Privacy Policy

1. Introduction

Welcome to StatHoarder ("we," "our," or "us"). We respect the privacy of our users ("user," "admin," "captain," or "you"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit and use the StatHoarder mobile application (the "Application"). By using the Application, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

We collect information that you voluntarily provide to us and data that our servers automatically collect when you use the Application to manage or participate in sports leagues.

• Personal Data: Personally identifiable information, such as your name, email address, and account password, that you voluntarily provide when registering an account.
• Date of Birth: We collect your date of birth at signup solely to (a) confirm you meet our minimum age requirement of 13 years, and (b) verify eligibility to join leagues that have age requirements set by their organizers. Your date of birth is not displayed publicly and is not shared with other users. It is locked after signup to preserve the integrity of age-based access controls; contact us at takeover.to123@gmail.com if a correction is needed.
• User-Generated Content: Information you create, upload, or share within the Application, including team names, player rosters, game scores, messages, files and images shared within the League Chat feature.
• Financial & Payment Data: To facilitate league dues, we use a third-party payment processor (Stripe). We do not directly collect or store your bank account details or full credit card numbers on our servers. All payment data is handled securely by Stripe in accordance with their privacy practices.
• Derivative Data & Identifiers: Information our servers automatically collect, such as your IP address, device type, and operating system version. We may collect your unique device identifier (IDFV) to manage your session and ensure that push notifications are routed correctly to your specific device.
• Location Data: With your permission, we may collect your approximate or precise location to help you find nearby sports leagues, provide accurate game venue directions, or facilitate location-based league searches.
• Device Permissions: With your consent, we may request access to:
  • Notifications: To send you push notifications regarding game schedules, score approvals, and league chat messages.
  • Haptics/Vibration: To provide physical feedback for in-app actions (e.g., approving scores).

3. How We Use Your Information

Having accurate information permits us to provide you with a smooth, efficient, and customized sports management experience. We use your data to:

• Create, manage, and secure your StatHoarder account.
• Facilitate core app features, such as building rosters, generating standings, and routing chat messages.
• Process and route league dues and transaction fees securely via Stripe.
• Notify you of pending score approvals, game updates, and administrative alerts.
• Prevent fraudulent transactions and protect against criminal activity.

4. Disclosure of Your Information

We do not sell your personal data. We only share your information in the following specific situations:

• Third-Party Service Providers: We share necessary data with trusted third parties, including Supabase (Database & Authentication) and Stripe (Payment Processing).
• Other League Members: Certain profile data (name, team affiliation, and role) and chat messages will be visible to other users within your specific league.
• By Law or to Protect Rights: If we believe the release of information is necessary to respond to legal process or protect the safety of others.

5. Data Retention and Account Deletion

We retain different categories of information for different periods based on legal requirements and the purpose for which the data was collected.

• Account & Profile Data (name, email, date of birth, profile photo): Retained while your account is active. Deleted within approximately 30 days of an account deletion request, except where retention is required by law.
• League and Game Data (rosters, scores, standings, chat messages): Retained for the duration of the league plus approximately 12 months after season end, to preserve historical league integrity. After account deletion, your name and identifiers are removed from this data, but the underlying game records may remain visible to your former leagues.
• Payment Records: Retained for up to 7 years following the transaction date, as required by U.S. federal tax law. This includes amounts, dates, and league association — never your full credit card number.
• Server Logs and Authentication Data: Retained for up to 90 days for security monitoring and abuse prevention, then deleted on a rolling basis.
• Children's Data: StatHoarder does not knowingly collect data from users under 13. Any data identified as belonging to an under-13 user is deleted within 10 business days of identification, as described in Section 6.
• Backups: Deleted data may persist in encrypted backups for up to 30 days before being overwritten.

In-App Deletion: You can permanently delete your account at any time within the Application by navigating to the Settings/Profile menu and selecting "Delete Account."

Data Removal Process: Upon deletion, your personal records are removed from our active database within approximately 30 days. User-generated content (past game scores, chat messages) may remain visible to your former leagues to preserve standings integrity, but will no longer be linked to your identifiable account.

6. Children's Privacy

StatHoarder is not intended for and does not knowingly collect personal information from children under the age of 13. Our signup process requires users to enter a date of birth and rejects any age below 13. If you are under 18, you represent that a parent or legal guardian has reviewed and agreed to these terms on your behalf.

Parental Reporting: If you are a parent or guardian and believe your child under 13 has created an account on StatHoarder, please email us at takeover.to123@gmail.com with the username or email address associated with the account. We will verify the request and, upon verification, delete the account and all associated personal information within 10 business days. We will confirm the deletion via email.

Upon receiving a parental request, we follow a documented internal verification and deletion procedure to ensure requests are legitimate and resolved within the stated timeline.

We do not condition a child's participation in any activity on the disclosure of more personal information than is reasonably necessary, and we maintain reasonable procedures to protect the confidentiality and security of any information we hold.

7. Security of Your Information

We use industry-standard administrative, technical, and physical security measures to protect your personal information. Your authentication is managed by Supabase using encrypted credentials, and all payment data is processed by Stripe, a PCI-compliant payment processor. However, no electronic transmission or storage method is 100% secure, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

8. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal data, including the right to request access to, correction of, or deletion of your information. California residents may have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal data is collected, request its deletion, and opt out of the sale of personal data. We do not sell your personal data.

To exercise any of these rights, email us at takeover.to123@gmail.com or use the "Privacy Request" option in the Profile menu of the Application. We will respond to verified requests within 30 days. Some information may be retained where required by law or for legitimate business purposes (such as records of completed transactions).

Date of birth is locked after signup to preserve the integrity of age-based access controls. Requests to correct a date of birth will be honored after we verify the request.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by updating the "Last Updated" date and, where appropriate, sending an in-app notification.

10. Contact Us

If you have questions or comments about this Privacy Policy, please contact us at: