Supabase RLS
Every single database table is protected by Row-Level Security (RLS). This means data access is enforced at the database layer based on your authenticated session, not just the application code.
Security Posture
How we keep your data safe.
We handle scores, photos, and contact details for real clubs. We don't use marketing puffery—here's exactly how we protect your information.
Encrypted at rest & transit
All data is encrypted at rest using industry-standard AES-256 and all traffic is served exclusively over HTTPS using TLS 1.3 to prevent interception.
Session management
We use secure, short-lived JWTs for session management. Users can trigger a password reset at any time if they suspect their account is compromised.
Audit trail
Administrative actions and score changes are logged in our scoring audit trail, recording exactly who made a change and when.
GDPR compliance
We support your right to data portability and erasure. Club admins can use our self-serve export tool to download all data in a machine-readable format.
Role-based access
Access is strictly tiered. Scorers can only score their assigned stands, and photographers can only upload to their specific events.
Security concerns?
If you believe you've found a security vulnerability in Clayshoot, please report it directly to our team. We aim to acknowledge all reports within 24 hours.
security@clayshoot.uk