Last updated: April 28, 2026
X Games Legends Portal ("we," "us," or "our") is a private community platform for X Games alumni athletes. This Privacy Policy explains what personal information we collect, how we use it, and your rights regarding that information. We are committed to protecting your privacy and being transparent about our practices.
This policy applies to residents of the European Union (GDPR) and California (CCPA), as well as all other users of the platform.
When you sign up and complete your profile, we collect:
When you use the platform, we also automatically collect:
We use your information to:
We do not sell your personal information. We do not share your data with third parties for their marketing purposes.
Cookies set in your browser:
Server-side visitor tracking:
In addition to the cookies above, our server logs each request you make to the platform to a separate analytics database. Each entry includes the IP address, URL path, HTTP method, response status, browser/user-agent string, referring URL, the fingerprint identifier (if present), and — if you are signed in — your email address and name. IP-derived approximate location (see §1) is added to these records.
This analytics database is shared with other websites operated by the same operator. If you visit another website that uses the same logging system, activity on this platform may be correlated with that other activity through your IP address, fingerprint, or email. We use this data only for security monitoring and internal analytics — not for advertising, and not to share with unaffiliated third parties.
You can disable cookies in your browser settings, but doing so will prevent you from logging in to the platform. Disabling cookies does not stop server-side request logging, which is required for security and is retained as described in §5.
We retain your profile data for as long as your account is active. Server-side visitor-tracking records (see §4) are retained for up to 12 months for security and analytics purposes.
When you delete your account, the following data is permanently erased immediately: your profile and profile photo; your sent and received direct messages (deletion removes both your copy and the recipient's copy); your community-board posts and likes (replies left by you are removed; replies left to you by others are kept but unlinked from the deleted thread); your event, discount, and opportunity participation records; any proposals you submitted; your unused login tokens; your entry on the athlete allowlist; and your visitor-tracking records (best-effort, removed from the analytics database).
We retain only what we are required to keep by law (for example, certain financial or compliance records, if applicable).
Email send records held by our email service provider (SendGrid) are subject to their own retention policy and are outside our direct control. We do not store the body of sent emails ourselves once delivery is confirmed.
Depending on where you live, you have the following rights:
To exercise any of these rights, use our Privacy Request form. We will respond to general privacy requests within 30 days. CCPA-specific requests from California residents are subject to the 45-day response time set by California law (see §7).
If you are a resident of the European Union or European Economic Area, you also have the right to lodge a complaint with your local data protection supervisory authority if you believe we have not handled your personal information in accordance with applicable law.
If you are a California resident, you have the following rights under the California Consumer Privacy Act:
Categories of personal information we collect include: identifiers (name, email, IP address); personal information (address, phone number); professional information (athletic history, social media handles, agent name); internet activity (pages visited, device fingerprint); and geolocation data (derived from address and IP address).
We collect this information directly from you when you register and use the platform, and automatically through usage tracking. We use it to operate the platform, verify athlete eligibility, and connect members with opportunities.
To exercise your California privacy rights, use our Privacy Request form. We will respond within 45 days as required by law.
Your data is stored in a secured, encrypted PostgreSQL database hosted on DigitalOcean with SSL required for all connections. Access is restricted to authorized administrators only. Login is handled via one-time magic links — we never store passwords. While we take reasonable measures to protect your information, no system is 100% secure, and we cannot guarantee absolute security.
We rely on the following service providers to operate the platform. Each is bound by their own privacy policy and processes data only on our behalf for the purposes described.
All of these providers are based in the United States. If you are accessing the platform from the European Union or European Economic Area, your personal information will be transferred to and processed in the United States. We rely on standard data-transfer protections (such as Standard Contractual Clauses, where applicable) to safeguard such transfers; specific transfer mechanisms are confirmed with each provider as part of our agreements with them.
We do not engage in automated decision-making or profiling that produces legal or similarly significant effects on you. Decisions about account approval are reviewed by a human administrator. The platform uses simple matching logic (such as comparing your name and email to the X Games athlete allowlist) to assist administrators, but no automated decision is final without human review.
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page and notify active members via email if the changes are material.
For any privacy-related questions or requests:
X Games Legends Portal