Privacy Policy

The short version

We collect what we need to run conventions and nothing we don't. You go by your chosen name almost everywhere. We don't sell your data, and we don't run advertising trackers. The conventions you join see the information you give them — that's the point of joining — and nobody else does.

Names, and our stance on them

RallyPoint identifies you by your username and display name — the name you choose. That's what appears on your badge, in event signups, and anywhere other people see you.

Legal names are collected only where a convention genuinely needs them, such as verifying identity at badge pickup or processing a payment. When a legal name is collected, it is masked by default in organizer tools and revealed only deliberately, one record at a time, for those specific purposes. It is never shown publicly. If the name you use is not the name on your documents, the name you use is the one we treat as yours.

What we collect

• Account information — email address, username, and display name, managed through our authentication provider. Sign-in credentials are handled by that provider and never stored by RallyPoint.
• Convention activity — badges you hold, events you sign up for, merch you reserve, and applications you submit (volunteer, sponsor, exhibitor), including answers to questions the convention defines.
• Purchase records — what you bought or were granted, when, and for how much. Conventions need books that balance; those records are the ledger. Card numbers are handled by a payment processor when payments are live and never touch RallyPoint's servers.

Who sees what

When you register for a convention, apply to volunteer, or exhibit, the organizers of that convention see the information you submitted to them. They see your display name and email for the practical business of running their event. They do not see your activity at other conventions.

We share data with the service providers required to operate the platform — authentication, database hosting, image storage, and payment processing — each bound to use it only to provide their service. We do not sell personal information, and we do not share it with advertisers or data brokers.

Retention and deletion

You can ask us to delete your account and personal information. Some records survive deletion where they must: a convention's financial ledger is an audit record, so purchase rows are retained with your identifying details removed rather than erased outright.

Children

RallyPoint accounts are for people 13 and older. Conventions welcome attendees of all ages, but the account holder — the person registering — must meet the age requirement.

Changes and contact

When this policy changes, the update lands on this page with a new date. Questions or deletion requests: support@rallypoint.events.