Privacy Policy

1. Introduction

RugbyStats.net ("we," "us," or "our") provides a web-based platform for rugby union statistical tracking, game charting, and roster management (the "Service"). This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.

Accounts on the Service are designed for and directed at adult coaches, analysts, and authorized personnel associated with rugby teams and organizations. In addition, prospective players aged 13 or older may submit a recruit interest form through a public link shared by a coaching program; that flow is described in Section 2 below and in our Recruit Form Privacy Policy.

2. Information We Collect

Account Information

When you create an account, we collect your email address and authentication credentials. This information is used solely to provide access to the Service.

Coach-Entered Content

Coaches and authorized users enter information into the Service, including:

• Player names (first name, or first and last name at the coach's discretion)
• Jersey numbers and player positions
• Game statistics and events (tackles, tries, carries, etc.)
• Team, organization, and season information
• Availability and injury coaching notes (see below)
• Links to game film hosted on third-party services (YouTube or Dropbox)

Roster data entered by coaches does not include dates of birth, student email addresses, phone numbers, physical addresses, photographs, or any biometric data.

Injury and Availability Notes

Coaches may record a player's availability status (available, limited, or unavailable) and the general body area affected by an injury. These are coaching notes for roster planning. The Service is not a medical records system and is not designed to store diagnoses, treatment details, or clinical documents.

Recruiting Form Submissions

Prospective players may submit a recruit interest form through a public link shared by a coaching program. These forms are filled out by the student (or a parent or guardian) and collect: name, email address, date of birth, phone number (optional), parent or guardian contact information (for students under 18), and any additional fields the coaching program chooses to add. We also record the submitter's IP address and browser type to prevent spam and abuse of the form. Submissions from children under 13 are automatically rejected, and no personal data from them is stored. See our Recruit Form Privacy Policy for full details.

Automatically Collected Information

We collect standard web analytics data including page views and general usage patterns through our hosting provider (Vercel). We do not use third-party advertising trackers or sell any analytics data.

3. How We Use Your Information

We use the information we collect solely to:

• Provide, maintain, and improve the Service
• Authenticate your account and manage access
• Synchronize your data across devices via cloud backup
• Generate statistical reports and analytics for your team
• Respond to support requests
• Send transactional emails, such as recruit form verification and notification emails

We do not use your information for advertising, profiling, marketing to third parties, or any purpose unrelated to providing the Service.

4. Data Sharing

We do not sell, rent, or trade your personal information or the content you enter into the Service to third parties. We share data only with the infrastructure providers necessary to operate the Service:

• Supabase — database hosting and authentication services
• Vercel — application hosting and content delivery
• Resend — transactional email delivery (account emails, recruit form verification, and notification emails)

These providers process data on our behalf and are contractually obligated to protect it. We may also disclose information if required by law or to protect our legal rights.

If a coach links game film hosted on YouTube or Dropbox, that video is loaded directly from the third-party service when played, and those services may set their own cookies and collect data under their own privacy policies (for YouTube, Google's privacy policy applies). We do not host video content on our servers. Video files selected from your device for film review are stored locally in your browser and are never uploaded to us.

5. Children's Privacy

Accounts on the Service are for adult coaches, analysts, and authorized personnel only. Children do not create accounts.

Coaches may enter player names and game statistics about athletes on their teams. We encourage coaches working with players under the age of 13 to use first names or initials only when entering roster data.

Prospective players aged 13 or older may submit a recruit interest form through a public link shared by a coaching program. Forms submitted by students under 18 request parent or guardian contact information. Submissions indicating an age under 13 are automatically rejected, and no personal information from the submission is stored.

If you believe we have collected personal information directly from a child under 13, please contact us at privacy@rugbystats.net and we will promptly delete it.

6. Data Retention and Deletion

We retain your data for as long as your account is active or as needed to provide the Service. You may delete your data at any time:

• Individual players can be removed from your roster
• Games and seasons can be deleted from the Service
• Recruit form submissions that are never email-verified are automatically deleted after 90 days
• You can export all your data before deletion using our CSV and PDF export features
• You may request complete account and data deletion by contacting us

Data from inactive accounts (no login for 24 months) may be archived or deleted.

7. Data Security

We implement commercially reasonable safeguards to protect your data, including:

• Encryption in transit (HTTPS/TLS)
• Encryption at rest for database storage
• Row-level security ensuring users can only access their own organization's data
• Secure authentication via Supabase Auth

No method of electronic storage or transmission is completely secure. We cannot guarantee absolute security, but we take reasonable measures to protect your information.

8. Offline and Local Storage

The Service operates as a Progressive Web App (PWA) with offline capabilities. When used without cloud sync, your data is stored locally on your device using browser local storage. Locally stored data is not transmitted to our servers unless you enable cloud sync.

9. Your Rights

Depending on your location, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your information
• Export your data in portable formats (CSV, PDF)
• Withdraw consent for data processing

To exercise any of these rights, contact us at privacy@rugbystats.net.

10. California Residents

Under the California Consumer Privacy Act (CCPA), California residents have the right to know what personal information is collected, request deletion, and opt out of the sale of personal information. We do not sell personal information. To make a request, contact us at privacy@rugbystats.net.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes by posting the updated policy on the Service with a revised effective date. Your continued use of the Service after changes are posted constitutes acceptance of the revised policy.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at privacy@rugbystats.net.