Privacy Policy

1. Scope of this policy

This policy applies to information we process as the operator of the Service. The people who set up teams and enter rosters and statistics (coaches, statisticians, league staff, and parents) decide what athlete information to record and whether to make it public. For that information, those users act as the primary decision-makers, and we process it to provide the Service to them. Our companion Data Collection policy lists exactly what we collect and why.

2. Information we collect

Information you provide

• Account information: your name, email address, a securely hashed password, and an optional profile photo.
• Team information: team names, short names, locations, levels, sport, logos, and colors.
• Player information: player names, jersey numbers, positions, biographies, and photographs that you choose to add.
• Game and statistical data: scores, play-by-play entries, box scores, season totals, leaderboards, schedules, and brackets.
• Communications: messages you send through the contact form or to support, including your name, email, and message.

Information we collect automatically

• Log and device data: IP address, browser and device type, pages requested, and timestamps, collected by our hosting provider to operate and secure the Service.
• Essential cookies: a session cookie used to keep you signed in. See the cookies section below.

We do not intentionally collect special categories of data such as health, biometric, or government identifiers, and you should not enter them into the Service.

3. How we use information

• to provide the Service, including recording stats, computing totals and leaderboards, and rendering team, league, and public pages;
• to create and manage your account and authenticate you;
• to send transactional emails such as password resets and team or league invitations;
• to generate optional game recaps, either deterministically or, if you choose, with an AI provider;
• to maintain the security, integrity, and reliability of the Service and to prevent abuse;
• to respond to your requests and provide support; and
• to comply with legal obligations and enforce our terms.

We do not sell personal information, and we do not use the information you enter to serve third-party advertising.

4. How information is shared

We share information only as described here:

• With people in your league: if your team is part of a league on the Service, league administrators may view and, where enabled, edit statistics for member teams in order to audit and correct records.
• Publicly, when you choose: information on public team and game pages and in embeds is viewable by anyone. See the next section.
• With service providers: we use vetted providers to host the Service and process data on our behalf. They may access information only to perform services for us and are bound by confidentiality and data protection obligations.
• For legal and safety reasons: when we believe disclosure is required by law, or is necessary to protect the rights, safety, or property of users, the public, or us.
• In a business transfer: if we are involved in a merger, acquisition, or sale of assets, information may be transferred, subject to this policy.

Our current service providers (sub-processors) are:

5. Public pages and embeds

The Service lets users publish public team and game pages and embed live scores elsewhere. When a team is made public, information such as team names, player names, jersey numbers, and statistics can be seen by anyone with the link, indexed by search engines, and cached by third parties. Public visibility is off until a user enables it, and it can be turned off at any time, although content that has already been copied or cached may persist outside our control. If you do not want a player's information to be public, keep the team private or remove that information.

6. AI features

The Service can generate a post-game recap. By default, recaps are produced by our own deterministic logic and do not involve any AI provider. If a user chooses the AI option, the relevant game and statistical data is sent to our AI provider to generate the recap text. We do not send your password, and the AI provider processes the data to return the recap under its API terms, which do not use the submitted data to train its models. You can always use the deterministic recap instead.

7. Cookies and similar technologies

We use a small number of strictly necessary cookies, primarily a session cookie that keeps you signed in and protects against request forgery. We do not use third-party advertising or cross-site tracking cookies. Because these cookies are essential to operate the Service, disabling them may prevent you from signing in.

8. How long we keep information

We keep account, team, player, and statistical information for as long as your account is active or as needed to provide the Service. You can delete teams, players, games, and other content at any time, and you can delete your account. After deletion, we remove or de-identify the information within a reasonable period, except where we must retain it to comply with legal obligations, resolve disputes, or enforce our agreements. Backups are cycled out on a rolling basis.

9. How we protect information

We use reasonable technical and organizational measures to protect information, including encryption of data in transit, hashing of passwords, access controls, and reputable infrastructure providers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we become aware of a breach affecting your information, we will notify you and the appropriate authorities as required by law.

10. Children and youth athletes

Statside is built for youth, school, and amateur sports, so information about minor athletes is often entered by their coaches, teams, or parents. We treat this information with care.

• Accounts are intended for adults and for users at least 13 years old. We do not knowingly allow children under 13 to create their own accounts, and we do not knowingly collect personal information directly from children under 13.
• When a coach, statistician, or parent enters information about a minor athlete, they are responsible for having the authority and any consent required from a parent or guardian, as described in our Terms of Service.
• Parents and guardians may request to review, correct, or delete a minor's information, or to make a team private. Contact the team or league that manages the data, or reach us at privacy@statside.app and we will help facilitate the request.
• If you believe a child under 13 has created an account or that we have collected information from a child under 13 without proper consent, contact us and we will delete it.

If your organization is subject to laws such as the Children's Online Privacy Protection Act (COPPA), the Family Educational Rights and Privacy Act (FERPA), or state student-data-privacy laws, you are responsible for meeting your obligations under them, and we will work with you in good faith to support compliance.

11. Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, or export your personal information, to object to or restrict certain processing, and to withdraw consent. The Service gives you direct control: you can edit or delete teams, players, games, and account details, export season data as CSV, and make teams private or public. To make a request we cannot complete in the product, contact us at privacy@statside.app. We will not discriminate against you for exercising these rights, and we do not sell personal information.

12. Your California privacy rights

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, the "CCPA"), gives you specific rights regarding your personal information. We extend the core of these rights to all users.

Your rights

• Know and access: request the categories and specific pieces of personal information we have collected, the sources, the purposes for collecting it, and the categories of third parties with whom we share it.
• Delete: request that we delete personal information we collected from you, subject to limited legal exceptions.
• Correct: request that we correct inaccurate personal information.
• Opt out of sale or sharing: we do not sell your personal information, and we do not share it for cross-context behavioral advertising, so there is nothing to opt out of.
• Limit sensitive information: we do not collect the categories of sensitive personal information defined by the CCPA.
• Non-discrimination: we will not deny you service, charge you a different price, or provide a different quality of service for exercising any of these rights.

Categories collected in the past 12 months

Identifiers (such as your name and email), internet and network activity (such as log data and IP address), and the team, player, and statistical content that users enter. We collect this to provide and secure the Service, as described in the sections above. We disclose it only to the service providers listed above and, where you enable public visibility, on public pages.

How to exercise your rights

Submit a request to privacy@statside.app or through our contact page. We verify requests using the information associated with your account, and you may use an authorized agent. Because we do not sell or share personal information, we do not offer a separate "Do Not Sell or Share My Personal Information" mechanism beyond this statement, and under California's "Shine the Light" law we do not disclose personal information to third parties for their own direct marketing.

13. International users and transfers

We operate the Service in the United States, and the information we process is stored and handled there. If you access the Service from outside the United States, you understand that your information will be transferred to and processed in the United States, where data protection laws may differ from those in your location.

14. Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the date at the top of this page and, where appropriate, provide additional notice. Your continued use of the Service after the changes take effect means you accept the updated policy.

15. How to contact us

For privacy questions or requests, contact us at privacy@statside.app or through our contact page.