Privacy Policy

Last updated: November 2026

This policy covers the St. Thomas Aquinas Robotics Team 1307 website (1307robosaints.github.io) and the 1307scout scouting app that lives on it (Scout, Team Database, and the Staff Portal). It explains what we collect, why, and how to reach us about it. It does not cover other FIRST Robotics Competition teams' websites, or the sites of the third-party services we link to below.

Who runs this site

The site and 1307scout are built and maintained by Daniel Lowry, a mentor for St. Thomas Aquinas Robotics Team 1307, in Dover, NH. Questions about this policy or your data can go to robotics@stalux.org or through the Contact page (check "Website support" or "1307scout support").

Information you give us directly

Contact form: your name, email address, an optional phone number, the topic(s) you check, and your message. This is sent, using the EmailJS service, to the team volunteers responsible for that topic (see Third-party services below) and a copy is sent back to the email address you gave us.
1307scout account: your name, plus a phone number if you add one on the My Account page, which staff can use to reach you. If you sign in to Scout, the Team Database, or the Staff Portal, your email address and authentication info are stored by our database provider, Supabase. Students generally sign in with their school (@stalux.org) email; mentors and approved guests can be granted access with another email address by a staff member.
Scouting data: team members using 1307scout record match statistics, match schedules, pit-interview notes, and optionally a photo of the robot, about other FRC teams at competitions. This is public competition information about robots and team performance — not personal information about the students on those teams. A photo you submit is stored in our file storage and is publicly viewable by its link, the same way a photo posted to the team's own social media would be.
Match flag reviews: on the Match Flags page, team members can mark a flagged match as fine, fixed, or needing a rescout, with an optional note. We record who marked it and when.
Match strategy plans: on the Match Strategy page, team members place robots and draw a plan for a match. Each plan is saved with its match so the team can review it later, and we record who last changed it and when.
Match video: a program on a team laptop reads publicly posted FRC match videos to estimate where each robot drove and what it scored. Only those numbers about robots are saved to 1307scout, never images. Downloaded videos stay on that laptop and are used only for the team's scouting, never republished.

Information collected automatically

We don't run any analytics or advertising trackers on this site. The site is hosted on GitHub Pages, which (like any web host) may log basic request information such as your IP address and browser type for its own operation and security — that's governed by GitHub's own privacy statement, not this one.

A few small things are kept only in your own browser (never sent to us unless you take the action described):

Your Supabase sign-in session, so you don't have to log in on every visit.
A short-lived "draft" copy of a match entry if you submit it while offline — it's kept on your device only until your connection comes back, then it's sent and deleted locally.
A share code, briefly remembered while you're redirected through the sign-in page.
The team numbers you've picked in the Alliance View, until you remove them.
A field picture you chose on Match Strategy, and plans for a custom line-up. Plans for a real match are saved to our database for the team instead, and a copy stays in your browser only until it has been saved.

How we use this information

To answer your message and route it to the right person on the team.
To let signed-in team members use Scout, the Team Database, and (for staff) the Portal.
To let guests holding a share code view the specific slice of scouting data it grants.
To keep historical scouting and competition records for the team's own strategy use.

We do not sell, rent, or trade your information, and we don't use it for advertising.

Who can see what

1307scout has four access levels, set by a staff member:

Staff (mentors with admin rights) — can see and manage everything in 1307scout.
Mentor and Student — can scout matches/pits and view team data; students generally only edit the match entries they personally scouted.
Guest — signed in but no scouting access; can only view data through a specific share code a staff member created.

Third-party services we use

Each of these processes a limited slice of the information above under its own privacy policy:

Supabase — hosts our database, accounts, and uploaded photos.
EmailJS — delivers contact-form emails from your browser to our team.
hCaptcha — checks that sign-in and account forms are used by a person. It receives technical information about your browser and device when you use those forms.
Google — handles sign-in if you choose "Continue with Google", and shows the map on the Contact page, which loads from Google when you open that page.
FIRST FRC Events API and The Blue Alliance — public competition results we display; we don't send them any of your personal information.
YouTube — hosts the public match videos the team's vision program downloads. Nothing about you is sent to it.
GitHub Pages — hosts this website.
Google Fonts, Font Awesome, and the Supabase, EmailJS, and QR code libraries we load from cdnjs.cloudflare.com and cdn.jsdelivr.net — these serve static font and script files and, as far as we configure them, don't track you.

Children's privacy

Team 1307 is a high school club, so some account holders are minors. We collect only what's needed to run the team and the scouting app — a school or parent-approved email address, and the competition notes described above. We don't knowingly collect personal information from children for any purpose beyond that. A parent or guardian who wants to review, correct, or delete a student's account information can contact us at the address above.

How long we keep information

Scouting and competition records are kept indefinitely as part of the team's institutional history, the same way old match videos or spreadsheets would be, unless the account that entered them is banned or deleted. Account information is kept while your account is active. You can delete your own account at any time, or ask us to delete it or your personal information for you. When an account is banned or deleted, its scouting entries, pit entries, match flag reviews and photos are removed; a pit entry a teammate has since edited stays, because it counts as theirs. Our staff-only audit log keeps a record of removed entries, including their contents, as a history of changes to the data. Audit log records are deleted after six months. Deleting a scouting or pit entry, or replacing its photo, also deletes the photo file, though cached copies can take up to an hour or so to clear. Incorrect share-code attempts are recorded against your account for about ten minutes to limit guessing, then deleted.

Your choices

Ask us to see, correct, or delete the personal information we hold about you.
Delete your own account from the My Account page at any time. This also removes the scouting entries, pit entries, match flag reviews and photos you entered.
Ask a staff member to sign you out of every device, or to ban or delete your account.
Decline to use the contact form or 1307scout — the rest of the site needs no account.

Security

Access to 1307scout's data is enforced in our database with row-level security rules tied to your access level, not just by hiding buttons in the page. No system is perfectly secure, but we don't store payment information, and we keep the data we collect to what's described above.

Changes to this policy

If this policy changes, we'll update the date at the top of this page. Significant changes will be noted on the site.

Contact

robotics@stalux.org, or the Contact page.