Trust & security

Security at Sport Margin

Event organizers trust Sport Margin with operational and financial records. We design the product so access, storage, and sharing are deliberate.

Last updated: August 18, 2026

Account access

Accounts use Firebase Authentication. Keep your password private, use a unique password, and notify us through your account support channel if you suspect unauthorized access.

Data storage

Application records are stored using Firebase-backed data services. Access is scoped to the authenticated account in the production data model. Uploaded receipts, logos, and statements are handled through protected storage paths.

Transport and service controls

Production traffic should be served over HTTPS. Firebase Hosting, Authentication, Firestore, and Storage provide the platform controls used by the application. We limit access to the data needed for the requested operation and avoid exposing private API routes through the public marketing pages.

Your responsibilities

• Use a strong, unique password and protect devices where you are signed in.
• Review account access and exports before sharing them with venues, clients, accountants, or other organizers.
• Do not upload payment-card numbers, government identifiers, or sensitive personal information unless you have a lawful business need and appropriate safeguards.
• Maintain independent backups of records required for tax, accounting, or event operations.

Incident response

If we become aware of a confirmed security incident affecting customer information, we will investigate, take reasonable containment steps, and provide notices required by applicable law.

Reporting a vulnerability

Please use the support channel associated with your Sport Margin account to report suspected security issues. Include the affected page, a description of the issue, and safe reproduction steps. Do not include passwords, private records, or other sensitive data in a report.