How we protect the people in our program
This page is maintained by Skate Beyond Limits to summarize the security practices behind our website and the forms families and volunteers use.
Last updated: June 2026
Encrypted in transit & at rest
All traffic to this site is served over HTTPS/TLS. Form submissions are stored in a managed database with encryption at rest.
Row-level security
Our database enforces row-level security so only authorized program administrators can read submitted records.
Least-privilege access
Administrator access is limited to the volunteer leads who need it to run the program, and is reviewed regularly.
Hosting and platform
Our website and database are hosted on the Lovable platform, which provides the underlying infrastructure security: TLS termination, encrypted storage, role-based access to the database, and secret management for the credentials our application uses. This is a description of enabled platform capabilities, not an independent certification.
Data we collect
We only collect what families, volunteers, partners, and sponsors choose to share with us through our forms. We do not run advertising trackers and we do not sell or rent your information. For the full list of what we collect on each form and how we use it, see our Privacy page.
Email and notifications
Confirmation and notification emails are sent from a dedicated transactional sending domain (notify.skatebeyondlimits.com). We use a standard suppression list so unsubscribes are respected immediately.
Shared responsibility
Our hosting platform secures the underlying infrastructure. Skate Beyond Limits is responsible for what we collect, how we use it, and who on our team has administrator access. You are responsible for keeping any account credentials you use with us private.
Reporting a security issue
If you believe you have found a security issue with this website or with how we handle information, please tell us right away through the contact form. We will acknowledge your report and respond as quickly as we can.