Privacy Policy

CageList, LLC is a Florida limited liability company and the "controller" or "business" responsible for personal information collected through the Platform. Hosts, facilities, coaches, teams, organizations and retailers you transact with through the Platform are independent parties; where they receive your information, their own privacy practices apply to what they do with it (Section 4). This Policy does not cover websites we link to (Section 17).

We collect information in three ways: you give it to us, we collect it automatically when you use the Platform, and we receive it from others. What we collect depends on which parts of the Platform you use.

Information you give us

• Account and profile. Name, email address, mobile number, password (stored hashed by our authentication provider), display name and handle, profile photo, bio, location (city/area), date of birth when we ask for age verification, and the roles you choose (player, parent, host, coach, facility, team).
• Bookings and sessions. The listings you view, favorite and book; dates, times and party size; add-ons; the cancellation tier and price stored on each booking; your signed liability waiver (the version, your typed name, timestamp and network address); reviews you write and responses to them; damage or safety reports; and dispute submissions.
• Listings (Hosts and facilities). Property address and coordinates, photos, descriptions, amenities, pricing, availability, house rules, cancellation tier, Stripe Connect status, and, for facilities, business details, hours, contact details, website and social links, claim materials and any scheduling request. Listing text is checked for contact information (Section 12).
• Lessons (Coaches and clients). Coach profile details (experience, credentials you describe, specialties, location, pricing, cancellation tier, availability); application materials; for clients, the athletes you book for (name and, where you provide it, age band and notes), seat payments, join-link invitations, reschedule proposals, lesson messages, and coach reviews and responses. Athlete names are often those of minors; see Section 7.
• Background checks (Coaches). See Section 6.
• Memberships, dues and classes. The plans you join, the teams you pay dues to, class and tryout registrations, the athlete you register (name and information the organizer requires), Stripe subscription and customer identifiers, billing status, sessions used, and cancellation records.
• Directory claims and organization pages. Claimant name, role and authority representations, organization identifiers, logos and media you upload, roster openings and team-need posts you publish, roster-interest submissions you make or receive, membership-interest and inquiry submissions, seasons, events, RSVPs and announcements, and Featured Profile purchase records.
• Player Profiles (minors). Created only by a parent or guardian: the athlete's display name, age band (not a birth date), positions, batting/throwing hand, jersey number, linked team, photos and highlight video, the connections you approve and invites you generate, and your guardian attestation with its timestamp and network address. See Section 7.
• Social. Posts, photos and video on your public profile and the feed, follows, and reports you make about content.
• Messages. The content of messages you send and receive on the Platform, attachments, and message metadata (who, when, which booking or listing).
• Gear and swag. For direct gear orders: items, quantities, shipping name and address, email, order status, and the tax Stripe computed. For affiliate links: the product you clicked and when (Section 17). Swag orders are collected by Fourthwall, not by us (Section 17).
• Creators, referrals and credits. Creator application materials (social handles, audience details), campaign codes, attributed referrals, earnings ledger, payout preference (cash or credit), Stripe Connect or off-platform payout details, tax forms (W-9) where required; referral codes, attribution events, and your credit ledger (grants, redemptions, expirations).
• Payments. See Section 5. We do not store full card numbers.
• Communications with us. Support emails, contact-form submissions, quote requests, investor inquiries, career applications, survey responses, and anything else you send us.

Information collected automatically

Device and browser type, operating system, IP address and approximate location derived from it, pages viewed, clicks and interactions, referring URLs and referral or campaign parameters (such as ?ref= codes), timestamps, session identifiers, error reports and performance data, and, for a sample of sessions, a masked replay of your interactions with the page (Section 8). We collect this through cookies, local storage and similar technologies, and through our analytics and monitoring providers.

Information from others

• Stripe: payment outcome, dispute and chargeback data, Connect onboarding and verification status, tax-reporting data.
• Checkr: background-check invitation status, report status and result category, and adverse-action status for Coaches (Section 6).
• Hosts, coaches, facilities and teams: reviews and private notes about you, reports about you, roster decisions, and information they enter about a booking, lesson or class.
• Other users: invitations (lesson join links, Player Profile connection invites), referrals, and content that mentions you.
• Public sources: for unclaimed Directory Listings, publicly available business information (name, address, phone, website, hours, description). We do not compile personal information about private individuals from public sources.
• Organization contact addresses: for unclaimed teams, leagues, academies and facilities, the business email address the organization publishes on its own public website. We use it only to pass on messages people send that organization through CageList and to invite the organization to claim its page. We never display it on the Platform, never sell or share it, and stop using it (and delete it on request) when the organization unsubscribes, asks us to, or the address bounces.
• Migrated data: if your account was migrated from a prior platform, the account, listing, booking and review history that came with it.
• Google Maps and Places: place details, photos and coordinates for addresses you enter or places shown on the map.

We use personal information to:

• Provide the Platform: create and secure accounts; publish listings and profiles; process bookings, lessons, classes, memberships, dues, orders and subscriptions; collect waivers; run scheduling, calendars and reminders; deliver messages; show reviews; operate the feed and Player Profiles; and pay Hosts, Coaches, facilities, teams and Creators.
• Process payments and payouts through Stripe, including saved payment methods for recurring plans, refunds, credits, chargebacks and tax calculation on direct sales.
• Run the coach verification program, including ordering and acting on background checks (Section 6).
• Operate programs: review Creator applications, attribute referrals, accrue and pay earnings, grant, apply and expire credits, review directory claims, and configure partnership listings.
• Communicate with you: transactional email and SMS (confirmations, reminders, receipts, renewal notices, payout notices, safety notices), support responses, and, with your consent or where permitted, marketing email you can unsubscribe from at any time.
• Interpret your searches: when you type a natural-language search (for example, "cage with a pitching machine near Orlando this weekend"), the text of that search, and nothing else, may be sent to an AI model provider to convert it into search filters.
• Keep the Platform safe and honest: verify identity and age, detect and prevent fraud, self-referral, fake accounts, fake reviews and off-platform circumvention (Section 12), investigate reports (including any involving a minor), enforce our Terms, and respond to disputes and chargebacks.
• Support you: our staff may view your account and, where needed, act as you in the product to diagnose a problem (Section 11).
• Improve the Platform: analytics, testing, debugging and error monitoring, and building aggregated or de-identified statistics we may publish (for example, listing counts by state).
• Measure advertising: where we run paid advertising, measure whether it led to a signup or booking (Section 8).
• Comply with law: tax and information reporting, responding to lawful requests, record-keeping, and protecting our rights.

We do not use personal information for automated decisions that have legal or similarly significant effects on you without human review, except that background-check results are subject to the adverse-action process in Section 6, and fraud and rate controls may automatically hold a transaction or action pending review.

We do not sell personal information for money. Section 16 explains how "sale" and "sharing" are defined under some state laws and what that means for affiliate links, analytics and advertising measurement.

With the other party to your transaction.

• Hosts and facilities receive a Guest's name, profile photo, party size, booking details, messages, waiver status and the contact details needed to coordinate the session. Guests receive the Host's name, the listing address after booking, and contact details the Host chooses to share.
• Coaches receive the client's name, the names (and any notes) of the athletes booked, lesson details, messages and payment status. Clients receive the Coach's profile information and lesson location.
• Facilities and teams receive the names and contact details of their members, dues payers and class registrants, athlete names, billing status and session usage.
• Organizations that claim a Directory Listing receive roster-interest, membership-interest and inquiry submissions made to them.
• Organizations that haven't joined yet: when you message an unclaimed team, league, academy or facility, we email your message to the address it publishes on its own website, with your first name and city only (Terms, Section 25). Your email address, phone number and last name are not shared.
• Providers considering your booking may see private notes that a previous Host or Coach left about you after a completed booking or lesson (Terms, Section 30).
• Approved connections on a Player Profile can see what the guardian has made visible to them.

Each of these parties is independent of CageList and is responsible for its own use of the information, subject to our Terms, which prohibit using it for anything other than the transaction and prohibit contacting minors directly.

With service providers acting for us. Companies that process information on our instructions: Stripe (payments, payouts, subscriptions, tax calculation, identity verification); Supabase (authentication, database, file storage); Vercel (hosting, edge network, performance measurement, and storage of cached map imagery); Twilio (SMS delivery); Resend (email delivery); Google (Maps and Places for location features; Google Analytics); PostHog (product analytics); Sentry (error monitoring and session replay); Cloudflare (Turnstile bot protection on sign-up and sign-in; Turnstile runs invisibly and Cloudflare's handling of the data it collects for that check is described in its Turnstile Privacy Addendum at cloudflare.com/turnstile-privacy-policy); an AI model provider reached through Vercel's AI gateway (search-query interpretation only); a third-party feedback widget on the site; and Checkr (background checks, a consumer reporting agency; see Section 6).

With retailers and fulfillment partners.

• Direct gear orders: we share your name, shipping address, email and order details with the manufacturer or distributor that ships the order (currently JUGS Sports) so it can fulfill, ship and handle warranty claims.
• Affiliate links: when you click an affiliate link you go to a third party (Amazon, retailers on the Impact and CJ networks, brands using Affiliatly, and others), which receives the referring page and sets its own cookies to attribute a purchase to us. We do not send them your name or account information. See Section 17.
• Swag: the swag store is operated by Fourthwall; your order information is collected by and belongs to Fourthwall under its policy, and no order or customer data flows back to us.

With advertising platforms, for measurement. When enabled, the Meta (Facebook) Pixel and Conversions API report events such as page views, signups and purchases to Meta so we can measure our advertising. We use them to measure our advertising and, where enabled, to show our own ads on Meta's platforms to people who have visited CageList. We do not sell this data and do not use it to target children.

Publicly. Listings, facility pages, coach profiles, public @handle profiles, feed posts, public reviews and responses, team pages, roster openings and free-agent listings are public and may be indexed by search engines. Player Profiles are not public (Section 7). Creator landing pages may show a Creator's name, handle and code.

For legal reasons and safety. With law enforcement, regulators, courts or other parties when required by law or legal process; to enforce our Terms and Waiver; to respond to a dispute, chargeback or claim; to protect the rights, property or safety of CageList, users, minors or the public; and with our lawyers, accountants and insurers.

In a business transfer. If CageList is involved in a merger, acquisition, financing or sale of assets, personal information may be transferred as part of that transaction, subject to this Policy.

Aggregated or de-identified data that cannot reasonably identify you may be shared for any purpose.

Payments are processed by Stripe. When you pay, your card details go directly to Stripe; CageList receives a token, the last four digits, card brand, expiry and billing postcode, and never stores your full card number. Stripe's privacy policy governs Stripe's handling of your payment data.

Saved payment methods. For recurring memberships, team dues and the Featured Profile, Stripe keeps a customer record with your payment method on file so we can charge it at each renewal. You can update or remove it through the billing portal linked from your account.

Merchant of record. For hourly bookings and lessons, CageList collects payment on behalf of the Host or Coach and transfers their share through Stripe Connect. For memberships, team dues, the Featured Profile, direct gear orders and the coach verification fee, CageList is the merchant of record and the charge appears from CageList.

Payouts. Hosts, facilities, Coaches, teams and Creators receiving cash are onboarded to Stripe Connect, which collects identity, bank and tax information directly. We receive verification status and payout records. Creator cash payouts made off-platform are recorded by us with the payee's chosen details. Tax forms and taxpayer identifiers are used only for payment and tax-reporting purposes.

Sales tax. For products CageList sells directly, Stripe calculates sales tax from your shipping address; we retain the calculation for tax records.

If you apply to offer lessons, CageList orders a background check on you from Checkr, Inc., a consumer reporting agency, as part of our coach verification program.

Before anything is ordered you will receive a separate, standalone disclosure that a consumer report will be obtained, and you will give written authorization, as the Fair Credit Reporting Act (FCRA) requires. This Policy is not that disclosure. You then complete Checkr's identity and consent flow directly with Checkr; the personal information you provide to Checkr (including your Social Security number, date of birth and government ID) is collected by Checkr, not by CageList, and is governed by Checkr's privacy policy.

What we receive and keep. CageList receives the invitation status, whether the report is complete, the report's result category (clear, or requires review), and adverse-action status. Where a report requires review, an authorized CageList staff member views the report on Checkr's platform to make a decision. We store Checkr candidate, invitation and report identifiers, the status history, the date you consented, a short note if the check stalls (for example, that identity verification is required), and a record that each Checkr event was received. We do not copy the report's contents into our database.

How we use it. Only to decide whether to approve, continue or end your participation in the coaching program. If we may decline you based in whole or part on the report, we follow the FCRA adverse-action process: you receive a pre-adverse-action notice with a copy of the report and "A Summary of Your Rights Under the FCRA," a reasonable period to dispute inaccuracies with Checkr, and a final notice if the decision stands. We do not decline for report reasons outside that process.

Your rights. You may request a free copy of your report from Checkr, dispute its accuracy with Checkr, and Checkr must investigate. You may withdraw from the program at any time; withdrawing does not delete a report already produced, but we will stop using it.

Re-checks. We currently fund a re-check for active Coaches approximately every three years and will obtain fresh authorization before each one.

Retention. We keep status records for as long as you are a Coach and for five (5) years afterwards for dispute and legal purposes.

"Verified" badge. The badge tells other users that you completed the program; it does not disclose the contents of your report.

Accounts are for adults. You must be 18 or older to hold an account, and we ask for your date of birth at signup to check that. We do not knowingly allow anyone under 18 to create an account, and we do not offer accounts to anyone aged 13 to 17. If we learn that an account was created by someone under 18, we close it and delete the information, subject to Section 13.

Information about minors that adults provide. Because CageList serves youth baseball and softball, adults routinely give us information *about* children: a parent books a cage for their kid, registers them for a lesson or class, pays team dues for them, signs a waiver on their behalf, or creates a Player Profile describing them. In every case the information is provided by, and the account belongs to, the parent or guardian. The child never logs in, never posts, never messages and is never messaged. We do not direct any part of the Platform to children, do not show advertising to children, and do not use information about a child for advertising, profiling or marketing.

Player Profiles specifically. A Player Profile is a page a guardian creates to hold a young athlete's display name, age band, positions, batting/throwing hand, jersey number, team link, photos and highlight video. We designed it to keep the child's information under the guardian's control:

• Only a guardian can create one, and we record the guardian's attestation of authority with its date, time and network address. We rely on that attestation; we do not independently verify parentage.
• We do not collect the child's birth date, precise location, school or contact details, and we ask guardians not to enter them.
• Private by default. The profile is visible only to the guardian and to connections the guardian approves. It is not public, not searchable on the Platform, and blocked from search engines. Team pages never display a roster of minors.
• Who can see it. Approved connections (for example, teammates' parents approved from a linked roster, or people the guardian sends an invite link to). Connections cannot message the profile. CageList staff can see it for support and moderation (Section 11).
• No commercial use. We never use a minor's photos, video, name or likeness in marketing or share them with third parties beyond approved connections and the service providers that store and display them, unless the guardian gives separate written consent.
• Deletion. The guardian can permanently delete the profile and all of its media in one action from the Players page, and closing the guardian's account deletes every Player Profile it owns the same way (Section 13). Deletion removes the records and files; it does not merely hide them. Deleted media may persist in backups for up to seven (7) days.
• Reporting. Every profile carries a report control, and anyone may email privacy@cagelist.com if they believe a profile was created without authority or should not be on the Platform. We act promptly and may hide a profile while we review.
• Retention. We keep a Player Profile until the guardian deletes it or closes their account; we do not retain minor media after deletion except in backups as above and where required to respond to a legal claim.

Other information about minors (athlete names on lessons and classes, waivers signed on their behalf, dues payer records, roster-interest submissions) is kept as part of the transaction records described in Section 13 and is shared only with the Coach, facility or team that provides the activity.

If you believe we hold information about a child that we should not, contact privacy@cagelist.com and we will investigate and delete it.

We use cookies, local storage and similar technologies to keep you signed in, remember preferences, attribute referral and Creator codes, prevent fraud, and measure how the Platform is used. The Cookie Policy at cagelist.com/cookie-policy lists them.

Analytics. We use PostHog and Google Analytics to understand page views, clicks and feature use. PostHog events are sent through an endpoint on our own domain (so they are not blocked by most tracker-blocking tools), and once you sign in they are associated with your account identifier and email so we can see how a feature is used across sessions. PostHog session recording is switched off. Google Analytics sets its own cookies and receives pseudonymous usage data; Google's policies describe its use. Vercel Speed Insights measures page performance.

Error monitoring and session replay. We use Sentry to capture errors. Sentry's Session Replay records the structure and interactions of a page (clicks, scrolls, navigation and page changes) for approximately ten percent of sessions and for any session in which an error occurs, so we can reproduce problems. All text is masked and all images, video and media are blocked in replays before they leave your browser, so replays do not contain the words you type or the content you view; they show a wireframe-like reconstruction. Replays are retained by Sentry for a limited period under our plan. If you prefer not to be included, you can use a browser or extension that blocks Sentry's script; core Platform features will still work.

Advertising measurement. When we are running paid advertising, the Meta (Facebook) Pixel may be loaded on the Platform and may set Meta's cookies so that Meta can tell us whether an ad led to a signup or booking. We use it to measure our advertising and, where enabled, to show our own ads on Meta's platforms to people who have visited CageList. Blocking third-party scripts in your browser prevents it from loading.

Affiliate cookies. Clicking an affiliate link causes the destination site to set its own cookies (Section 17).

Your controls. Most browsers let you block or delete cookies; some features (sign-in, checkout) will not work without them. We do not currently respond to Global Privacy Control or "Do Not Track" browser signals; to opt out of the analytics and advertising-measurement tools described here, use your browser or an extension to block them, or email privacy@cagelist.com and we will confirm what we can disable for you.

If you give us a mobile number, CageList may send text messages for one-time verification codes, booking confirmations, requests, approvals, declines, expirations and reminders, held-booking updates, payment, refund and payout notices, listing status updates, review prompts, credit-expiry reminders, message-received alerts, lesson notices to Coaches, and similar activity notices as the product adds them. We do not send marketing text messages unless you separately opt in. Message frequency varies with your activity. Message and data rates may apply. Reply STOP to opt out (you may receive one confirmation), HELP for help, or email support@cagelist.com. Consent is not a condition of using the Platform, but opting out may mean you miss time-sensitive notices.

We record each SMS consent event at signup (date, number, the consent wording version, network address and browser) and keep a log of activity messages sent (recipient, category, delivery status and a short preview of the text) to comply with telecommunications rules and to prove consent. Verification codes are sent through our authentication provider and are not logged this way. We do not sell, rent or share your mobile number, SMS consent status or message content with third parties or affiliates for their marketing. Twilio Inc. delivers messages on our behalf as a service provider and does not use your data for its own purposes.

We send transactional email (confirmations, receipts, reminders, renewal notices, payout notices, security notices, review requests, follow digests) through Resend, which acts as our service provider. We also send marketing and product email (newsletters, host tips, gear guides, offers), which you can stop at any time using the unsubscribe link in every such message or at cagelist.com/email-preferences; transactional email continues while you have an account. Every commercial email includes our postal address as required by law. We keep a record of each email sent (recipient, template, subject and delivery status). Our email provider may measure opens and clicks; we do not store per-message open or click data.

CageList is operated by a small team. To support you and keep the Platform safe, authorized staff can access personal information through an internal administration application at admin.cagelist.com. Specifically:

• Staff can view your account, profile, listings, bookings, lessons, subscriptions, orders, credits, messages, reviews, reports, Player Profiles and media, payment and payout status (not card numbers), background-check status, and activity logs.
• Staff can act on your behalf, for example cancel or refund a booking, adjust a payout, edit a listing, approve or reject a claim or application, or remove content.
• Staff can use an impersonation ("act as") tool that lets them view and use the Platform as if signed in as you, to reproduce a problem you reported or to make a change you asked for. Impersonation requires an administrator account protected by multi-factor authentication; every impersonation session is recorded in our system logs (who, whom, when, and where they landed) and shown to the staff member with a banner for its duration; and it cannot be used on another administrator. Staff do not use impersonation to send messages or make purchases as you unless you have asked us to.
• Access is limited to staff who need it for support, moderation, trust and safety, finance or engineering, and is governed by role-based permissions.

If you would prefer that we not use impersonation on your account except when you explicitly ask, tell us at privacy@cagelist.com and we will note it on your account.

To enforce our rules against arranging payment outside the Platform and to protect users, especially minors, we review content and messages by automated means and, when flagged or reported, by staff:

• Listing and profile text is checked when submitted for phone numbers, email addresses, URLs and social handles, and a submission that contains them may be rejected until they are removed.
• Messages are checked for contact information, payment-app handles and cues that suggest paying outside the Platform; a message that appears to share them before a booking or lesson is confirmed is blocked, and the attempt is recorded. Staff may read messages that are flagged, reported, or involved in a dispute, chargeback or safety investigation.
• Photos and video are not scanned automatically; they are reviewed by staff when reported or when a listing or Player Profile is moderated.
• Fraud and abuse signals (request rates, referral patterns, payment outcomes, bot detection at signup) are evaluated automatically and may cause a transaction, message or account action to be held for human review.

We do not use message content for advertising, and we do not send message, listing, review or Player Profile content to any AI model provider. The only text we send to an AI model is the search query you type (Section 3).

We keep personal information for as long as your account is active and as needed for the purposes in Section 3, then for the periods below:

• Transaction records (bookings, lessons, classes, memberships, dues, orders, credits, payouts, refunds, disputes, waivers and tax forms): seven (7) years after the transaction, for tax, accounting and legal-claim purposes, which also covers the card-network chargeback window.
• Messages: for the life of the account and afterwards as part of the transaction record, or longer if part of a dispute, chargeback or safety investigation.
• Reviews: with the transaction record; a review of a Provider may remain visible after the reviewer's account is closed, attributed to a de-identified name.
• Background-check status records: Section 6.
• Player Profiles and minor media: Section 7.
• Activity, consent and system logs (including impersonation logs, SMS consent and send logs, email send logs, blocked-message records and sign-in records): up to three (3) years.
• Analytics and replay data: for the retention period configured with each provider.
• Directory Listing data for organizations: for as long as the listing is published or archived for record-keeping.
• Historical Builder Network records (Section 18): seven (7) years from the last transaction, then deleted.
• Marketing preferences and suppression lists: indefinitely, so we do not contact you after you unsubscribe.

Deleting your account. You can delete your account from account settings (an account without an email on file is deleted by contacting support) or by emailing privacy@cagelist.com. When you do, we: stop every recurring plan you pay for or sell (an active plan ends at the close of its current paid period, a past-due plan ends immediately, and if our payment processor cannot confirm the cancellation we stop and ask you to try again rather than delete an account that could still be billed); cancel your future bookings and lessons; archive your listings; unpublish any coach profile; permanently delete the Player Profiles you created and their media; sign you out everywhere; and anonymize your account, replacing your name, email, phone, photo, bio and location with placeholders so that the transaction records we must keep no longer identify you. We keep the anonymized financial records for the seven-year period above and a record that you deleted your account. Information may persist in our database backups for up to seven (7) days. Information that has already been shared with a Host, Coach, facility, team or retailer for a transaction remains with them under their own practices.

We protect personal information with measures appropriate to its sensitivity: encryption in transit (HTTPS/TLS) for all Platform traffic; encryption at rest by our database and storage provider; row-level access controls in the database so users can read only their own data; multi-factor authentication required for staff administrative access; role-based permissions; logging of sensitive staff actions; payment card handling delegated entirely to Stripe (PCI DSS Level 1); hashed passwords; secrets management for service credentials; bot protection on sign-up and sign-in; and dependency and error monitoring. No system is perfectly secure, and we cannot guarantee that unauthorized access will never occur. If a breach affecting your personal information occurs, we will notify you and regulators as the law requires.

Regardless of where you live, you can:

• Access and correct most of your information in account settings, and request a copy of the personal information we hold by emailing privacy@cagelist.com.
• Delete your account (Section 13) and, as a guardian, delete a Player Profile in one action.
• Export your booking, lesson and transaction history on request in a portable format.
• Opt out of marketing email (unsubscribe link, email preferences) and SMS (reply STOP). Transactional messages continue while you have an account.
• Limit cookies, analytics and advertising measurement through your browser (Section 8).
• Withdraw consent where processing is based on it, for example withdraw from the coaching program or remove a Player Profile, without affecting processing that already occurred.
• Object to or restrict processing in the circumstances your local law provides.
• Complain to your state attorney general or data-protection regulator; we would appreciate the chance to address your concern first.

How to exercise rights. Email privacy@cagelist.com from your account email, or use the controls in your account. We may ask you to verify your identity (for example, by confirming your account email or a recent transaction) before acting, and we may decline requests that are unfounded, excessive, or that would require us to delete records we must keep. We respond within forty-five (45) days, extendable once by forty-five (45) days where permitted, and we do not discriminate against you for exercising your rights. You may authorize an agent to make a request for you; we will require proof of the authorization.

Information held by others. We cannot retrieve or delete information that a Host, Coach, facility, team, retailer or Fourthwall received from you for a transaction; contact them directly.

California (CCPA/CPRA). California residents have the right to know the categories and specific pieces of personal information we collect, the sources, the purposes, and the categories of third parties we disclose it to; to delete; to correct; to opt out of "sale" and "sharing"; to limit use of sensitive personal information; and not to be discriminated against.

• Categories we collect (mapped to the CCPA categories): identifiers; customer records (name, address, payment tokens); characteristics of protected classifications (age/date of birth; guardianship status); commercial information (bookings, orders, subscriptions); internet activity (usage data, masked replay); geolocation (approximate from IP; addresses you enter); audio/visual (photos and video you upload); professional information (coach credentials you describe); inferences (none beyond fraud controls and product analytics); and sensitive personal information (account credentials; the fact that a background check was ordered and its result category; the precise location of a listing address; information about minors provided by guardians). We do not use sensitive personal information to infer characteristics about you, and we use it only for the purposes permitted without a right to limit (providing the service, security, fraud prevention, and the coaching verification program).
• Sale and sharing. We do not sell personal information for money. Under California's definition, allowing a third party to set cookies for cross-context behavioral advertising can be "sharing." Google Analytics, the Meta Pixel when enabled, and the affiliate networks' attribution cookies may fall within that definition. You can opt out by emailing privacy@cagelist.com, or by blocking those scripts in your browser. We have no actual knowledge that we sell or share the personal information of consumers under 16.
• Disclosures for a business purpose in the past 12 months: to service providers (Section 4), to the other party to your transaction, to fulfillment partners, and to Checkr, each for the purposes described.
• Shine the Light. We do not disclose personal information to third parties for their own direct marketing.

Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland and other states with comprehensive privacy laws. If you live in one of these states, you may have rights to access, correct, delete and obtain a copy of your personal data, to opt out of targeted advertising, sale, and profiling in furtherance of significant decisions, and to appeal a refusal. Most of these laws apply only to businesses above a revenue or volume threshold that CageList may not yet meet; we nevertheless honor these requests for all users through the process in Section 15. If we refuse a request, you may appeal by replying to our response with "Appeal" in the subject line; we will respond within the period your state's law requires, and tell you how to contact your attorney general if we deny the appeal. Florida: the Florida Digital Bill of Rights applies to businesses with more than $1 billion in revenue and does not currently apply to CageList; Florida residents may still use the rights in Section 15.

Nevada. We do not sell covered information as defined in NRS 603A.

The Platform links to websites and services we do not control: retailers, Fourthwall's swag store, Stripe's checkout and billing pages, Checkr's candidate portal, Google Maps, social networks, and sites in blog posts and guides. Their privacy practices are their own.

Affiliate disclosure. Many product links are affiliate links: if you click one and buy, CageList may earn a commission at no extra cost to you. As an Amazon Associate, CageList earns from qualifying purchases. We also participate in the Impact, CJ Affiliate and Affiliatly networks and brand programs. When you click an affiliate link we record the click on our own systems for reporting (the product, the page you came from, the time, your browser type, and whether the click looks automated), but not your name, account or network address. The destination site and its network then set their own cookies to attribute your purchase, which reaches us only as aggregate commission figures, never as a purchase tied to you.

Swag store. Orders placed through the swag store are collected, processed and fulfilled by Fourthwall under Fourthwall's privacy policy; CageList receives sales reports, not customer data.

CageList previously operated a Builder Network that connected homeowners with cage-installation contractors. That program is withdrawn: we no longer collect builder applications, homeowner quote requests or project details, and no lead matching, lead sales or contact-detail disclosures take place. We retain historical records from the program (builder business details, homeowner contact and project details, lead-claim payment records) for the period in Section 13 for accounting and dispute purposes, and do not use them for any other purpose. If you provided information to the program and would like it deleted sooner, email privacy@cagelist.com; we will delete it except where a payment record must be kept.

We may update this Policy. When we make material changes (new categories of information, new purposes, new recipients, or changes to your rights) we will notify you by email or a prominent notice on the Platform before the change takes effect, and we will not apply a material change to information collected earlier in a way that reduces your rights without your consent. The "Last updated" date shows when it last changed. Prior versions are available on request.

CageList, LLC, 3104 E Camelback Rd, Unit #8011, Phoenix, AZ 85016 · privacy@cagelist.com (privacy requests, Player Profile concerns, data rights) · support@cagelist.com (account and booking help) · legal@cagelist.com (legal notices).

If you are a Coach with a question about your background check, contact Checkr's candidate support (checkr.com/candidates) for your report, and privacy@cagelist.com for how CageList used it.