ID numbers, and limited access to data. No system is perfectly secure, so we can't guarantee security. If a breach affects your personal information, we'll notify you as required by law.
Athlink is only for people 18 and older. We don't knowingly collect information from anyone under 18, and our age check rejects anyone whose ID shows they are under 18. If we learn that a minor has given us information, we delete it. If you believe a minor is using Athlink, contact us.
Athlink is operated from the United States, and your information is stored and processed in the United States. If you use Athlink from outside the U.S., you understand your information will be transferred there.
We'll update this policy as Athlink changes, and we'll notify you in the app or by email before material changes take effect. Questions, requests or complaints: support@playathlink.com.
Questions? Email support@playathlink.com.