Privacy Policy

Stats Broker LLC (“Stats Broker,” “we,” “us”) provides league-management software. This policy explains what we collect, how we use it, and the choices you have. In plain terms: we do not sell or rent your personal information, and we don’t use advertising or third-party tracking.

Information we collect

• Account information — your name, email address, password (stored only as a secure hash), and optionally a phone number and profile photo. Your role (e.g. coach, guardian, official) and, for athletes, a birthdate.
• Content you create — leagues, teams, venues, organizations, and athletes you set up (including addresses you enter), messages you send, and support requests you submit.
• Security information — two-factor authentication settings and recovery codes, and sign-in session records.
• Technical & usage information — standard server logs such as IP address, browser/device type, and timestamps, and first-party, in-product usage/diagnostic events (pages you view, actions you take, and errors) that we record to operate, secure, debug, and improve the service — for example, to rate-limit and lock accounts after repeated failed sign-ins, and to reconstruct what happened when something goes wrong. This is notshared with third parties or used for advertising, and does not capture the contents of what you type into forms. We also keep an internal admin audit log of security-relevant actions.

How we use your information

• To provide and operate the service and the features you use.
• To authenticate you and keep your account secure (2FA, session management, lockout on abuse).
• To send necessary emails — account verification, password resets, security codes, and replies to your support requests. We don’t send marketing email.
• To prevent fraud and abuse and to comply with legal obligations.

How your information is protected

Personal details such as names, email addresses, birthdates, and phone numbers are encrypted at rest (AES-256-GCM). Passwords are stored as salted, hashed values and are never kept in plain text. Private messages are encrypted at rest. We support optional two-factor authentication, expiring sessions, and account lockout. No method of transmission or storage is 100% secure, but we take reasonable measures to protect your data.

When we share information

We do not sell, rent, or trade your personal information. We share it only in these limited cases:

• Within the service — with other users as needed for the product to work (for example, coaches and guardians associated with the same team can see relevant team information, and people you message can see your messages).
• Service providers that process data on our behalf, only to deliver the service:
  • Email delivery (Resend, and Microsoft 365 for our support mailbox) to send the emails described above.
  • GIF search (GIPHY) — when you search for a GIF in messaging, your search term is sent to GIPHY. Your identity is not.
  • Map previews (Google Maps) — when you enter an address for a venue or organization, a satellite preview is loaded from Google, which receives that address and your IP address.
• Legal reasons — if required by law, or to protect the rights, safety, and security of our users or the service.

Cookies

We use a single essential session cookie to keep you signed in. We do not use advertising cookies or third-party analytics/tracking. Because the session cookie is essential to the service, disabling it will prevent you from signing in.

Data retention

We keep your information for as long as your account is active. When you delete your account, we remove or anonymize your personal information, except where we must retain limited records for security, audit, or legal purposes.

Your choices and rights

• Access & correction — you can view and edit your profile information at any time from your account.
• Deletion — you can delete your account from your profile settings. You may also contact us to request access, correction, deletion, or a copy of your data.
• Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA. We honor those rights; contact us to exercise them. We do not sell personal information.

Children’s privacy

Stats Broker is not intended for children to register on their own. Athletes under 18 are registered and managed by a parent or guardian, who provides and controls that information and consents to its use for team and league participation. If you believe a child has provided us information without guardian involvement, contact us and we will address it.

Changes to this policy

We may update this policy from time to time. We will revise the “Effective” date above and, for material changes, provide additional notice where appropriate.

Contact us

Questions or requests about your privacy? Email support@stats.broker.