Privacy Policy

LaxLeague is directed at adults. Accounts are created and held by parents, legal guardians, coaches, and league administrators — we do not offer accounts to children under 13, and we do not knowingly collect personal information directly from a child.

Information about a minor player — their name, date of birth, school, jersey number, position, and any medical or allergy notes — reaches us because their parent or legal guardian entered it into their own account when registering that child for a program. The guardian controls it, can correct it at any time, and can ask us to delete it.

If you believe a child has created an account or given us information without a guardian’s involvement, email support@laxleague.com and we will remove it.

Account information. Your name, email address, and — when you provide them — phone number and mailing address. Sign-in is handled by our authentication provider, Clerk, which stores your credentials; we never see or store your password.

Family and player information. For each player you add: first and last name, date of birth, school, position, jersey number, and (optionally) a USA Lacrosse membership number. You may also record emergency contacts — a name, phone number, relationship, and any allergy or medical notes you want a coach to have on the sideline.

Registration and signed agreements. Which seasons and options you selected, any financial-aid request or promotional code applied, and the waivers and codes of conduct you signed. A signature record stores the exact text you agreed to, its SHA-256 hash, the name you typed, the date and time, and the IP address and browser user-agent of the device you signed from. Where storage is configured we also keep a PDF copy for the league’s records.

Payment activity. Order totals, line items, discounts, the convenience fee, refund records, and the payment identifiers our processor returns. Card numbers and bank details are entered directly with Stripe and never touch our servers.

Photos and video. Images and clips uploaded to a league’s gallery or film room, their captions, and tags identifying which player or staff member appears in them.

Device and notification data. If you enable push notifications, the Apple Push Notification service device token for that install, plus whether it is a debug or production build. Your notification preferences are stored per category.

Operational logs. Ordinary server and security logs — request paths, timestamps, IP addresses, and error traces — kept to keep the service running and to investigate abuse. We also keep an audit log of administrative actions taken inside a league.

• To create and secure your account, and to sign you in across every league your family belongs to.
• To register your players, produce rosters and schedules, and give coaches the emergency information they need at a practice or game. A player’s team coaches and the league’s administrators can see the guardian names, emails and phone numbers on the family account and the primary emergency contact — allergies and medical notes included — on the team roster and its export; schedule-only viewers, scorekeepers and other families never can.
• To take payment for registrations, merchandise, and donations, and to process refunds a league approves.
• To send transactional email — a welcome message, a registration confirmation, a receipt, an invitation — and league announcements you have not opted out of.
• To deliver push notifications to devices you have enrolled.
• To keep a durable record of the waivers and codes of conduct you signed, which leagues and their insurers may need years later.
• To operate, debug, and protect the service, and to comply with the law.

We do not use your information to build advertising profiles, and we do not use players’ personal information to train machine-learning models.

Photo galleries are not public. Photos uploaded to a league are held for review and are visible only after a league administrator approves them, and only to signed-in members of that league. Images are stored as private objects and served through short-lived links rather than from a public URL.

Leagues set their own photo and media policy, and the participant agreement a guardian signs includes a photo and media release with an opt-out. Declining does not affect a child’s participation. If a photo of your child is in a league gallery and you want it removed, contact the league or write to us and we will take it down.

Your leagues. The league you register with sees the information you gave it: your contact details, your players’ registration details, emergency contacts, and the agreements you signed. Each league is a separate organization with its own administrators and coaches, and it is a controller of that information alongside us. Leagues do not see the data you keep with a different league — every request the platform makes is scoped to a single league.

Service providers. A small set of vendors process data on our instructions so the service can function. They are listed in the next section.

Legal and safety. We may disclose information when the law requires it, to enforce our terms, or to protect the rights and safety of a child, a member, or the public.

Business transfers. If HRD Lax Leagues is acquired or reorganized, information may transfer as part of that transaction; it stays subject to this policy or a successor policy at least as protective.

We do not sell personal information. We do not sell or rent your data, we do not share it for cross-context behavioral advertising, and we do not run third-party advertising or analytics trackers on our sites or in the app.

• Clerk — account creation, sign-in, and session management.
• Stripe — payment processing, payouts to leagues, and refunds. Stripe handles card data directly under its own privacy policy.
• Resend — delivery of transactional and announcement email.
• Neon — the managed PostgreSQL database that stores the platform’s records.
• Cloudflare R2 — storage for photos, videos, documents, and signed-waiver PDFs.
• Vercel — hosting for laxleague.com, every league site, and the API.
• Apple — delivery of push notifications through the Apple Push Notification service, and distribution of the iOS app.

Each provider is bound by contract to use the information only to provide its service to us. We keep this list current; if we add a provider that handles personal information, we will update it here.

Announcements. League announcements and their push notifications can be turned off per category in the app’s notification settings, or by contacting your league. One opt-out applies across every league you belong to.

Transactional email. Welcome messages, registration confirmations, receipts, and invitations are part of the service and are not subject to an opt-out; if you no longer want them, delete your account.

Push notifications. You can revoke notification permission for the LaxLeague app at any time in iOS Settings. Signing out removes the device token for that install.

Your profile and players. You can view and correct your own contact details, your players’ details, and your emergency contacts from the family area of the site or the app.

You can delete your account from the LaxLeague app (Account → Delete account) or by emailing support@laxleague.com. Deletion removes your sign-in credentials and scrubs your personal details — name, email, phone, and mailing address — from our records.

Some records survive in de-identified form. Registrations, orders, refunds, and signed waivers must remain intact for the league’s accounting, insurance, and legal obligations, so those rows are kept with your personal details stripped out. Payment records held by Stripe are governed by Stripe’s own retention rules.

Deleting your account does not delete a photo a league has already approved to its gallery; ask the league, or write to us, and we will remove it.

We keep account and family information for as long as you have an account, and league records for as long as the league operates on the platform. Signed agreements, financial records, and audit logs are retained longer where a law, an insurer, or an accounting obligation requires it. When a retention period ends, we delete or de-identify the records.

Traffic is encrypted in transit and data is encrypted at rest by our infrastructure providers. Each league’s data is isolated at the database level: every query the application makes is bound to a single league, and the database itself enforces that boundary with row-level security policies. Photos, film, and signed-waiver PDFs live in private storage reachable only through short-lived, signed links.

Access inside a league is governed by role — a coach sees their team, an administrator sees the league — and administrative actions are recorded in an audit log. No system is perfectly secure, but we design for the assumption that this data concerns children and treat it accordingly.

Depending on where you live, you may have the right to request access to the personal information we hold about you and your children, to correct it, to delete it, to obtain a portable copy, and to be free from discrimination for exercising those rights. Most of these are available directly in the product; for anything else, email support@laxleague.com and we will respond within the time the applicable law allows.

Because we do not sell personal information or share it for cross-context behavioral advertising, there is no opt-out to exercise for those purposes. If your request concerns information a league controls — a roster decision, a waiver on file — we will help you reach the right person at that league.

We use cookies that are necessary to run the service: a session cookie so you stay signed in across laxleague.com and your leagues’ sites, and cookies our infrastructure sets for security and routing. We do not set advertising cookies and we do not embed third-party trackers. Blocking essential cookies will prevent you from signing in.

LaxLeague is operated from the United States and intended for use by leagues and families in the United States. Information is stored and processed in the United States. If you use the service from elsewhere, you understand that your information will be transferred here.

We update this policy when the product changes. The effective date at the top always reflects the current version. For material changes we will give notice — by email to account holders, in the app, or with a notice on this page — before the change takes effect. Continuing to use the service after that means you accept the updated policy.

Questions, requests, or concerns about this policy or about information held by a league on the platform: support@laxleague.com.

Your league is the right first stop for anything about its own program — rosters, refunds, or a photo in its gallery. Every league site lists its contact address in the footer. Our Terms of Service explain how the platform and the leagues on it divide responsibility.