Skip to content

Privacy

Lane4 HQ stores the account and team data the coach workspace needs. We do not sell roster data.

Account data includes name, email, authentication credentials, and team membership. Team data includes roster fields, meet lineups, results, workouts, attendance, and files you import or export.

Club teams may store USA Swimming IDs. Where SafeSport applies, training records gate access to minor contact and medical fields. Those fields are not shown to coaches who have not completed the required check. Storing a USA Swimming ID does not mean Lane4 HQ is certified or approved by USA Swimming.

Processors include our database, object storage, email, calendar sync, and billing providers. We keep data for as long as the team account exists, then delete or anonymize it when the account is closed, except where we must retain records for law or billing disputes.

Contact support if you need a copy of your team’s data or want an account deleted.

Product analytics

Lane4 uses PostHog to see how coaches use the product and when an export or import fails. Roster data is for minors, so each event is an allowlist. A value that is not on the list is dropped before it is sent. Analytics stays off when that app has no PostHog project token.

Every event is tagged with the app (web, admin, api, or desktop), the environment, and the release. Admin events also include internal so they can be filtered out of product dashboards.

  • signed_up, when a coach creates an account
  • team_created, when a coach creates a team
  • meet_created, when a meet is created
  • roster_imported, with the file format
  • entries_exported, with the file format
  • results_imported, with the file format
  • export_failed and import_failed, with the format and an error code

The format is one of hy3, cl2, sd3, sdif, csv, zip, ev3, hyv, xls, xlsx, pdf, or unknown. The error code is one of unauthorized, forbidden, not_found, validation, unsupported, or internal.

Page views on this site and in the coach workspace send the path only. The query string and the hash are removed. Session replay on those sites masks every input and all text. Autocapture is off, so a button labeled with a swimmer's name is not sent. The desktop app does not record sessions. Feature flags can be read by the apps. No flag currently changes product behavior.

The API sends a log for each request except health checks. The log has the request id, route, status, and duration. It does not include the request body. Exceptions send the stack and the error name, not the error message, plus the route and status for server failures. The desktop app holds events while it is offline and sends them when the connection returns. A crash report sends the source file's base name and the line number.

Lane4 does not send:

  • Coach or swimmer names, email addresses, or phone numbers
  • Birthdates, ages, or USA Swimming member IDs
  • Seed times, result times, or places
  • Request or response bodies
  • File contents, file names, meet names, or team names
  • Error messages, which often quote a swimmer
  • The page title, or search parameters on a page view

A person is identified by their Lane4 user id only. A team is grouped by team id only.