Public enough to grow. Private enough to trust.

What's public

• Your callsign, team, team logo, rank and badges.
• Your results by arena and event, shown 24 hours after you play. Never live, and never a "playing now" status.
• Leaderboards and team pages show callsign, team and rank only.

What's never shown

• Your real name, email address, suburb and date of birth.
• Your home arena, unless you choose to show it.

Your controls

• Profile visibility: public, members only or private.
• Appear on public leaderboards: on or off. If you opt out, you're left off the board, not shown as a blank.
• Show home arena: on or off.

Players under 18

• Players need to be 13 or older for an account. Players aged 13 to 17 need a parent or guardian to confirm theirs by email; until then it isn't active.
• Under-18 profiles are private and hidden from public leaderboards, and can't be switched to public.
• Private and under-18 profiles look the same to visitors, so a profile never reveals that someone is a minor.

No profile without sign-up

• Nobody gets a public profile unless they sign up.
• Results an arena records for someone who isn't a member appear as "Unclaimed player" until that person signs up and claims them.

Arena listings

• Listings show public business facts only: name, address, phone, website, formats and hours.
• Logos and photos only appear when the arena supplies them after claiming its listing.
• Listing data comes from OpenStreetMap or our own curated list.
• Every listing has a way to claim or remove it. Removal requests are actioned within two business days.

Bookings

• When you book an arena on MantaRay, we keep your name, email, mobile (if you give it), what you booked and the callsigns of your players, and share them with that arena so it can run your session.
• The arena uses your booking details under its own privacy policy too.
• We only send you news and offers from an arena if you tick the box for that arena when you book.
• Callsigns used in a booking are saved as unclaimed until a player claims them.
• If you join someone's booking with their link, we keep the name, email and, if you give them, the mobile, date of birth and callsign you enter, and share them with the arena. Whoever booked sees your name, callsign, whether you've signed your waiver and what you've paid, but not your email, mobile or date of birth. Others with the link see your first name and callsign.
• After your session we may email to ask how it went. Your rating and comment go to the arena. It shares your comment on its page, with your first name and initial, only if you tick the box to say it can.
• If you tick the box for an arena's news and offers and then don't finish booking online, we may email you once to invite you back. Every such email has a link to unsubscribe.

Payments

• Card payments are taken by Stripe, our payment provider, straight into the arena's own Stripe account. Your card details go to Stripe and MantaRay never sees or stores them.
• Stripe stores payment information outside Australia, including in the United States.
• We keep a record of what was paid and refunded against your booking.

Waivers

• When you sign a venue's waiver, we keep your name, date of birth, contact details if you give them, your emergency contact, your answers (including any medical information you choose to tell the venue), your signature, and when and where you signed. A parent or guardian's name, relationship and signature are kept the same way.
• The venue sees your signed waiver so it can run your session safely. Staff note that they checked your ID; we never keep a copy of it or its number.
• Waivers signed on a venue's tablet are encrypted on the tablet until they reach us.
• Signed waivers are stored with Google Cloud in the United States, and kept as a record of your visit for as long as the law that applies to the venue requires.

Gift vouchers

• When you buy a gift voucher we keep your name and email, who it's for and their email if you'd like us to send it to them, the message you write on it, and how it's used. The arena sees these so it can honour the voucher and help if something goes wrong.
• Anyone with a voucher's code or its link can see what's left on it, so keep it like cash.
• Gift vouchers are stored with Google Cloud in the United States. Card payments are processed by Stripe, as above.

Emails and texts

• We email your booking confirmation, reminders and pay links, and text a reminder to your mobile if you gave one. The arena can also message you about your booking, for example if the weather changes its plans.
• Emails and texts are sent by Brevo, our messaging provider. Brevo handles them, and keeps a record of each one and whether it arrived, in the European Union.
• Reply STOP to a text and we won't text that number again. If emails to an address keep bouncing, we stop sending to it.

Booking on an arena's website

• An arena's own website can show MantaRay's booking form. The form comes from MantaRay, and the arena's site only learns that a booking was made (its reference and value), not your details.
• We count how far visits get through booking, using a random number for each visit that isn't linked to you.

Forms and storage

• When you join the roster, claim an arena or ask to be notified, we use what you send only for that purpose and to email you about it.
• Bookings, waivers, gift vouchers and form submissions are stored on Google Cloud's servers in the United States (Iowa). Card payments, emails and texts are handled by Stripe and Brevo: see Payments and Emails and texts above.
• Booking and payment records are kept for at least five years, as Australian tax law requires for business records.
• Location from "Fields near me" stays in your browser and is only used to sort the map.

Contact

Questions about your information, or want something removed? Email hello@mantaray.app.