Privacy Policy

Team Arm Wrestling Federation (TAWF) Version 1.3 · Effective October 14, 2026

This policy explains what personal information we collect on our three websites, why we collect it, who sees it, how long we keep it, and what you can ask us to do with it. It is written in plain language on purpose. If anything is unclear, write to us and we will explain.

1. Who we are

The Team Arm Wrestling Federation is operated by Table Monkeys Inc., a Canadian corporation, 30 Holly Street, Apt. 306, Toronto, Ontario M4S 3C2.

Our privacy officer is Jason Costantini. He is the person in charge of personal information at TAWF. Reach him at privacy@tawf.ca or by mail at the address above.

This policy covers:

www.tawf.ca, the public league site.
events.tawf.ca, the events platform where athletes hold an account, enter events and see results.
admin.tawf.ca, the staff console, which our staff use to run events.

It does not cover fans.tawf.ca. That site is run by TopFan under TopFan's own privacy policy. When you buy a ticket or merchandise there, TopFan collects your information, not us. We do not receive it.

2. What we collect and why

2.1 If you only visit www.tawf.ca

We collect almost nothing about you. We measure visits with Umami, a privacy-focused analytics service that does not use cookies and does not identify you. See section 7.

Videos on the site come from YouTube and load only when you click play. At that point YouTube's own policy applies.

2.2 If you hold an athlete account on events.tawf.ca

When you create an account or claim a profile we made for you from a team roster, we collect:

What	Why we need it
Your email address	To sign you in (we send a sign-in link, no password) and to email you about events you enter
Your first and last name, and a username	To identify you in the directory, on entry lists and in results
Your sex and date of birth	To place you in the right division and to know whether you are a minor on the day of an event
Your declared weight and preferred arm	To place you in a weight class before you are weighed in. Your declared weight is never shown publicly
Your mobile number and an emergency contact (a name and a phone number)	For your safety at an event. Staff use them only if something happens to you at the venue
Optional: a nickname, your club, your city, social media links, a photo	For your public profile. You choose whether to fill these in
Optional card details: a short bio, your height, a listed weight, your occupation, the year you started pulling and your jersey number	For your athlete card and your public profile. You choose whether to fill these in

Your listed weight is a different field from your declared weight: it is a number you choose to show on your card, and it stays empty unless you or our staff fill it in. If you were on a team roster published on www.tawf.ca before October 2026, we copied your card details from that roster into any of these fields you had left empty. We never replaced anything you had entered yourself. You can change or clear any of them on your profile at any time.

Your date of birth, declared weight, email, mobile and emergency contact are never shown publicly. Your weigh-in weight is part of the sport: during an event it is shown beside your name on the venue boards and in the broadcast while you are pulling (see section 3).

2.3 When you enter an event

We record which event and which divisions you entered, your weigh-in weight taken by staff on the day, whether your entry fee has been received, and every match you pull: who you faced, the score, the fouls, the result. The weigh-in weight is shown on the venue boards during your matches; it is not kept on your public profile afterwards.

When you sign the event waiver on the platform, we keep a signature record: your name and the personal details as they stood when you signed, the boxes you ticked, the time on our server and on your device, your IP address and the type of browser or device you used, and a fingerprint of the exact waiver text you saw. This record is evidence that you agreed to the waiver. It is kept for fifteen years and cannot be edited.

2.4 Photos

You may upload a photo. From it we make a public square headshot and, once our staff have styled it, an athlete card used on your profile, the venue boards and broadcasts. Until the styled version exists, cropped versions of the photo you uploaded are shown in its place on your profile and on the boards. The full original file is seen only by staff and is never published as uploaded.

2.5 Staff

If you are TAWF staff, we hold your email address and your role on the console. Staff actions on the console are logged with the staff member's email.

3. What is public

The events platform is a league record and part of it is public by design. Without signing in, anyone can see:

The athlete directory and each athlete's profile: name, username, nickname, team, club, city, photo, social links, the card details you have filled in (bio, height, listed weight, occupation, years pulling, jersey number), season placement and event history. The card details show on your profile on events.tawf.ca and on your team's page on www.tawf.ca.
Each event's page: the entry list (username and weight class), standings, results, and every match pulled, including fouls.
The venue boards and the broadcast, which during an event show each athlete's name, team, photo and weigh-in weight for the match on the table, and the results as they happen.

Results are permanent. Once an event is complete, its results stay on the event page, including after an athlete leaves the league. This is what a league record is.

Search engines and AI services. The public pages of www.tawf.ca and events.tawf.ca, including athlete profiles and results, can be read and listed by search engines such as Google and Bing, and read by AI services such as ChatGPT, Claude and Perplexity. This is deliberate: the league exists to give its athletes exposure. We ask these services not to list the profile of an athlete we know to be under 14. Once a service has read a page we do not control what it keeps; if you want a page removed from a search engine, write to privacy@tawf.ca and we will help.

4. Who sees your information

Our staff (the league's organizers and the operators running the tables) see everything in your account, including your date of birth, mobile and emergency contact, so they can run the event safely.
Venue and medical staff on the day of an event may be given your emergency contact if you are hurt.
Service providers that store and move data for us: Google (Firebase, which holds our database, files and sign-in) and Resend, which delivers our emails. They process your information on our instructions and under their own security terms.
Nobody else. We do not sell or rent your information. We do not share it with sponsors. As of the date of this policy, no team, partner or vendor in the United States or anywhere else receives athlete information from us. If that changes, we will update this policy first.

5. Where your information is stored

Our database, files and email service are hosted in the United States (Google's us-east4 region and Resend's servers). This means your personal information leaves Canada and, for Quebec residents, leaves Quebec. We rely on Google's and Resend's contractual commitments and security measures to protect it. We have assessed this transfer and consider the protection adequate for the information involved.

6. How long we keep it

What	How long
Your profile (name, contact details, photo, optional fields)	While your account is active. If you have not signed in for two seasons we may review the account and contact you
Your results and match records	Permanently. They are the league's record
The waiver signature record	Fifteen years from signing, as required to defend a legal claim
The original photo you uploaded	While your account is active, then deleted
Email delivery logs	Kept by Resend for a limited period under its terms
Visit counts (Umami)	Umami keeps raw visit data for two years. It never contained anything that identifies you

When you close your account, we remove your name, date of birth, contact details, email and photos from your profile and replace the name with "Withdrawn athlete". Your results rows and your signature record stay, because they are the league's record and a legal record respectively.

7. Cookies, analytics and tracking

On all three sites, we set no advertising or tracking cookies.

Sign-in storage. The events platform and the staff console use Firebase Authentication, which stores a sign-in token in your browser so you stay signed in. This is necessary for the site to work and is not used to track you.
Profile view counts. We count how many times each athlete's profile page is opened, as a number per day on our own servers. The count records nothing about who opened the page: no address, no cookie, no account. Only league staff see it.
Umami. We count page views, a few in-site actions (such as "an entry was completed" or "the sign-up form was sent"), how far down a page you read, and how fast pages load for you. Umami records the page address you visited (including campaign tags such as utm_source and the section you jumped to), the site that sent you, your country and region, and your browser, device and screen size. Umami sets no cookie, stores no IP address and cannot tell who you are. Before anything is sent on www.tawf.ca, we remove anything in the page address that could identify you, such as an email address or a name. A public athlete page is recorded by its address, which names the athlete, not you.
Live page. The www.tawf.ca live page keeps one value in your browser's session storage to remember whether you have closed a banner. It contains no personal information and is gone when you close the browser.

8. Email

We email you about what you do. A sign-in link when you ask for one, a receipt when you enter an event, a copy of the waiver you signed, a notice when staff change your entry, your results when an event is complete. These emails are part of the service and need no separate consent. Each one says who sent it.
We do not send marketing email today. If we start a newsletter or event announcements, we will ask for your consent first, on a form that says what you are signing up for, and every such email will carry an unsubscribe link and our mailing address, as Canadian anti-spam law requires. You can withdraw that consent at any time.

9. Minors

You must be 14 or older to hold an account on events.tawf.ca. The account setup refuses a date of birth under 14.
An athlete under 14 can still compete. A parent or guardian registers the athlete at the event desk, in person, and signs the consent on paper. We then hold the same information listed in section 2 for that athlete, entered by our staff, and the athlete's results are published like anyone else's.
An athlete aged 14 to 17 may hold their own account. Staff see a flag that the athlete is a minor on the day of an event, and the event waiver for a minor is signed on paper by a parent or guardian at the venue. We do not store any information about the parent or guardian on the platform.

10. Your rights

You can ask us to:

See the personal information we hold about you. Most of it is on your profile page already.
Correct it. You can edit your own profile at any time; staff can correct the rest.
Withdraw consent for anything optional, such as your photo, your club or your social links, by removing them from your profile.
Close your account. We will anonymise your profile as described in section 6. We cannot delete your results, because they are the league's record, and we cannot delete the signature record, because it is a legal record.
Stop email. Transactional emails stop when your account closes. Marketing email, if it ever exists, stops when you unsubscribe.
Quebec residents may also ask us to stop spreading a piece of information or to de-index it where the law provides.

Write to privacy@tawf.ca. We answer within thirty days. If you are not satisfied with our answer, you may complain to the Office of the Privacy Commissioner of Canada or, in Quebec, to the Commission d'accès à l'information.

11. Security

All writes to our database go through our own servers, never directly from a browser. Only staff with a named role can open the console. Staff sign in with a link sent to their address; there are no shared passwords. Our development work runs on a separate test project that never holds real athlete data or production keys.

12. If something goes wrong

If personal information is lost, stolen or seen by someone who should not have seen it, we record the incident, assess the risk, and, where there is a real risk of serious harm, notify the people affected and the Privacy Commissioner as the law requires.

13. Changes to this policy

The version and effective date are at the top of this page. If we make a change that matters to you, such as sharing information with someone new or collecting something new, the events platform will show you the change the next time you sign in, and we will not apply it to information already collected without asking.

14. Contact

Table Monkeys Inc., operating as the Team Arm Wrestling Federation 30 Holly Street, Apt. 306, Toronto, Ontario M4S 3C2 Privacy officer: Jason Costantini, privacy@tawf.ca