Privacy Policy

Registration form: your school's name, address, city, province, postal code and phone, the principal's email, and the contact person's name, email and phone, plus the division and number of teams. This is school and adult staff information — we do not collect student or other minors' personal information through this site.

Contact form: your name, email address, and the subject and content of your message.

Merch orders: if you buy from the shop, your name, shipping address, email and phone are entered on Square's secure hosted checkout. Card details are handled entirely by Square and never reach our servers.

We do not require accounts, and we do not use advertising or cross-site tracking cookies.

To process and follow up on competition registrations, to respond to messages you send us, and to fulfil and confirm merch orders. We use your information only for the purpose you provided it.

Registration and contact submissions are delivered to the CRC inbox by Resend, our email provider (located in the United States). Merch payments and order details are processed by Square (also in the United States). Because these providers are in the U.S., your information is subject to U.S. law while they process it.

We do not sell your personal information, and we do not share it with anyone other than the service providers above and as required to run the competition.

We keep registration and contact information only as long as needed for the competition cycle it relates to — by default no longer than 24 months — and then delete it. Order records are retained by Square per its policy. See our internal retention runbook for details.

You may ask us to access, correct, or delete the personal information we hold about you. Email [email protected] and we will verify your identity and respond, normally within 30 days. Quebec residents have additional rights under Quebec's Law 25.

We use Cloudflare Web Analytics, which is privacy-first and sets no cookies and no cross-site identifiers. We use Cloudflare Turnstile to protect our forms from spam; it does not track you across sites. Embedded videos load only after you click and use YouTube's no-cookie mode.

The site is served over HTTPS, form submissions are protected against spam and abuse, and payment card data is handled solely by Square. No method of transmission is perfectly secure, but we take reasonable measures to protect your information.

We may update this policy from time to time; the date above reflects the latest version. Material changes will be posted on this page.

For any privacy question or request, contact us at [email protected].