Privacy policy

A clear summary of what we collect and why.

Effective date: January 29, 2026

This Privacy Policy describes how Tag My Race (“TMR,” “we,” “us,” or “our”) collects, uses, shares, and safeguards personal information in connection with our websites, mobile properties, and event photography services (collectively, the “Services”). By using the Services, you consent to the practices described below.

Information we collect

We collect information in the following categories:

  • Account and profile data: name, email address, phone number, organization name, password, role, and any preferences you set within your dashboard.
  • Event and gallery content: photographs, videos, course maps, sponsor assets, bib lists, finisher data, and other media you upload. When we ingest photos taken in public spaces, they may contain images of race participants, spectators, or bystanders, including their likeness, bib numbers, and any information printed on apparel or signage.
  • Automatically collected data: IP address, device identifiers, browser type, pages viewed, referring/exit URLs, timestamps, and cookie or pixel data used for authentication, analytics, and fraud prevention.
  • Communications: messages you send to our support team, comments in collaboration tools, or responses to surveys and marketing campaigns.
  • Payment and billing information: limited billing metadata routed through our payment processors (we do not store full credit card numbers on our servers).

How we use information

We use personal information to:

  • Operate, maintain, and improve the Services, including photo tagging, search, download, and sharing tools.
  • Authenticate users, prevent unauthorized access, and detect fraud or abuse.
  • Process transactions, subscriptions, event credits, and invoices.
  • Communicate with you about account activity, product updates, promotions, and customer support issues.
  • Comply with legal obligations, enforce our agreements, and protect the rights, property, or safety of TMR, our users, or the public.

Legal basis for processing (EEA/UK users)

Where applicable, we rely on contractual necessity, legitimate interests, consent (for marketing or certain cookies), and legal obligations to process data. You may withdraw consent at any time without affecting prior processing.

Sharing and disclosure

We share information only as necessary to provide the Services:

  • With event organizers, team members, and authorized collaborators you invite into your dashboard.
  • With third-party processors such as hosting providers, analytics services, payment gateways, email platforms, and photo-recognition vendors that help deliver specific features (e.g., bib tagging).
  • With law enforcement or regulators when required by law, subpoena, or to protect vital interests.
  • In connection with a merger, acquisition, or sale of all or part of our business, subject to customary confidentiality protections.

We do not sell personal information for monetary consideration.

Photos captured in public spaces

Race organizers upload media captured at public or semi-public events. Individuals may appear in these photos even if they have not created a TMR account. Organizers are responsible for obtaining appropriate permissions (including model releases, if required) under local laws and event policies. We provide tools for event owners to delete or restrict galleries upon request. If your likeness appears in a gallery and you would like it removed, please contact us using the information below.

Cookie and tracking technologies

We use first- and third-party cookies, pixels, and similar technologies for authentication, analytics, personalization, and marketing. You may adjust cookie preferences via your browser or, where available, an on-site consent manager. Blocking cookies may impact certain features.

Data retention

We retain account information as long as your organization is active plus a reasonable backup period. Event media, galleries, and derived metadata (bib tags, annotations) follow the retention schedule set by your event owner. We may anonymize or aggregate data for statistical reporting. If a gallery is trashed or an account is closed, we delete or archive related content within a commercially reasonable timeframe unless law requires otherwise.

Your rights and choices

Depending on your jurisdiction, you may have the right to:

  • Access, correct, or delete personal information we maintain about you.
  • Opt out of marketing communications (use the unsubscribe link or contact us).
  • Object to or restrict processing, and request data portability.
  • Appeal decisions or lodge a complaint with your supervisory authority.

Submit privacy requests via support@tagmyrace.com or our contact form. We may verify your identity before fulfilling certain requests.

Children

Our Services are designed for event organizers and adult participants. We do not knowingly collect personal information from children under 13 (or applicable age of consent) without appropriate parental consent. If you believe a child provided us information, please notify us and we will delete it.

Security

We employ administrative, technical, and physical safeguards to protect information, including encryption, access controls, audit logging, and secure hosting environments. No method of transmission or storage is 100% secure, so we encourage users to maintain strong passwords and enable multi-factor authentication when available.

International transfers

We operate in the United States and may store or process data in other countries. When we transfer personal information from the EEA/UK or other regions with data protection laws, we rely on adequacy decisions, standard contractual clauses, or other lawful mechanisms.

Updates to this policy

We may modify this Privacy Policy from time to time. Changes become effective when posted. We will notify you of material updates via email or dashboard alerts. Continued use of the Services after an update constitutes acceptance.

Contact us

tagmyrace.com
Email: brad@tagmyrace.com