Privacy

•About a player: first and last name, birth year, jersey number, which teams they are on, whether they are coming to each event, whether they turned up, and an emergency contact if a parent adds one.

•About an adult: name, email address, which players they guard or which teams they coach, and when they last signed in.

•A photo, only if a parent chooses to add one.

•Sign-in attempts — the email tried, roughly where from, and whether it worked — kept for 30 days so a club can tell whether an account is being attacked.

•A parent sees their own children in full, and sees other players on the team only as a name, jersey number and whether they are coming.

•A player with their own login sees the same as their parent does about the team, and their own card.

•A coach sees their own teams, including emergency contacts, because that is the information that matters at a field with no parent present.

•The club director sees every team.

•Emergency contacts are never shown to other families. That is enforced in the database query, not just hidden on the screen.

A photo of a player is off-limits unless a parent adds it, and there is a switch on the Me screen to withdraw that at any time. Turning it off hides the photo from everyone immediately — coaches and the director included — and puts the player’s name on the list a coach sees before attaching photos to a team post, so they know who to leave out of a group shot. The app cannot look inside a photograph; telling the coach is the honest half it can do.

•No advertising, and no advertising identifiers.

•No analytics or tracking services. No third party receives your data.

•No location tracking. Venues are addresses the club typed in, not your position.

•Nothing is sold or shared, ever, to anyone.

On the Me screen there is a button to ask for a player, or your whole family, to be removed. It goes straight to the club director, who will confirm by email.

Two honest notes about that. First, it is a request a person answers rather than an instant wipe, because a roster and a season’s game log are the club’s records too. Second, the club may keep a minimal record that a player was on a team in a given season — the same thing a scorebook holds — after everything else about them is gone.

You can also email the club directly at tbcoperating@yahoo.com.

Accounts are created by the club or by a parent using a team join code. A player under 13 does not get their own login; their information belongs to their parent’s account. Everything a parent can see about their child, they can change or ask to have removed.

Passwords are stored as scrypt hashes and cannot be read back, by anyone, including the club. Sign-in sessions are stored as hashes too. Repeated failed sign-ins lock an account for a few minutes. If you think someone else is in your account, change your password from the Me screen — that signs out every other device.