Overview
This privacy policy describes how Secondslide (operated by CLNC Sports LLC) collects, uses, and shares information from visitors to secondslide.io and through Secondslide MCP, our read-only connector for ChatGPT. The connector section below covers linking a parent account and sharing authorized parent records with ChatGPT. The website sections describe visits to this marketing site, including our support and legal pages. The policies presented in the relevant Secondslide portal or registration service continue to govern the underlying account, registration, order, and payment services.
Secondslide MCP privacy · Connector support · Connector terms
Secondslide MCP: scope and information used
Secondslide MCP is currently a limited pilot. It lets an authorized parent or guardian ask ChatGPT about registrations, schedules, and announcements available to their Secondslide account. Connecting does not give access to every record in a program or to other families’ accounts.
When ChatGPT calls the connector, we receive the tool request, authorization information, and request parameters such as a player filter, date range, and page size. We use these to check access and retrieve the requested records. The connector has no tool for retrieving your ChatGPT conversation history.
The results sent to ChatGPT can contain:
- Registration and player identifiers, player names, program, team, season, and registration status.
- Event identifiers, associated players, event titles and types, start and end times, time zones, locations, and status.
- Announcement identifiers, associated players, titles, message text, publication times, program, and team.
- A retrieval timestamp and pagination information.
The tools do not provide payment details, financial summaries, birth-date fields, home-address fields, medical or identity documents, waivers, internal notes, or attachment downloads. Announcement text and event titles or locations may nevertheless contain personal information supplied by a program. The connector does not open links or download attachments within announcements.
Connecting your account and WorkOS
You sign in with your existing Secondslide parent account on the Secondslide connection page and approve read-only access. Secondslide checks your credentials with its account service in Xano. The connector uses the resulting account session to link the connection; it does not retain your password or normal account session for later tool calls, or send them to ChatGPT or WorkOS.
WorkOS provides the assistant authorization and consent flow. We send WorkOS your parent-account email address, an external account identifier, and connection and consent information. WorkOS creates or updates an authorization identity and issues credentials used by the connected assistant. The registration, schedule, and announcement results are returned through Secondslide to ChatGPT; they are not sent to WorkOS as part of that authorization exchange.
Secondslide uses Xano for account and program data and connection permissions, and Railway to host the connector. These services process information needed to operate the connection. Connection records include account and connection identifiers, permissions, authorization-provider and client identifiers, and activation, expiry, and revocation information. Browser transaction records and cookies help secure connection and disconnection requests.
Data shared with ChatGPT
When you authorize and use Secondslide MCP, the returned records are shared with OpenAI, the provider of ChatGPT, to answer your requests. Those results may include information about children associated with your parent account. Only connect an account whose information you are authorized to share.
OpenAI’s terms, privacy policies, and your ChatGPT account or workspace settings govern its handling of information it receives, including conversation retention and any use for model improvement. Review OpenAI’s plugin guidance and your ChatGPT data controls before connecting. Secondslide does not set ChatGPT’s retention or model-training choices for you.
Connector storage and retention
The connector retrieves authorized records when a tool is called. It does not keep a separate copy of the returned registration, schedule, or announcement records, store your full ChatGPT prompts, or use tool requests or results to train a Secondslide model. The underlying account and program records remain in the applicable Secondslide service under its own policies.
We keep an active connector permission record while your connection can be used. When a connection is revoked or expires, we generally remove its permission record from the live connector database within 91 days. One-time browser connection records expire after 10 minutes and are normally removed from the live transaction database within approximately 70 minutes. Replay-prevention identifiers for signed tool requests are normally removed approximately one hour after they expire. These records support account linking, access checks, and abuse prevention; they do not contain copies of the tool results.
Connector application diagnostics record a failed connection stage and, when available, an upstream HTTP status. They do not include passwords, tokens, parent identifiers, full prompts, or tool results. Hosting logs are retained for up to 90 days under the hosting provider's applicable plan. Routine backup copies may remain after live records are removed until the relevant backup cycle ends. WorkOS separately maintains authorization identities, consent, credentials, and its security records while needed to provide the authorization service and under its applicable retention terms. Disconnecting blocks future Secondslide reads immediately, but it does not by itself erase those provider records or results already received by ChatGPT.
We may keep specific records longer when reasonably necessary to investigate a security incident, resolve a dispute, or meet a legal obligation, and limit their use to that purpose. For access or deletion questions about records we control, contact hello@secondslide.io. We will update this policy before introducing optional feedback collection or broader tool-use analytics.
Disconnecting and account requests
To stop future reads through your current parent connector connections, use Manage Secondslide MCP access and sign in with your Secondslide parent account. This control revokes all of that account’s current parent connector connections. After successful revocation, subsequent tool requests through those connections are denied, including requests using refreshed authorization credentials.
You can also remove the connection in ChatGPT. Secondslide’s disconnect control does not delete prior ChatGPT conversations or results, delete your Secondslide account, or cancel a registration or payment. It does not revoke WorkOS-issued credentials themselves; the revoked Secondslide permission blocks their access to parent records. Connecting again requires a new authorization flow.
For access, correction, or deletion requests concerning information Secondslide holds, email hello@secondslide.io. Requests are subject to applicable law and verification of your identity and authority over the information. The connector has no account-editing, password-reset, or account-deletion tools. Use the applicable Secondslide account controls or contact support. Use ChatGPT’s controls for conversations and other information held there.
Website analytics
This website collects personal data to power our site analytics, including:
- Information about your browser, network, and device
- Web pages you visited prior to coming to this website
- Your IP address
This information may also include details about your use of this website, including:
- Clicks
- Internal links
- Pages visited
- Scrolling
- Searches
- Timestamps
We share this information with Google Analytics, Microsoft Clarity, and Vercel Web Analytics, our website analytics providers, to learn about site traffic and activity. Microsoft Clarity helps us understand how visitors interact with the site through tools like heatmaps and session recordings. Vercel Web Analytics is provided by our hosting platform and is designed to collect aggregated, cookieless traffic statistics. We also use Google Analytics' advertising features (including Google Signals) and link this data with Google Ads so we can measure our advertising and reach people who have visited this site — a use that some U.S. state privacy laws consider "sharing" personal information for cross-context behavioral advertising. As described under Advertising below, we honor the Global Privacy Control signal: if your browser broadcasts a do-not-sell-or-share preference, Microsoft Clarity does not load and these Google advertising features are turned off for your visit, though basic analytics measurement still occurs.
Advertising
This website uses the Meta Pixel, an advertising technology provided by Meta Platforms, Inc. (the company behind Facebook and Instagram). The pixel collects information about your visit — such as your browser, device, IP address, and the pages you view — and shares it with Meta so we can measure the performance of our advertising and reach people who have visited this site. Under some U.S. state privacy laws this is considered "sharing" personal information for cross-context behavioral advertising. We use Google Ads for advertising in the same way, as described under Analytics above.
We honor the Global Privacy Control (GPC) signal: if your browser broadcasts a do-not-sell-or-share preference, the Meta Pixel does not load and Google's advertising features are disabled, so no information is shared for advertising purposes. You can enable GPC through a supported browser or extension. You may also opt out by adjusting your browser's cookie settings, or through the ad-preference controls in your Meta and Google accounts.
Web Forms
When you submit information to this website via webform — for example, the referral form on our /referral page — we collect the data requested in the webform in order to track and respond to your submissions. We share this information with Jotform, our form-hosting provider, so they can collect submissions on our behalf.
Scheduling
When you book an appointment on our /talk or booking pages, we collect personal information from you to complete the booking. We may collect information like your:
- Name
- Email address
- Phone number
- Details relating to your appointment
We share this information with Roam, our scheduling service provider, so that they can provide online booking services to us.
Cookies
This website uses cookies and similar technologies, which are small files or pieces of text that download to a device when a visitor accesses a website or app.
- Functional and required cookies are always used, which allow our hosting platform to securely serve this website to you.
- Analytics and performance cookies are used on this website to understand site traffic and activity, as described above. These cookies may be set by Google Analytics and Microsoft Clarity when you visit the site. You can opt out at any time by adjusting your browser's cookie settings or by installing Google's Analytics opt-out browser add-on. If your browser broadcasts a Global Privacy Control opt-out signal, Microsoft Clarity does not load.
- Advertising cookies are used to measure and improve our advertising, as described above. These are set by the Meta Pixel and by Google Analytics' advertising features. If your browser broadcasts a Global Privacy Control opt-out signal, the Meta Pixel does not load and Google's advertising features are disabled; you can otherwise opt out through your browser's cookie settings.
Website Visitors
This website is hosted by Vercel. Vercel may collect personal data when you visit this website, including:
- Information about your browser, network, and device
- Web pages you visited prior to coming to this website
- Web pages you view while on this website
- Your IP address
Our hosting provider needs this data to run this website, and to protect and improve its platform and services. We also use Vercel Web Analytics to understand aggregated page views, referrers, device information, and general location data for visitors to this website.
Emails
If you sign up to receive marketing communications from us, we may send you marketing emails, which you can unsubscribe from by clicking the link at the bottom of the email. We share your contact information with our email service providers so they can send these emails on our behalf.
If you become a customer through app.secondslide.io, we may also email you with messages about your account or order activity. The privacy practices for those transactional communications are described in the policy presented during sign-up at app.secondslide.io.
Fonts
This website uses font files from Google Fonts. To properly display this site to you, the servers where the font files are stored may receive personal information about you, including:
- Information about your browser, network, or device
- Your IP address
Customers and Order Data
This marketing website does not collect order or payment information. Customer accounts, order history, payment details, and shipping information are collected and managed by our customer portal at app.secondslide.io, and the privacy practices governing that data are presented to customers at sign-up there. Authorized parent registration information shared through Secondslide MCP is also covered by the connector section above.
Your Choices
You can ask us to access, update, or delete personal information we hold about you, subject to applicable law. You can also opt out of marketing emails using the unsubscribe link at the bottom of any marketing email we send. To opt out of advertising-related sharing, enable the Global Privacy Control signal in your browser — we honor it automatically — or adjust your browser's cookie settings.
Changes to This Policy
We may update this privacy policy from time to time. The "Last updated" date at the top of this page reflects when the most recent change was made. Continued use of this site after changes constitutes acceptance of the updated policy.
Contact
Questions about this privacy policy, or requests related to your personal information, should be sent to us at hello@secondslide.io.