Privacy Policy / 隐私政策
SU 2026 Year End Gala · Last updated: October 4, 2026
This policy describes how the Seattle United Runners Gala registration application handles information for event registration, payments, registration management, and related emails.
Information we collect
We collect the contact email address, participant names, and whether each participant is age five or under. We do not request a child's exact birth date. Registration records include registration identifiers, payment amounts and status, and timestamps. Transfers record the previous and new participant names and email addresses. Registration management stores hashed verification codes and session tokens, their expiration times, and verification attempts.
PayPal processes payments. Our application stores PayPal order and capture identifiers and payment confirmation information; it does not collect or store payment card numbers or PayPal passwords. Hosting and service providers may process technical information such as IP addresses and request logs to operate and protect their services.
How we use information
We use this information to register guests, calculate fees, confirm payments, send registration confirmations and verification codes, authenticate registration owners, process transfers, and resolve event or payment issues. The public homepage displays aggregate participant and child counts only, without participant names or email addresses.
Google and Gmail access
The event organizer authorizes a designated Gmail or Google Workspace sender account using the https://www.googleapis.com/auth/gmail.send permission. This permission is used only to send Gala registration confirmations, verification codes, and transfer notifications. Attendees do not grant access to their Google accounts to register.
The application uses the organizer's sender address and OAuth credentials to send these messages. It does not read inbox messages, search mail, access contacts, or delete existing Gmail messages. OAuth credentials are stored in the hosting platform's server-side secret configuration and are not included in public webpage code.
Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to provide the disclosed email functionality, not for advertising, sale, or training generalized AI models.
The organizer can revoke access through Google Account third-party connections. Revoking access stops the application's ability to send new emails from that account; it does not automatically delete previously stored event records or sent messages.
Sharing and service providers
Event organizers may access registration information to operate the Gala and provide support. Cloudflare hosts the application and database, Google delivers email, and PayPal processes payments. A transfer notification shares the relevant participant names with the original owner and the new owner. We do not sell personal information or use it for targeted advertising. Information may also be disclosed when required by law.
Service providers handle information under their own policies: Cloudflare, Google, and PayPal. The venue link opens Google Maps, which is subject to Google's policies.
Storage, security, and retention
Registration and payment records are stored in the application's Cloudflare D1 database. Registration management uses an HTTP-only session cookie. Verification codes expire after ten minutes and management sessions after one hour. Expiration prevents further use; it does not guarantee immediate deletion of all stored records.
The application does not currently apply an automatic deletion schedule to event records. Organizers retain records for event administration, payment reconciliation, support, and applicable recordkeeping needs, and handle deletion requests as described below. Emails already delivered and provider backups or records may have separate retention periods.
Your choices and contact
You may request access, correction, or deletion of your registration information by replying to a Gala confirmation, verification, or transfer email sent by the organizer. Include your registration number if available. If you have not received an email, contact the Seattle United Runners Gala organizer through the channel used to invite you to the event.
We may need to verify ownership before changing or deleting information. Records needed for payment reconciliation or legal obligations may need to be retained. Please submit children's information only as their parent, guardian, or with appropriate authorization.
Policy updates
We may update this page to reflect changes to the application or its data practices. The date above indicates the latest revision.