Privacy policy

Draft, not yet reviewed. Please do not publish this page.

Who holds an account

Registration creates an account for a parent, guardian, or other responsible adult. A child never holds an account of their own.

There are two arrangements. A child is added to their parent's or guardian's account as a dependent profile, and that adult signs for them. An adult may play on someone else's account — a parent registering their grown child is ordinary — and that adult signs for them too. Or an adult may hold their own account, be their own player, and sign for themselves.

One adult account may hold several players, and only the adult who holds the account can see or change them. Signing in is not by itself permission to see someone else's family.

What we record

On the adult account: name, email address, phone number, date of birth, and mailing address. That address belongs to the adult, not to the player.

On each player profile: name, date of birth, medical notes, position, jersey number, height, shirt, pant and shoe sizes, and gear notes.

On each emergency contact: name, phone number, and their relationship to the player.

On each registration: which event it was for, whether the place is confirmed, on the waitlist, or cancelled, when you registered, and when a waitlisted place was released to you.

What is not published

There are no public participant pages and no public profiles. A player's name, date of birth, medical notes, and emergency contact details are never published, and are not reachable from a link.

Player names may be seen by the staff and volunteers who need them to run a session. Rosters and attendance records are working documents, not publications.

We do not hold an email address for a player. Anything we need to say about a player goes to the adult who holds the account.

Signatures, and what we keep as evidence

When an adult accepts a waiver or code of conduct, we record which version of the document was accepted, who accepted it, and in what capacity. We record the typed signature, the date and time, and the network information the browser supplied — the IP address and the browser's user agent string.

An adult may instead draw their signature, which we store as an image. That part is optional.

That record is a compliance record. It is not edited once created, and it is attached to the person who signed rather than to an account that could later change hands.

Versioned documents

Waivers and codes of conduct are versioned. A signature applies to the exact version that was on screen at the time and does not carry over to a later one. When a document is updated, players are asked to accept the new version.

Once a version has taken effect its text and its effective date cannot be changed. Earlier acceptances are kept as separate records rather than overwritten, so the history of what was agreed, and when, stays intact.

Children's information

This site is built so that a child cannot hold an account, has no email address in our records, and is never asked to provide information. A minor's mailing address is the address of the adult who registered them.

Those are design decisions rather than settings anyone can switch off, which is the point. Whether they amount to compliance with the US children's online privacy rules is a question for counsel, and is one we would rather ask than answer for you.

Payments and email

Neither is switched on. We do not collect card details here, and the site does not send email on its own.

Both are planned. This policy will be rewritten before either is turned on, because both change what we hold and who we share it with.

What this draft does not answer

Some of a privacy policy follows from decisions nobody has made yet. Until those are settled, this draft does not cover:

• How long we keep each kind of record, and when we delete it.
• The organisation's registered name, address, and registration number.
• Which jurisdiction's law applies, and what rights that gives you.
• Who to contact about a request, and how long we take to reply.
• Whether you may see, correct, or ask us to delete your information.