Live map privacy

Live GPS is encrypted (AES-GCM). People in your club or event can plot the map. Helper computers that only pass traffic cannot plot you; they keep an encrypted recording. Coaches in the club/event can rebuild the day from that recording. We do not promise that someone who already watched the map can unsee it.

Who can see whom (live map)

You are…	Club practice map (e.g. Thundercats)	Multi-club event map
Member of that club	Everyone in the club, including all kids	Only if you also joined the event
Joined the event (any team or spectator)	Your own club only	Everyone on the event, including all kids from every team
Remote spectator who joined the event	No	Yes (watch). You do not get the coach’s saved reconstruction.
Parent / guardian not in that club or event	No	No
Public helper computer	Forwards only; cannot plot after encryption	Same
Left the club or event	Others drop your dot in seconds. You cannot follow new positions after the next key refresh (up to 15 minutes). Someone else can take your slot immediately.	Same, for the event only — your club practice map is unchanged

Kids’ beacon tags have no GPS. Nearby phones at the event share a location estimate so the whole event can see those kids — not only their own team. Guardianship (who may check a child in) is separate from who sees the map.

At most 2000 people on a club or on an event at once. See Live map relays if you run a helper computer.