Effective: October 20, 2026
X-Out 300, operated by Jason Frymier, uses information provided through xout300.com to administer competitors, clubs, sanctioned matches, scoring, billing, website accounts, and administrative communications.
Depending on how you use X-Out 300, we may collect names, contact information, account information, competitor and club records, match and scoring information, billing-related records, administrative submissions, IP/security logs, and mobile phone numbers. We use this information to operate X-Out 300, maintain records, process requests, secure accounts, provide support, and send requested operational communications.
X-Out 300 uses a single Google account authorized by an X-Out 300 administrator to send operational messages from the organization. Competitors and club directors do not need to authorize their personal Gmail accounts to use X-Out 300.
X-Out 300 requests https://www.googleapis.com/auth/gmail.send to send transactional and administrative emails, including invoices, billing communications, account approval or rejection notices, and other operational notices generated by X-Out 300 workflows. OAuth sign-in also requests the openid and email scopes to identify the connected sending account. The Gmail sending permission does not grant access to read, modify, or delete existing mailbox messages.
X-Out 300 protects Gmail authorization data using these safeguards:
Google account information and OAuth credentials are used to identify the connected organizational sender and provide the authorized email-sending functionality. X-Out 300 does not sell Google user data, use it for targeted advertising, or disclose Google authorization credentials to advertisers. The Gmail API and necessary hosting infrastructure process information to provide this functionality.
The encrypted refresh token and connected sender address remain stored while the organizational Gmail connection is active. When an administrator uses the website's Disconnect Gmail function, X-Out 300 clears the stored refresh token, sender address, and connection timestamp. Existing business records and email messages already delivered are subject to the ordinary operational and legal retention rules described elsewhere in this policy.
The Google account owner can revoke application access from Google Account connections. An authorized X-Out 300 administrator may also use the Disconnect Gmail function in the administrative email settings to clear stored authorization information. Revoking Google access prevents further access through the revoked grant; disconnecting within X-Out 300 also removes the locally stored refresh token. For assistance or other privacy requests, use the X-Out 300 website contact process.
X-Out 300's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.
Authorized users may voluntarily opt in to X-Out 300 administrative and transactional SMS notifications. These messages may include alerts about items requiring review or approval. Message frequency varies based on administrative activity. Message and data rates may apply. Reply STOP to opt out and HELP for help.
We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes. Mobile numbers and SMS consent information are used only to provide the messaging program and related operational support. Service providers used to deliver messages may process information only as necessary to provide that service.
SMS consent is optional and is not required to use X-Out 300. You may withdraw SMS consent at any time by replying STOP or disabling SMS notifications in your account settings. Records are retained as reasonably necessary for operational, legal, security, and recordkeeping purposes.
Questions about this policy may be submitted through the X-Out 300 website contact process.