Privacy Policy

Stats Broker LLC (“Stats Broker,” “we,” “us”) provides league-management software. This policy applies to the stats.broker website and the Stats Broker mobile apps. It explains what we collect, how we use it, and the choices you have. In plain terms: we do not sell or rent your personal information, and we don’t use advertising or third-party tracking. The information you give us is used to run Stats Broker — nothing else.

Information we collect

• Account information — your name, email address, password (stored only as a secure hash), and optionally a phone number and profile photo. Your role (e.g. coach, guardian, official) and, for athletes, a birthdate.
• Content you create — leagues, teams, venues, organizations, and athletes you set up (including addresses you enter), game and stat entries, messages you send, forms you sign, and support requests you submit.
• Payment information — when you pay for something through Stats Broker (for example a registration fee or a subscription), payment is handled by our payment processor. We never see or store your full card or bank details; we keep records of the transaction itself (what was paid, for what, and when).
• Location information — only what you choose to share. If you use features that find games near you, we use your device’s location with your permission (and we don’t ask again if you decline). You can also enter a home city and state yourself. We may derive an approximate location from your IP address for security purposes, such as showing you where your account is signed in.
• Security information — two-factor authentication settings and recovery codes, and sign-in session records.
• Technical & usage information — standard server logs such as IP address, browser/device type, and timestamps, and first-party, in-product usage/diagnostic events (pages you view, actions you take, and errors) that we record to operate, secure, debug, and improve the service — for example, to rate-limit and lock accounts after repeated failed sign-ins, and to reconstruct what happened when something goes wrong. This is notshared with third parties or used for advertising, and does not capture the contents of what you type into forms. We also keep an internal admin audit log of security-relevant actions.

How we use your information

• To provide and operate the service and the features you use.
• To authenticate you and keep your account secure (2FA, session management, lockout on abuse).
• To send necessary emails and notifications — account verification, password resets, security codes, activity you’ve opted into (like game reminders), and replies to your support requests. We don’t send marketing email.
• To process payments you initiate and keep accurate records of them.
• To prevent fraud and abuse and to comply with legal obligations.

Information that is public

Some information is meant to be seen — that’s the point of a stats platform. League, team, and venue pages, schedules, game results, box scores, and athlete profiles you make public are visible to anyone. You control optional profile details, and privacy settings let you limit things like who can send you friend requests. Don’t put anything in a public field you don’t want public.

How your information is protected

Personal details such as names, email addresses, birthdates, and phone numbers are encrypted at rest using industry-standard encryption. Passwords are stored as salted, hashed values and are never kept in plain text. Private messages are encrypted at rest. We support optional two-factor authentication, expiring sessions, and account lockout. No method of transmission or storage is 100% secure, but we take reasonable measures to protect your data.

When we share information

We do not sell, rent, or trade your personal information. We share it only in these limited cases:

• Within the service — with other users as needed for the product to work (for example, coaches and guardians associated with the same team can see relevant team information, and people you message can see your messages).
• Service providers that process data on our behalf, only to deliver the service:
  • Payment processing (Stripe) — handles card and bank details when you pay through Stats Broker, so we never have to store them.
  • Email delivery (Resend, and Microsoft 365 for our support mailbox) to send the emails described above.
  • Maps & location — when you enter an address, mapping services are used to look it up and show a map preview, and an IP-lookup service is used to show approximate sign-in locations on your devices list. These services receive only what they need to do that job.
  • GIF search (GIPHY) — when you search for a GIF in messaging, your search term is sent to GIPHY. Your identity is not.
• Legal reasons — if required by law, or to protect the rights, safety, and security of our users or the service.

Cookies

We use a single essential session cookie to keep you signed in on the website; the mobile apps use a secure sign-in token instead. We do not use advertising cookies or third-party analytics/tracking. Because the session cookie is essential to the service, disabling it will prevent you from signing in.

Data retention

We keep your information for as long as your account is active. When you delete your account, we remove or anonymize your personal information, except where we must retain limited records for security, audit, or legal purposes (for example, signed waivers and payment records).

Your choices and rights

• Access & correction — you can view and edit your profile information at any time from your account.
• Notifications — you can choose which notification categories you receive in your account settings.
• Deletion — you can delete your account from your profile settings. You may also contact us to request access, correction, deletion, or a copy of your data.
• Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA. We honor those rights; contact us to exercise them. We do not sell personal information.

Children’s privacy

Stats Broker is not intended for children to register on their own. Athletes under 18 are registered and managed by a parent or guardian, who provides and controls that information and consents to its use for team and league participation. Social features such as friends and messaging are limited to adults. If you believe a child has provided us information without guardian involvement, contact us and we will address it.

Changes to this policy

We may update this policy from time to time. We will revise the “Effective” date above and, for material changes, provide additional notice where appropriate.

Contact us

Questions or requests about your privacy? Email support@stats.broker.