Privacy notice

Last updated 1 September 2026

Red Bird Goals is a skills tracker for sports clubs, teams and dance studios. It holds what a club records about the people it teaches. This page says exactly what is kept, who can see it, and how to get it removed.

Two different relationships

Almost everything in Red Bird Goals belongs to a club, not to us:

• The people on a tracker. The club decides what to record and why. They are responsible for that data; we hold it for them and act on their instructions. In data-protection language, the club is the controller and we are the processor.
• The account of whoever runs the club's tracker. That relationship is between them and us, and for it we are the controller.

If you are a parent or an athlete and want something changed or removed, ask your club first — they can do it immediately from inside the tracker. If they cannot help, write to us at info@redbirdgoals.com.

What is held

For somebody who runs a tracker:

• Their name and email address.
• Their password, stored only as a one-way hash — we cannot read it.
• When they last signed in.

For somebody being tracked:

• Their name, and a parent or guardian's name where the club has recorded one.
• An email address — often a parent's, when the card belongs to a child.
• The level they are on, the skills a coach or teacher has signed off, and the date each level was completed.
• Classes or sessions they are in, and notes their coach or teacher writes on the card.
• An icon or, if the club uploads one, a photo.
• When they last signed in, if they have a login at all — many cards have none.

We do not ask for addresses, dates of birth, phone numbers, payment details or medical information, and there is nowhere on the platform to put them.

What it is used for

Running the service, and nothing else. It is not sold, not shared with advertisers, not used to build a profile of anybody, and not used to train anything. There is no advertising on Red Bird Goals and no tracking pixels or analytics scripts on any page.

Who can see it

• A coach or teacher sees only the people handed to them.
• An admin at that club sees everyone on that club's tracker.
• A parent or member signs in and sees their own card and nobody else's. This is enforced by the server, not by which page they open.
• Nobody at another club can see any of it. Trackers are separate.
• We can reach the data on the server in order to run, back up and repair the service. We do not read it for any other purpose.

One exception is worth naming: a club can switch on a shared leaderboard and hand out a link to it. That page is public to anyone with the link. It is off unless a club turns it on, it shows first names only unless the club chooses otherwise, and the link can be replaced at any time, which kills every copy already sent. Whether to publish it is the club's decision.

Cookies

One cookie, called redbird. It keeps you signed in and does nothing else. It is marked Secure, HttpOnly and SameSite, is not readable by other sites, and carries no advertising or analytics identifier. There are no third-party cookies on this site.

Email

We send email for two reasons only: a password-reset link somebody asked for, and a welcome message with a starting password when a club creates a login. There are no newsletters and no marketing email.

Where it is held, and who else touches it

The service runs on servers rented from our hosting provider, and email leaves through the mail service on that host. Those two suppliers are the only third parties with any access, and only as part of providing the hosting and mail we use. Nobody else receives the data.

Data files are stored outside the public web folder, so no file of names or progress can be fetched over the web even by guessing its address.

Children

Red Bird Goals is built for clubs that teach children, so much of what it holds is about minors. It is designed on that basis: the least data that will do the job, no advertising, no profiling, and no public exposure unless a club deliberately switches it on.

The club decides what to collect and is responsible for telling families and for having whatever permission the law where they operate requires. We act on the club's instructions, use the data for nothing but running the service, and delete it when asked.

How long it is kept

A card is kept for as long as the club keeps it. Delete a card, a login or a whole tracker and it is removed from the live service straight away — we keep no separate archive of deleted records. Password-reset links expire on their own. Server backups taken for disaster recovery are rotated in the ordinary course.

Your rights

Depending on where you live you may have the right to see the data held about you, correct it, have it deleted, or get a copy of it. Most of this is immediate inside the platform: a card can be printed, emailed to the family, or exported by an admin, and any card, login or tracker can be deleted outright.

Ask your club first, since they hold the data and can act at once. If you would rather come to us, or your club is unreachable, write to info@redbirdgoals.com and we will help.

Keeping it safe

• Every page is served over HTTPS.
• Passwords are stored as bcrypt hashes; reset links are stored only as a hash, and expire.
• Data files live outside the web root and cannot be requested directly.
• What each person can see is decided by the server on every request.

No system is perfect. If you think you have found a security problem, please write to info@redbirdgoals.com and we will take it seriously.

Changes

If this notice changes, the date at the top changes with it. Anything that materially affects what is held or who can see it will be told to the clubs affected rather than quietly edited in.

Questions about this page: info@redbirdgoals.com