OffScript Mobile App Privacy Policy
1. Overview
This privacy policy describes the types of Information (as defined below) that OffScript, LLC (“OffScript,” “we,” “us,” and “our”) collects from you when you visit the OffScript mobile application (the “App”), and how we collect, use, maintain, protect, and disclose that Information.
Please read this Privacy Policy to understand our policies and practices regarding your Information and to understand how we will handle your Information. If you do not agree with our policies and practices, do not use the App. By accessing or using the App, you are agreeing to this Privacy Policy.
OffScript may change this Privacy Policy at any time, at its discretion. Your continued use of the App after we make changes is deemed to be acceptance of those changes, so please check the Privacy Policy periodically for updates.
This Privacy Policy is subject to and governed by the OffScript Terms of Service (“Terms”) available here. A term used in this Privacy Policy has the meaning given to it in the Terms, if defined there.
If you are located in the European Union, the European Economic Area, or Switzerland, please also read Section 13 of this Privacy Policy, which sets out the additional rights you have under the EU GDPR and the additional information you are entitled to receive.
2. The Types of Information That OffScript Collects About You, and How OffScript Collects Information About You
OffScript may collect two types of information from you when you visit the App: Personal Information and Non-Personal Information (collectively “Information”).
“Personal Information” refers to data by which you may be personally identified, such as name, phone number, email address, profile photos, payment information, and other information that you provide when registering. OffScript collects additional Personal Information from athletes that enable OffScript to perform its contracts with them and prepare tax forms, including social security numbers and Tax ID numbers.
“Non-Personal Information” means data that is about you that does not identify you specifically. If you do nothing during your visit to our App but browse and view content, we will gather and store information about your visit that does not identify you personally.
We collect Information:
Directly from you when you provide it to us.
From our service providers, such as our ordering platforms, our marketing platforms, and our electronic document platforms.
From other sources or third parties.
Through our communications with you.
Automatically as you navigate through the App.
Through analytics.
Information You Provide Directly toOffScript. The Information that you provide us directly through our App may be collected through the following means:
Information you provide by registering and creating a profile on the App.
Information that you provide when you subscribe to our mailing list.
Information that you provide by filling in forms on the App.
Information that you provide when you report a problem with the App.
Information that you provide in connection with an inquiry, including inquiries about registering or making purchasing through the App.
Records and copies of your correspondence (including email addresses), if you contact us.
Your responses to surveys.
Information that you provide when you complete a transaction through the App.
Information Automatically Collected from You. The Information that OffScript may automatically collect and store about you when you visit the App may include:
The location of your mobile device when you open the App.
The operating system you used.
The date and time you visited the App.
The pages you accessed on the App.
The website you visited prior to coming to the App.
The Internet Protocol Address, which is a numerical identifier used to direct internet traffic to you.
3. How OffScript Uses Information Collected About You, and the Purpose for the Collection and Use
We use Information that we collect about you or that you provide to us, including any Personal Information, for the following purposes:
To present our App and the App Content (as defined in the Terms) to you.
To provide you with the products or services that you request from us.
To provide customer support.
To carry out our obligations, enforce our rights, and facilitate the services arising from any contracts entered into between you and us, including for billing, collection, and tax requirements.
To notify you about changes to the App or any products we offer or provide through it.
To communicate with you regarding our products and services, including for marketing purposes by email and other means, unless you have opted out of receiving marketing communications.
To personalize your experience and our advertising to you.
To communicate with you regarding questions about our product and services.
In any other way we may describe when you provide the Information.
To fulfill any other purpose for which you provide it.
For any other purpose with your consent, including for marketing and advertising.
To improve the App and products offered through it.
App statistics are compiled into traffic reports, which help OffScript understand, anticipate, and respond to user needs. If we learn, for example, of heightened interest in certain aspects of the App, we are likely to highlight that information on the App home page. This Information helps us create a better overall experience for App users.
We will only retain your Personal Information for as long as reasonably necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements. We may retain your Personal Information for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.
To determine the appropriate retention period for Personal Information, we consider the amount, nature, and sensitivity of the Personal Information; the potential risk of harm from unauthorized use or disclosure of your Personal Information; the purposes for which we process your Personal Information and whether we can achieve those purposes through other means; and the applicable legal, regulatory, tax, accounting, or other requirements. In some circumstances, we will anonymize your Personal Information (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this Information indefinitely, without further notice to you.
4. How OffScript Protects Your Information
We have implemented measures designed to protect your Information from accidental loss and from unauthorized access, use, alteration, and disclosure. The internet is not completely secure however. Although we are working to protect your Information, we cannot guarantee the security of your Information either in transmission or when stored. We are not responsible for circumvention of any privacy settings or security measures contained on the App.
5. When OffScript Shares Your Information
We may use and disclose Non-Personal Information about our users without restriction. We may disclose Personal Information that we collect or you provide as described in this Privacy Policy:
To our subsidiaries and affiliates.
To contractors, service providers, and other third parties we use to support and facilitate our business, as described further below, including third-party payment facilitators.
To a buyer or other successor (potential or actual) in connection with a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of OffScript’s assets, including any related due diligence.
To fulfill the purpose for which you provide it.
For any other purpose disclosed by us when you provide the Information, including for marketing and advertising.
With your consent, including to other Users as necessary to provide services.
To comply with any court order, law, or legal process, including to respond to any government or regulatory request or for tax purposes.
To enforce or apply our Terms.
If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of OffScript or others.
OffScript does not sell your Personal Information.
6. Third Parties Providing Services On Our Behalf
We use third parties to help process and facilitate your purchases, host the App, design and operate the App features, and to perform administrative, analytics, and payment processing. Services third parties provide include providing information to OffScript about the use and viewing of the App. We may disclose your Information to these companies so they can carry out these services. These companies are bound by contractual obligations to keep Information confidential.
7. Information From Users Under 18
The OffScript App is for users 18 years of age or older. We do not knowingly collect personal data from anyone under 18. If we discover that we have collected personal data from a person under 18, we will delete it without undue delay and terminate the account. Parents or guardians who believe their child has provided personal data may contact us at contact@offscript.app.
8. Links to Other Websites and Services
We are not responsible for the practices employed by websites or services linked to or from the App, including the information or content contained therein. Our Privacy Policy does not apply to third party websites or services.
9. Do Not Track
Some browsers and apps incorporate a "Do Not Track" (“DNT”) feature that, when turned on, signals to websites and online services that you do not want to be tracked. At this time, the App does not respond to DNT signals.
10. Your Choices About Information
If you choose not to provide Information, you may be unable to access all or portions of the App. If you no longer wish to receive marketing or promotional communications from us, click on the “unsubscribe link” provided in such communications or send us an email at contact@offscript.app.
If you opt out of receiving marketing/promotional emails, we may still send you non-promotional emails, such as emails about your accounts or our ongoing business relations. Please report your concerns about collection or use of Personal Information through the App to contact@offscript.app.
11. Your California Privacy Rights
California's "Shine the Light" law (Civil Code Section § 1798.83) permits users of the App that are California residents to request certain information regarding OffScript’s disclosure of Personal Information to third parties for their direct marketing purposes. To make such a request, please contact OffScript at the email address included below.
12. Your United Kingdom Privacy Rights
This section applies solely to individuals located in the United Kingdom (“UK”). By accessing the App from the UK, you acknowledge that OffScript, LLC is a United States entity and that your information will be processed in the United States as a necessary part of providing the Services.
A. Why We Process Your Information (Lawful Basis)
OffScript, LLC processes your personal information under the following legal grounds provided by the UK GDPR and the Data (Use and Access) Act 2025:
To Provide Our Service (Contractual Necessity): We process your data (such as account details and transaction history) to fulfill our agreement with you. This includes the necessary transfer of data to our U.S. servers to power the App's features.
With Your Permission (Consent): For non-essential activities, like sending marketing emails or accessing your device's location. You can change your mind and withdraw this consent at any time in the App settings.
Our Business Interests (Legitimate Interests): To keep the App secure, prevent fraud, and analyze anonymized usage data to improve the experience, provided these do not outweigh your privacy rights.
Legal Requirements: Where we must keep records to comply with tax or financial laws.
B. Your Privacy Rights
Under UK law, you have specific rights regarding your data:
Access & Correction: You can request a copy of your data or ask us to fix any mistakes.
The Right to be Forgotten (Deletion): You can request that we delete your account and personal information.
In-App: OffScript offers this via the “Delete Account” entry in your account Settings in the App.
Via Email: If you cannot access the app or prefer to make a manual request, you may email us at contact@offscript.app. We will acknowledge your request within 30 days and delete your data as required by law.
Objecting to Use: You can tell us to stop using your data for marketing or ask us to limit how we use it.
Taking Your Data (Portability): You can ask for a digital file of the information you’ve given us.
C. Younger Users
The App is for users 18 years of age or older. We do not knowingly collect personal data from anyone under 18, in line with our minimum-age requirement.
D. How to Reach Us or the ICO
OffScript, LLC is a U.S.-based company. If you have questions regarding this section, please contact us at contact@offscript.app. You also have the right to complain to the UK Information Commissioner’s Office (ICO) at www.ico.org.uk.
13. Your Privacy Rights Under the EU GDPR (Sweden, Germany, and the wider EU/EEA)
A. Scope of this section
This Section 13 applies to you if you are located in the European Union (EU), the European Economic Area (EEA), or Switzerland when you use the App. It supplements the rest of this Privacy Policy. Where this Section 13 conflicts with another part of the Privacy Policy or the Terms of Service, this Section 13 governs for EU/EEA users.
B. Controller of your personal data
OffScript, LLC is the data controller for personal data we collect about you when you use the App. You can reach us at OffScript, LLC, 1714 Homes Ave, Ashland, Oregon 97520, United States, or by email at contact@offscript.app.
C. Privacy lead
Our privacy lead is Jasper Weatherby. You can contact him at jasper@offscript.app on any matter relating to the processing of your personal data, in addition to contacting us directly at contact@offscript.app.
D. Privacy contact and Data Protection Officer
OffScript is not, at this time, required to appoint a Data Protection Officer under Article 37(1) GDPR or Section 38 of the German Federal Data Protection Act (BDSG). Privacy matters are actively managed by our management team. You can reach us with any privacy question or request by emailing contact@offscript.app. We will acknowledge your request without undue delay and respond within one calendar month of receipt, in line with Article 12(3) GDPR. We may extend the response window by two further months for complex or numerous requests and will tell you within the first month if we do.
E. Categories of personal data we process about fans
We process the following categories of personal data about EU/EEA fans:
Identity and account data: name, username, password (hashed), date of account creation
Contact data: email address, mobile phone number
Profile data: profile photo, biographical information you choose to provide
Transaction data: payment instrument metadata (we do not store full card numbers), billing address, transaction history, purchase records
Communications data: the content of messages you send to and receive from athletes through the App, including any media attachments
Device and technical data: IP address, device type, operating system and version, App version, language, time zone, crash logs
Usage data: pages and features used, session timestamps, in-App actions
Location data: approximate or precise device location, only where you have switched it on in your OS settings
Marketing data: your marketing-consent preferences and your subscription status
We do not knowingly collect special categories of personal data (Article 9 GDPR), and you should not provide them through the App.
F. Sources of your personal data
Directly from you, when you register, edit your profile, message an athlete, complete a purchase, or contact us
Automatically, when you use the App (technical and usage data)
From our service providers, including our payment processor and the Apple App Store
From the athletes you communicate with, to the extent they reply to you or report a concern
G. Why we process your personal data, and the legal basis under Article 6 GDPR
Performance of a contract — Article 6(1)(b). We rely on contract performance to provide your account and the messaging functionality, deliver in-App purchases and process payments, and provide customer support tied to your account. If you do not provide the data marked as required at registration or checkout, we cannot provide the App or fulfil purchases.
Compliance with a legal obligation — Article 6(1)(c). We rely on legal obligation to retain transaction and tax records (U.S. federal tax law and parallel Swedish and German bookkeeping rules under the Bokföringslagen and HGB §257), to respond to lawful requests from authorities, and to comply with our reporting obligations.
Your consent — Article 6(1)(a). We rely on your consent to send you marketing communications, access your device's precise location when a feature requires it, load non-essential analytics, attribution, and advertising SDKs in the App (in conjunction with §25 of the German TDDDG and the ePrivacy Directive 2002/58/EC), and send push notifications. You can withdraw consent at any time in your in-App settings or by emailing contact@offscript.app; withdrawal does not affect the lawfulness of processing carried out before you withdrew.
Our legitimate interests — Article 6(1)(f). We rely on legitimate interests to keep the App secure and prevent fraud, to improve the App through aggregated and pseudonymised analytics, and to defend, establish, or exercise legal claims. You have the right to object; see Section 13.J. We have carried out a balancing assessment and will share a summary with you on request.
We do not engage in automated decision-making producing legal or similarly significant effects within the meaning of Article 22 GDPR. We do not profile fans for behavioral advertising.
H. Recipients of your personal data
Cloud hosting and database: Salesforce, Inc. (operator of Heroku) and Amazon Web Services, Inc., both based in the United States
Payment processing: our payment processor and, for in-App purchases made through the Apple App Store, Apple Inc. and Apple Distribution International Ltd. (Ireland)
Customer support and email delivery providers
Mobile app analytics and crash-reporting providers (loaded only after consent where required)
Athletes located in the United States and Canada — the messages you send to an athlete are necessarily disclosed to that athlete to provide the service
Professional advisers (legal, accounting, tax) under duties of confidentiality
A buyer or successor in a merger, acquisition, restructuring, or sale of all or part of our business
Public authorities, where required by law or where necessary to protect the rights, property, or safety of OffScript, our users, or others
We do not sell your personal data, and we do not share it for cross-context behavioral advertising.
I.International transfers of your personal data (Chapter V GDPR)
We transfer personal data from the EU/EEA to the United States to provide the App. The U.S.does not have a general EU adequacy decision; instead, transfers are made underthe following Chapter V mechanisms:
EU-U.S. Data Privacy Framework. We transfer personal data to U.S. recipients that have self-certified to the EU-U.S. Data Privacy Framework under Commission Implementing Decision (EU) 2023/1795. Salesforce, Inc. (which operates Heroku) and Amazon Web Services, Inc. each hold an active DPF certification, verifiable at https://www.dataprivacyframework.gov.
Standard Contractual Clauses. Where DPF coverage is not available, we rely on the Module 2 (controller-to-processor) Standard Contractual Clauses adopted by Commission Implementing Decision (EU) 2021/914,supplemented by technical and organizational measures including encryption intransit and at rest, access control, and minimum-necessary processing.
Transfer Impact Assessment. We have documented an assessment of U.S. legal conditions affecting the transfer (including U.S.surveillance laws and the redress mechanisms under Executive Order 14086) and the supplementary measures we apply. A summary is available on request from contact@offscript.app.
J. Your rights under the EU GDPR
You have the following rights with respect to your personal data. You can exercise any of them by emailing contact@offscript.app or, where indicated, in the App settings. You will not pay a fee to exercise these rights unless your request is manifestly unfounded or excessive.
Access (Article 15) — obtain confirmation that we process your data, a copy of it, and the information required by Article 15.
Rectification (Article 16) — have inaccurate data corrected and incomplete data completed. You can correct most fields yourself in your in-App profile.
Erasure (Article 17) — ask us to delete your personal data. You can delete your account in the App at Settings → Delete Account, or by emailing contact@offscript.app. We will retain limited records as needed under Article 17(3).
Restriction (Article 18) — ask us to restrict our processing in the circumstances listed in Article 18.
Data portability (Article 20) — receive data we hold about you in a structured, commonly used, machine-readable format, and have it transmitted to another controller where technically feasible.
Object (Article 21) — object to processing based on our legitimate interests. Your right to object to direct marketing is absolute and we will stop on request.
Not be subject to automated decision-making (Article 22) — as stated in Section 13.G, we do not make such decisions about you.
Withdraw consent (Article 7(3)) — withdraw consent at any time without affecting the lawfulness of prior processing.
Lodge a complaint (Article 77) — lodge a complaint with the supervisory authority of your habitual residence, place of work, or the place where the alleged infringement occurred. We would appreciate the chance to address your concern first. The authorities most relevant to OffScript's current EU markets are:
Sweden — Integritetsskyddsmyndigheten (IMY), Box 8114, 104 20 Stockholm; imy@imy.se; www.imy.se
Germany — the data protection authority of your federal state (directory at www.bfdi.bund.de/EN/Service/Anschriften/Laender/Laender-node.html). Because OffScript has no establishment in Germany, complaints are usually handled by the authority of the federal state where you reside.
K. How long we keep your personal data
We keep your personal data only for as long as we need it for the purpose for which we collected it and to satisfy our legal, accounting, and reporting obligations. Indicative periods:
Account data — for the life of your account
Transaction and tax records — 7 years (U.S. taxretention and Swedish Bokföringslagen; German HGB §257 and AO §147 may extend this to 10 years)
Communications you have sent and received in the App — For as long as both sender and recipient have accounts
Marketing-consent records — Until you opt-out or contact us
Backups — Backups rotate out within 1 week of deletion from the primary database
L. Cookies and similar SDKs in the App
The App loads only essential SDKs by default. Before any non-essential SDK loads — analytics, attribution, or advertising — we will ask for your prior, specific, informed consent through an in-App prompt, in line with Article 5(3) of the ePrivacy Directive 2002/58/EC and §25 of the German TDDDG.
M. Children
The App is for users 18 years of age or older. We do not knowingly collect personal data from children under 18. If we become aware of such collection, we will delete the data and terminate the account.
N. Changes to this Section 13
We will give EU/EEA users at least 30 days' advance notice in the App or by email of any material change to this Section 13. Non-material changes take effect on posting.
14. How To Contact Us About This Privacy Policy
To ask questions about this Privacy Policy and our privacy practices, contact us at contact@offscript.app or by mail at:
OffScript, LLC
1714 Homes Ave
Ashland, Oregon 97520
Effective Date: June 15, 2026
