What we collect, and what we don't

Effective August 18, 2026

Two different things happen on this site

If you only join the waitlist, we collect your email address and nothing else. That part is covered in the next section.

If you buy a FallFest ticket, we collect a great deal more — your date of birth, your phone number, your emergency contact, your vehicle and license plate, and the name and date of birth of every passenger riding with you, including children. That is covered in Buying a FallFest ticket, below. Read it before you check out.

The waitlist

When you join the waitlist, we collect your email address. That's it. The signup form does not ask for your name, phone, or address.

We use it to send you updates about TougeNation events — announcements, ticket drops, schedule info. You opted in by submitting the form. We won't email you about anything else.

Buying a FallFest ticket

Checkout collects the following. Every field is required unless marked optional, and each one is listed with the reason we ask for it.

From you, the driver

First and last name — to find you at the check-in table and to put on your waiver.
Date of birth — you must be 18 or older on the day you sign to drive, and we check that before we take your money. It is also how staff look you up at the gate.
Email address — to send your confirmation, your receipt, and the sign-in link for your order page.
Phone number — so we can reach you on event day about a route change, a delay, or a problem with your car.
SMS opt-in (optional) — checkout shows a checkbox that, if left checked, opts you in to receive text messages from us about your booking (event-day updates, hold expiration, shipping tracking). Uncheck it and we will only use your phone number for a voice call in an emergency. We do not send marketing over SMS.
Mailing address — your ticket includes driver swag (shirt, banner, route card, stickers) that we ship to you before the event. This is the shipping address. We do not use it for anything else, and we do not mail you marketing.
Emergency contact name and phone — the person we call if you are hurt. Given that this event is driving on mountain roads with limited cell coverage and slow ambulance response, this is the field we most need to be correct.
Vehicle year, make, model, color, and license plate — so staff can identify your car in a 20-car pack, confirm you are the registered driver at the gate, and account for every vehicle on the route.

From each passenger you add

First and last name — for check-in and for their waiver.
Date of birth — this is not optional and it is not cosmetic. A passenger's age on the day the waiver is signed decides which legal document has to be signed for them: adults sign for themselves, anyone under 18 needs a parent or guardian to sign, and anyone under 13 additionally needs the COPPA consent addendum. We calculate the age ourselves from the date you enter — we do not take your word for whether someone is a minor. We measure age on the signing date rather than the event date because a signature by a minor is voidable as a matter of contract law, so someone who is 17 today but will be 18 by event day is still a minor when they sign.
Parent or legal guardian name, relationship, and phone — required for a minor passenger when the driver is not their guardian. This is who signed, and who we call.
Passenger or guardian email (only when someone else has to sign) — if a passenger is added after checkout and has to sign their own waiver later, or if a guardian has to sign for a minor whose driver is not their guardian, we ask for that person's email so we can send them a one-time link to sign. We use it for exactly that email and nothing else. Once the waiver is signed, the address is retained with the signature record but is not added to any list and never receives marketing.

Merch you add to the order

A driver ticket includes swag. Checkout also lets you add extras (passenger shirts, windshield banners, stickers, jet tags). We collect:

Shirt size for the driver — so we pack the right size in the pre-event shipment.
Shirt sizes and quantity for any add-on passenger shirts — same reason. Not tied to a specific passenger by name; it is a size count on your order.
Jet tag quantity — how many windshield tags to include, if any.

Merch selections travel with the order to Shippo (see processors below) so we can print the shipping label with the right box weight. Nothing about your merch selection is shared with sponsors or used for marketing.

Recorded automatically when you sign

When a waiver or the Code of Conduct is signed, we store the typed signature, the exact version of the document that was on screen, a fingerprint of its text, the timestamp, the IP address, and the browser user-agent. That is the audit trail proving who agreed to what and when. It is the point of an electronic signature, and we cannot drop it.

What we never see

Your card number. Payment is handled entirely inside Stripe's own form. Card details go from your browser to Stripe and never touch our servers or our database. We receive back only a payment confirmation and the amount.

Children under 13

A child under 13 can ride as a passenger. When that happens, we collect the child's full name and date of birth, and the name, relationship, and phone number of the parent or legal guardian who signs for them. Nothing else. We do not ask children for anything directly — a parent or guardian enters it, and a parent or guardian signs the COPPA consent addendum before checkout completes.

We use it for exactly three things: matching the child to the right booking at check-in, reaching a guardian in an emergency, and keeping the signature record. We do not email children. We do not build profiles. We do not disclose a child's information to anyone outside the processors listed below and, in a medical emergency, to responding medical personnel.

If you are the parent or legal guardian of a child in a booking, you can:

Ask to see everything we hold about your child.
Ask us to delete it.
Refuse any further collection. We will honor that — but it means the child cannot ride, because we cannot let an unidentified minor into a vehicle on a closed route without a signed consent on file.

Email contact@touge-nation.com from the address on the booking, or tell us the order number. We will answer within 10 business days. If we cannot confirm you are the guardian on the booking, we will ask you a question only the guardian could answer rather than hand a child's records to whoever emailed us.

How long we keep it

Waivers and ticketing records. A signed waiver is the document we would rely on if someone were injured and brought a claim, so we keep it for as long as that remains possible. We are not going to give you a fixed number here, because a deadline we picked arbitrarily is worse than an honest answer: if we promised to delete these in 90 days, we would be destroying our own evidence long before anyone's right to sue runs out.

Dates of birth are the exception, and they have hard rules. A date of birth is the most sensitive thing we collect, so it is the one thing we put real limits on:

18 or older on event day — we keep it. It is how we look you up at the gate.
13 to 17 — we keep it until they turn 21, then delete it. It stays past their 18th birthday on purpose: a minor's window to bring a claim does not start until they are an adult, and deleting the record before then would defeat the point of having it.
Under 13 — we never store it at all. We ask for it at checkout, use it in that moment to work out which waiver applies and whether a parent has to sign, and then discard it. We keep the child's age on event day, not their birthday. At the gate we find them through the driver's booking and check the name.

Payment records. Stripe keeps transaction records on its own schedule for tax and anti-fraud reasons, and we keep the amount, date, and order number for the same reason. That is the receipt, not the roster — no dates of birth, addresses, or passenger details.

Waitlist email — until you leave. We keep your email until you unsubscribe or ask us to delete it. There is no automatic purge, because there is no event date to count from.

You can ask us to delete your data. Email contact@touge-nation.com and we will, unless the record relates to a claim someone has made or is likely to make. Parents can do this for a child at any time.

How the 21st-birthday deletion actually happens: a scheduled database job runs every night at 03:00 UTC and clears the date of birth from any row whose retention date has passed. The rest of the record — name, guardian name, signature, and derived age at signing — stays, because that is the waiver evidence. If you want confirmation a specific date has been cleared, email us and we will confirm it in writing.

Who else touches your data

Six companies. All six are processors — they handle data to run this site for us, and none of them are permitted to use it for their own marketing.

Supabase — the database. Every field described above is stored there, plus the waitlist. Their policy: supabase.com/privacy.
Stripe — payment processing. Stripe receives your card details directly from your browser, plus the amount and an internal order reference. We deliberately do not send Stripe your name, email, date of birth, address, or anything about your passengers. Their policy: stripe.com/privacy.
Resend — email delivery. Receives the recipient email address and the contents of the message we send them (confirmation, receipt, one-time waiver signing link). Their policy: resend.com/legal/privacy-policy.
Shippo — shipping labels for driver swag. Receives the mailing address on your booking, the driver's full name, and the box weight/dimensions inferred from your merch selections. Nothing else — no date of birth, phone, waiver, or passenger information. Their policy: goshippo.com/privacy.
Upstash — rate limiting. When you interact with checkout or the check-in app, we record your IP address and a request timestamp in a short-lived key (deleted within minutes to a few hours) so we can throttle abuse — for example, blocking someone who tries to brute-force a promo code or a login. No name, email, or booking data is sent to Upstash. Their policy: upstash.com/trust/privacy.pdf.
Vercel — web hosting. Every request to this site passes through Vercel's edge network. Vercel records the request's IP address, user-agent, URL, and timestamp in its own operational logs (short retention, used to diagnose outages and detect abuse). We do not use Vercel Analytics or any behavioural tracking. Their policy: vercel.com/legal/privacy-policy.

On event day, TougeNation staff working the check-in table can see the roster: driver and passenger names, dates of birth, vehicle, and emergency contacts. That is the job. In a medical emergency we will give responding personnel whatever they ask for.

If your registration is covered by a partnership, that partner can see a limited roster in its private Partner Hub: your first name, last initial, and vehicle. Partners do not receive your email, phone number, date of birth, mailing address, emergency contact, passenger details, or waiver. We use this limited roster so the partner can track the registrations it sponsors.

What we don't do

We do not sell or rent your data. Not to anyone, not ever.
We do not share it with third parties for marketing. A partner funding your registration receives only the limited operational roster described above.
We do not send marketing to passengers. The only email a passenger or guardian will ever receive from us is a one-time waiver-signing link, and only when their signature has to be collected asynchronously (e.g. a passenger added after checkout, or a guardian who is not the driver). Everything else goes to the driver who made the booking.
We do not run advertising trackers and we do not set tracking cookies.
We do not use anything collected at checkout to build a marketing list. Buying a ticket does not sign you up for the waitlist.

Your rights

See what we have — email us and we'll send you everything tied to your order or your email address.
Correct it — a wrong date of birth is worth fixing before event day, because it decides which waiver is valid. Email us or use your order page.
Delete it — we'll remove it. Be aware that deleting your booking data before the event cancels your participation: we cannot run you on a route with no waiver on file, and ticket sales are non-refundable.
Unsubscribe — reply to any email with "unsubscribe" in the subject, or email us.

Requests go to contact@touge-nation.com. We answer within 10 business days.

Security

Data is stored in Supabase, encrypted in transit and at rest by them. The service key that can read the full ticketing tables is held on the server and is never exposed to your browser. Access to the full event roster is limited to the people running the event; partners can access only their limited roster. We are a small team, not a security organization — if you find a problem with this site, email contact@touge-nation.com and we will take it seriously.

Changes to this policy

If anything changes — new services, new data, new features — we'll update this page and bump the effective date at the top. We won't start doing something materially different with data we already hold without telling the people it belongs to first.

Contact

Privacy questions, data requests, COPPA parental requests, and anything else: contact@touge-nation.com.

← Back to TougeNation