Privacy Policy

Who we are

LeagueDay is a pre-launch project building free youth sports league management software for volunteer coaches. During Phase 0, the only service we provide is a waitlist signup form.

What we collect

From the waitlist form, we collect your email address and your language preference (English or Spanish). Automatically, we record a salted one-way hash of your IP address and browser user-agent (for rate-limiting and fraud prevention — we cannot reverse these to your real values) and standard web server logs.

We do not collect your name, phone number, address, payment information, information about children, geolocation, advertising cookies, or any data from third-party brokers.

How we use it

Your email is used only to notify you when LeagueDay launches and to send occasional project updates (no more than monthly). The hashed IP and user-agent are used only to prevent automated bots from abusing the form.

We do not use your information for targeted advertising, profiling, or any commercial purpose beyond LeagueDay itself.

How we share it

We do not sell, rent, share, or transfer your information to any third party for their own use. We use the following service providers under signed Data Processing Agreements: Supabase (database), Vercel (hosting), Cloudflare (bot protection), Upstash (rate limiting).

How long we keep it

• Email: until you opt out, or 24 months after launch with no engagement.
• Hashed IP and user-agent: 90 days.
• Server logs: 30 days.
• Audit records: 7 years (required by some state laws).

Your rights

You have the right to know what we have about you, to delete it, to correct it, and to opt out. To exercise any right, email us at the address below — we'll respond within 10 business days and complete the request within 45 days at the latest. There is no charge.

Children's privacy

Phase 0 is not directed to children. We do not knowingly collect information from anyone under 18 during this phase. When LeagueDay's full product launches, we will publish an expanded privacy policy with COPPA-compliant procedures including verifiable parental consent before any data about a minor is processed.

Security

We use HTTPS, salted one-way hashing for IPs, row-level security on our database, rate limiting, and bot protection. If you believe you have found a security vulnerability, please report it responsibly to the contact below.

International users

LeagueDay is currently available only in the US and Canada. If you are accessing this site from elsewhere, we ask that you do not submit information.

Contact

For privacy questions or data requests, contact us at: leagueday-admin@leagueday.app

This policy was self-drafted by the LeagueDay operator and will be reviewed by an attorney before LeagueDay's full product launch.