Privacy Policy

Privacy Policy

Version 2.2, 28 October 2026

Sportoriety, LLC (“Sportoriety”, “we”) runs sportoriety.com. This policy says what information we collect, why, who sees it, how long we keep it, and what you can do about it. It is written for the adults who hold accounts here and for anyone who visits without one. Information about children has its own section below and its own page, the Children's information page, which is part of this policy.

The short version. You give us what we need to run the programs you take part in, and nothing more. Clubs, coaches and tournaments see what they need to run their program. We do not sell personal information, and we do not use your information to target advertising anywhere. Children never hold accounts. You can ask for a copy of your information, correct it, or delete it at any time.

1. Who holds an account

Every account belongs to one adult who has confirmed they are 18 or older. Depending on what you do here you may be a parent or guardian, a coach, a club director, a tournament or event director, a member of an organization's staff, or a reviewer. One account can hold more than one of these roles. Children do not sign up or sign in; a parent or guardian adds them (section 5).

2. What we collect

You give us: your name, email address and password (we store only a one-way hash of the password), and optionally your phone number, your ZIP code, your time zone and which home screen you prefer. If you sign in with Google or Apple, we receive your name, your email address and an identifier from them; we never see your Google or Apple password. We also hold the organizations you direct, coach or register with and the permissions each has given you; the children you add and the information about them described in section 5; the reviews you write; the messages you send through Sportoriety; the documents you publish as an organization (waivers, refund terms, rules); every consent you give, with the version of the text you saw and the time you accepted it; and your support requests.

Payments: Stripe handles every payment. When you pay a club or tournament or buy a ticket, we record what was bought, the amount, its status and Stripe's reference for it. Card numbers go to Stripe and never reach us; our systems have nowhere to store one. When you provide personal data in connection with Sportoriety, Stripe receives that personal data and processes it in accordance with Stripe's Privacy Policy (https://stripe.com/privacy).

Collected automatically: the internet address and browser you connect with, the pages you open and when, and the errors the site meets. If you accept analytics, our analytics tool records which screens are used and which controls are pressed, with the text and attributes of every control masked and no session recording, so a child's name on a button never leaves your browser. If you choose to share your location, a point rounded to about a kilometer is kept on your device in a cookie for up to a year, so the home page and the calendar can show events near you, and it is sent with those searches and shown in a search page's address; it is removed when you press Change beside it or sign out, and our analytics provider never receives it. When you use your location to fill in your ZIP code, we keep the nearest ZIP code on your account and do not keep the point. Your ZIP code is where your tryout alerts start, and no other user sees it.

Sensitive information: a child's date of birth and sex are sensitive information under several state laws. We collect them only from a parent or guardian, with that person's consent, for age-group placement and eligibility, and we never sell them or use them for advertising. We do not ask anyone for racial or ethnic origin, religion, health information, immigration status, biometric data, or a precise location that we keep.

3. Why we use it

• To run the programs you take part in: rosters, schedules, tryouts, registrations, waivers, assessments, tickets, and the messages that go with them.
• To let you pay a club or tournament, and to let a club or tournament get paid, through Stripe.
• To show reviews and listings to the public, with no child's name among them.
• To send you the messages you have asked for or that your programs require (section 7).
• To keep the service secure, find and fix faults, and learn which features are used.
• To keep the records the law requires: consents, payments, and tax records for organizations.
• To answer your requests and support questions.

We do not build a profile of you for advertising, and we make no decision about you by automated means that has a legal or similarly significant effect on you.

4. Who sees it

People on Sportoriety, by role.

Companies that work for us. They receive only what their job needs and are bound by written agreements to protect it. Where a company also uses some of it for its own purposes, its entry below says so. Today they are:

• Laravel Cloud, our hosting provider, which stores everything on the platform under a data processing agreement;
• Vercel, which hosts the website and delivers every page, including signed-in pages that show your child's information, and which keeps its own records of visits to the site, such as IP addresses, and uses them under its own privacy notice;
• Cloudflare, our network provider, which carries every request to and from the site on its way to us;
• Cloudflare R2, our file storage provider, which stores the files an organization uploads, such as sponsor logos and the policy documents a director imports;
• Stripe, for payments, as above;
• Postmark, our email provider, which receives your email address and the message, and whose message format has no field that can carry a child's name;
• Google Workspace, our business email and document service, which receives what you write to our support address;
• Twilio, our text-message provider, once texting is turned on, which receives your phone number and the message, and which handles part of it as an independent company under its own terms;
• HERE, our mapping provider, once it is turned on, which receives a venue's street address or a ZIP code typed into an address form, and nothing about who typed it;
• PostHog, our analytics provider, which receives nothing unless you accept analytics. If you do, it receives masked usage data from your browser, identified by a random number, and a record of the following events from our servers, identified by your account number if you are signed in and otherwise by a random number or by nothing at all. Nothing it receives is identified by your name or email address. The events are:
  • signing up (with the city, region and country your connection comes from),
  • creating a tournament,
  • paying for team registrations (with the amount and how many),
  • a coach making a practice or game plan,
  • joining a waitlist or asking to be contacted,
  • claiming a listing,
  • our approving a claim or setting up an organization from a waitlist entry or a claim, and
  • each step of a suggestion on your dashboard: when it is due, shown, accepted or dismissed, and the email it offers being drafted and sent;

  When one person's action records an event about someone else, such as our approving a claim, the event carries nothing that identifies the other person.

• HubSpot, our customer relationship tool, which receives your name and email address if you join a waitlist or ask us to contact you; and
• Google (Vertex AI), an AI service, once it is turned on.
  • For review moderation, summaries and suggested replies it receives a review's text, rating and reviewer's role, the event's or club's name, and whether the review named a player on its rosters;
  • for the site's chat assistant, what the visitor types;
  • for schedule imports, the cells of the spreadsheet a director uploads;
  • for policy drafts, the director's answers and the event's name, dates, venues and divisions or the organization's legal name;
  • for setting up an event or club, the description a director types and the answers to its follow-up questions;
  • for the advice a director reads about their events and club, counts from their own records; and
  • for coaches' drill search and drill requests, the words the coach types and the sport's coaching concepts, along with the text of our drill catalog.

  Where that text is about a team, club or event, the names of the players on its rosters are removed before it is sent, and the service never receives a child's record.

Everyone else. We disclose information when the law requires it, to protect someone's safety, to enforce our terms, or if Sportoriety is sold or merged, in which case this policy still governs and you will be told. We do not sell personal information and we do not share it for targeted advertising. We never have, and this sentence will change before we ever do.

5. Children

Children cannot hold accounts. A parent or guardian adds a child, or claims a profile a coach started for their team's roster. A parent or guardian, or a coach adding a player to their own roster, enters a child's information, and a parent or guardian decides which clubs and teams to register the child with. If a team the child plays on joins a club, the roster moves with the team, and that club's directors can then see:

• each child's first name, last initial, age, sex, graduation year, grade and jersey number;
• the jersey numbers, clothing sizes and shoe size the family gave at signup;
• the positions the coach assigned and the positions the family listed for any sport;
• whether the child meets a tournament's eligibility rules, and the reason when not;
• the names and phone numbers of up to two of the child's parents or guardians, and the email address a coach entered to invite a parent who has not yet joined;
• the last names of the children and parents on the club's teams, in a list that does not say whose each is; and
• if the club subscribes to Club Director Pro, its coaches' assessments and notes about each child and each child's game statistics.

The parent or guardian can see everything we hold about the child. What we collect about a child, who sees it, how long we keep it and how to delete it are set out on the Children's information page, which is part of this policy. In short: a child's record is visible to their parents and guardians, to the directors and coaches of programs they are registered in, to the directors of a club their team joins, by first name and last initial to other families on the same roster, and to a tournament their team enters. Nothing about a child appears on any public page. Three kinds of private link show a child's first name without signing in: the calendar feed a parent creates for their own calendar app, the calendar feed a family member the parent invited creates for theirs, each showing the children's first names to anyone the link is shared with, and a tournament's scorer's table, which shows first names and jersey numbers for the game in front of it. If we learn that a child under 13 has created an account or given us information directly, we delete it.

6. Reviews

A review is public. It appears under your first name and last initial, or as “A parent” if you choose, and never under your full name or your child's. We keep a record of who wrote each review so we can act on reports and meet legal requests. You can edit or remove your own review. Organizations can respond to a review; they cannot remove one. How we moderate reviews is in the Terms of Service.

7. Email and text messages

We send two kinds of message. Service messages are about your account and the programs you are in: a roster change, a game moved, a payment due, a waiver to sign, a message from your coach. You cannot opt out of these while you hold the account, except for the broadcasts your organizations send, which each carry an unsubscribe link. Marketing messages, including news from Sportoriety and the Saturday Ride Home note, go only to people who asked for them, and every one carries a way to stop. Text messages go only to a number whose owner has agreed in writing to receive them; reply STOP to any text to stop, and HELP for help. Message and data rates may apply. We never put a child's name in an email or a text.

8. Cookies

We set one cookie that keeps you signed in. Scripts cannot read it, and it holds a token, not your name. If you accept analytics, our analytics tool runs in your browser and sets its own cookie, and we set a cookie named sp_analytics so our servers know they may send the events in section 4. If you decline, nothing is sent to our analytics provider from your browser or from our servers. If you share your location, a cookie named sp_loc keeps the rounded point described in section 2. We set no advertising cookies and allow no third party to set one. Videos are embedded through YouTube's no-cookie player. Our Cookie Policy at sportoriety.com/cookies has the full list.

9. How long we keep it

10. Security

Information travels encrypted and is stored encrypted at rest. Access inside Sportoriety is by role, so a coach sees their team and a director sees their organization, and that is enforced in the database, not only on the screen. Public pages are built from data types that have no field for a child's name, and we test for it. Card data never reaches us. No system is perfectly secure. If a breach affects your information, we will tell you as the law requires, and sooner when we can.

11. Your rights, and how to use them

Whatever state you live in, you can ask us to:

• tell you whether we hold information about you or your child, and give you a copy you can take elsewhere;
• correct it;
• delete it;
• stop collecting a child's information, which also removes the child from any team they are on;
• stop sending you marketing messages;
• withdraw a consent you gave, for the future.

Write to contactus@sportoriety.com from the email address on your account. We will confirm you are the account holder, or the child's parent or guardian, before we act. We answer within 45 days; if a request is unusually complex we may take 45 more and will tell you why. We will not charge you or treat you differently for asking. If we refuse a request, we will say why. You can appeal by replying with the word “Appeal” within 60 days; we will answer the appeal within 45 days, and if we still refuse we will tell you how to reach your state's Attorney General.

We do not sell personal information or use it for targeted advertising, so an opt-out preference signal such as Global Privacy Control changes nothing about how we treat your information.

Residents of Texas, Connecticut, Colorado, Montana, Nebraska, Virginia, Oregon and other states with privacy laws have some of these rights by statute. We offer them to everyone.

12. Changes

When this policy changes in a way that matters, we publish a new version with a new number and date and ask every signed-in person to accept it before continuing. Older versions are available on request.

13. Contact

Sportoriety, LLC, a Texas limited liability company. PO Box 4365, Lago Vista, TX 78645. contactus@sportoriety.com.