1. Information categories
The final policy should distinguish account information, event registration details, roster relationships, profile content, communications, transaction records, device information, and support requests.
2. Sources and purposes
For each category, explain whether information comes from a participant, parent, coach, team, event operator, service provider, or device—and why 2D needs it.
3. Youth and family controls
Clearly describe consent, guardian access, profile visibility, age-appropriate defaults, data minimization, correction, removal, and escalation processes.
4. Sharing and providers
Name or categorize the providers that support registration, payments, schedules, media, analytics, communications, and safety, including the limits on their use.
5. Choices and rights
Explain account preferences, marketing and notification choices, access, correction, deletion, portability, appeals, and any jurisdiction-specific rights.
6. Retention and security
Describe retention criteria, safeguards, incident communication, account protection expectations, and how historical event or award records are handled.
7. Contact and changes
Provide the approved privacy contact, effective date, policy-change process, and links to relevant terms or child-safety resources.