Last updated 15 September 2026
BoutHost is operated by Webpoint Technologies. This policy covers the BoutHost platform at bouthost.com. It does not cover the federation systems BoutHost connects to, which hold their own membership records under their own policies.
Signing in with Webpoint sends us your name, email address, date of birth, membership number and staff level from that federation, plus which federation you signed in through. We store that as a linked identity so we can recognize you next time and keep your name and email in step with your membership record. We never receive your federation password.
If your federation holds a photo of you, we copy it across so you do not have to upload one. It is then treated exactly like a photo you upload here: shown beside your name on the public page of an event you enter, subject to the age rule in section 3. We tell you when one arrives and you can hide it in one click, on that message or at any time in your privacy settings.
Standard web-server logs, a session cookie that keeps you signed in, and a cookie recording whether you prefer the light or dark appearance. We do not use advertising or cross-site tracking cookies, and we do not run analytics.
An event page can show a map, and that map is not loaded until you ask for it — there is a button, and it says so. Nothing about your visit reaches a map provider unless you press it. If you do, Google receives your IP address and which page you were on, and may set its own cookies, in the same way it would if you opened Google Maps yourself. The address is always shown as plain text, so you never have to load a map to find out where an event is.
This is the section worth reading carefully, because it is the part that is not obvious.
A published event lists its competitors on a page anyone can see, including people who are not signed in and search engines. For each competitor that listing may show their name, the weight they have declared for that event, the win/loss/draw record they entered themselves, their gym and the town it is in, and their profile photo if they have added one.
A profile photo is only shown for a competitor who is 18 or over, whose date of birth we hold, and who has not switched it off. If any of those is not true, their initials are shown instead — and the page looks the same whichever of those reasons applies, so it never indicates that a particular competitor is a child. You can turn your own photo off at any time in your privacy settings; it is on by default once you add one.
Combat-sports entry lists include children, and a declared weight is a body-weight measurement of a named person. That is a deliberate decision, not an oversight: hosts match competitors from this page, and a rounded band cannot be matched on. It is a decision we keep under review.
The public listing never shows a competitor's date of birth, age, gender, email address or postal address. It shows only entries that are approved or awaiting review — never one that was rejected, and never one that has been withdrawn.
An event's own details are public once it is published: its name, dates, venue and address, schedule, announcements, poster, any sanction claim, and the name of the person organizing it. The list of officials running an event is not public and is visible only to the host.
People who compete or run events have a public profile page, and it can be found by searching. This changed on 8 September 2026; before that date the only public mention of somebody was on the page of an event they had entered, and this policy said so.
A profile exists only for somebody who is already on a public page — because they have entered an event that has been published, or because they have published one themselves — or for somebody who has asked for one in their privacy settings. Creating an account does not create a profile.
For an adult, a profile may show their name, photo, gym and the town it is in, the win/loss/draw record they entered themselves, the weight they say they compete at, their gender, height, reach and stance, anything they have written about themselves, the roles they have chosen, and the public events they have entered or published.
For a competitor under 18 — and for anybody whose date of birth we do not hold — a profile shows only their name, their gym and their record, which is what the competitor list for their event already shows. There is no photo, no description, no town, no event history, and they cannot be found by searching. We do not say on the page that anything is being withheld, because saying so would itself identify which competitors are children.
You can keep yourself out of search at any time in your privacy settings. That controls being found: your name still appears on the events you enter, and your profile can still be opened from there, because entering a published event is what makes it public in the first place.
You can report a profile to us if you are signed in. We read reports and act on them; we do not tell the person who reported them, and we do not hide anything automatically because it has been reported.
Images are re-encoded before they are stored — whether you upload them or we copy them from your federation — which removes embedded metadata, most importantly the GPS coordinates a phone writes into a photograph. A photographed flyer would otherwise publish somebody's location beside their event with nothing on screen hinting at it.
BoutHost does not currently take payment. A host may apply for a merchant account with our payment processor, Usio, so that they can receive entry fees in future. The bank account, routing number, date of birth and social security number that application asks for are passed straight to Usio and never stored by BoutHost — not in our database, not in our logs, and not in our record of changes. We hold only the resulting account's status.
We send email that is part of using the platform: confirming your address, resetting your password, and telling you when something changes about an event you have entered — it being cancelled, its date or venue moving, its schedule changing, or an organizer posting an announcement. We do not send marketing email and we do not have a mailing list.
You can send a message to another member, and they can send one to you. A message is private between the two of you. It does not appear on any public page, it is not shown to organizers, and nobody else on the platform can read it.
There are two exceptions, and they are the whole of them. If somebody reports a message, a member of our staff reads that message and the rest of that conversation in order to decide what to do about it — we tell the person reporting so before they send the report. And we hold what you send on our servers, so it is covered by the security and the providers described elsewhere here.
We do not tell the sender when you have read a message, and we do not tell anybody you have blocked them. Deleting a conversation removes it from your inbox only — the other person keeps their copy — and once you have both deleted it, it is removed for good, unless it has been reported.
We do not sell personal information and we do not share it for advertising.
Events and entries are kept as a record of what happened. A withdrawn or rejected entry is still a record that somebody tried to take part, and an event that has run is part of a competitor's history, so neither is deleted when its status changes. We keep a log of significant changes — who published an event, who approved an entry, who changed an account's access — as an audit trail. That log does not record messages, or who has messaged whom.
Messages are kept until somebody deletes them. Deleting a conversation removes it from your own inbox; once both people have deleted it, or once both accounts have gone, it is removed from our database entirely — except for a message that has been reported, which we keep so the report can still be looked at. If you delete your account, what you wrote stays in the inbox of the person you wrote to, shown as coming from a deleted account.
Deleting your account is permanent, and you are asked to confirm it before anything happens. Not every account can be deleted: entering an event, running one, claiming a sanction, posting an announcement or taking a payment each leaves a record that belongs to the event as much as to you, and removing it would destroy somebody else's record of what happened. Your profile settings tell you when that applies to your account. Ask us, and we will tell you what we hold.
Competitors in this sport are often under 18. An account should be created and managed by a parent or guardian where the competitor is a minor, and a host should not enter a minor's details without that consent. Read section 3 before entering a young competitor into a published event.
A competitor under 18 is shown less than an adult is: no photograph, no description, no town, no event history, and they cannot be found by searching for them. Their name, gym and record still appear on the page of any event they enter, which is what entering a public event means.
Messaging is between adults only, in both directions. Nobody can send a message to a competitor under 18, or to an account whose date of birth we do not hold — and an account in either of those positions cannot send one either, or invite anybody to an event. We tell you on your own dashboard when a missing date of birth is the reason.
This will change, and the first change will be the reviewed version that removes the notice at the top. The date above is updated whenever the text is.
The help center covers how the platform works. For a question about what we hold about you specifically, contact Webpoint Technologies.