Your agreements, in plain English.

What we collect and why, field-level encryption, consent records, your one-click export, and how deletion really works.

Read the document

The platform-wide rules: one account for every hat, fair use, the published fee, content rights, and consumer-law supremacy.

Read the document

Every cookie named (sign-in, your consent choice, the role you arrived as, the bot check, the browser you asked us to remember), plus the entry-form draft your browser holds, our cookieless visit counting, and the consent-gated tag container.

Read the document

For runners: your entry contract is with the organiser, refunds follow their published policy, and cancellation opens a refund request.

Read the document

For event organisers: the published fee schedule, the email allowance, funds flow, data-controller duties, and no lock-in.

Read the document

For sponsors: the organiser is the seller, verification tiers, binding auction rules with no shill bidding and a 48-hour winner window, our right to remove content and suspend accounts on reasonable suspicion, and exposure figures that name what they count.

Read the document

For crew: one-click shifts with a fair waitlist, hours credited at check-in, encrypted compliance records. Volunteering is not a job.

Read the document

For photographers: the licence you grant, the rights you warrant, what the bib-matching pipeline does, and why no money moves through the platform.

Read the document

For sponsors and organisers: every sponsor creative is reviewed before it shows, add-on listings must describe accurately what a buyer receives, six categories are banned platform-wide, and alcohol and gambling are barred from child-focused events. A suspected breach can take the listing down or the account offline, reviewable on request.

Read the document

For anyone buying merchandise or extras with an entry: the organiser is the seller, your Australian Consumer Law guarantees on goods cannot be excluded, and delivery, collection and faulty-goods remedies are spelled out.

Read the document

For token holders: one write-only MCP endpoint, scoped tokens you must guard, dry-run imports a human confirms, and stated limits on a best-effort tier.

Read the document

The child-safety posture: a code-enforced 16+ entry gate, consent-first photos with no facial recognition, encrypted WWC records, restricted sponsor content, and a prioritised way to report a concern.

Read the document

The public list of the 10 companies and registers that touch data for AnyRun, what each one sees, where it lives, and a change log.

Read the document