Privacy Policy

Last updated November 2, 2026

This explains what The Lab collects, why, who else sees it, and what you can do about it. Short version: we keep what the site needs to work, we don’t sell your data, and your team’s scrims stay private to your team.

What we collect

• Account: your name, gamertag, email, the age you entered, and a scrambled (hashed) copy of your password, never the password itself.
• Team data: the sessions, rosters, coach notes, review requests and VOD queue links your team saves in My Team, and who on the team saved them.
• Payments: Stripe handles your card details; we never see or store them. We keep the Stripe customer and subscription IDs, your plan, its status and renewal date, and records of review and coaching payments.
• Coaching bookings: the hours you book, what you want to work on and any note you add.
• Basic logs: when you sign in, plus the IP address and request details our host records to keep the site secure and working.

VOD files stay on your device

When you grade a VOD, your browser reads the video and works out the results on your own device. The video file itself isn’t uploaded to us; only the graded results and small pictures of the scoreboard names are saved to your team.

How we use it

To run your account and your team’s private space, take payments, deliver reviews and coaching, send the emails the site needs (like password resets and new-scrim alerts), keep the site secure, and improve The Lab’s tools.

Data sharing for the public Hardpoint pages

Each team’s owner has a data-sharing switch, on by default. While it’s on, saving a session also stores a copy with every name and piece of text removed: only spawns, deaths, hill control, rotations, holds and pace, as positions and times. Those copies help build the public Hardpoint Spawns and Strategy pages, where teams are never named. Turning the switch off deletes your team’s copies.

Who else sees it

• Your team: members see your team’s data according to their role. No other team can see it.
• The coach: when your team pays for a VOD Review, RoninJZC can open that one session until the review is done. Nothing else on your team.
• Service providers: Cloudflare hosts the site and its database; Stripe processes payments; an email provider sends the site’s emails. They only use your data to provide those services.
• We don’t sell your data or share it for advertising. We’d only disclose it if the law requires us to.

Cookies and storage

We use one sign-in cookie so you stay signed in, and your browser’s storage for preferences like effects and your last tab. No advertising or tracking cookies.

Your choices

• Delete sessions any time from My Team; they leave your team’s record and the shared copies go with them.
• Your team’s owner can turn data sharing off at any time.
• To get a copy of your data or delete your account, use the support email on your Stripe receipt. We’ll do it within 30 days, apart from payment records we have to keep by law.
• Depending on where you live (for example California or the EU), you may have more rights, such as correction or objection. Ask and we’ll help.

Children

The Lab is for people 13 and older. If you believe a child under 13 has made an account, use the support email on your Stripe receipt and we’ll delete it.

Security

Passwords are stored hashed, the site runs only over HTTPS, and each team’s data is only served to that team’s accounts. No system is perfectly secure, so use a password you don’t use anywhere else.

Changes

If this policy changes in a way that matters, we’ll post the new version here and update the date at the top.