Privacy Policy
Last updated: June 2026
1. Introduction
DugoutSync (“we”, “our”, “us”) operates dugoutsync.com and related services. This Privacy Policy explains how we collect, use, and protect your information when you use DugoutSync.
2. Information We Collect
Account Information:
- Name, email address, and password when you create an account
- Payment information (processed securely by Stripe — we do not store card numbers)
- Team information: team name, sport, colors, template preference
Team Content (you provide):
- Player roster data: names, jersey numbers, positions, grad years, hometowns, heights, weights, photos
- Game schedules and results
- News posts and photos
- Sponsor information
Automatically Collected:
- Page views and site visit data via Vercel Analytics (anonymous, no cookies required)
- IP addresses for security and abuse prevention
- Browser type and device information
From Parent Contributors:
- Name and email address of parents who request gallery access
- Photos uploaded by approved contributors
3. How We Use Your Information
- To provide and operate the DugoutSync service
- To process payments via Stripe
- To send transactional emails (account confirmation, billing receipts, contributor approvals) via Resend
- To display your team's public website to visitors
- To improve the Service through aggregated, anonymized analytics
- To communicate product updates and important notices
We do not sell your personal information. Ever.
4. Information Shared with Third Parties
We use the following trusted service providers:
- Stripe — payment processing (stripe.com/privacy)
- Supabase — database and authentication (supabase.com/privacy)
- Vercel — hosting and analytics (vercel.com/legal/privacy-policy)
- Resend — transactional email (resend.com/legal/privacy-policy)
- Uploadthing — file and photo storage (uploadthing.com/privacy)
- Cloudflare — DNS and SSL (cloudflare.com/privacypolicy)
Each provider is contractually obligated to protect your data.
5. Player Data and Minors
- DugoutSync is a tool for coaches, not children
- Player roster data (names, stats, photos) is entered by coaches and displayed publicly on team sites by default
- Coaches are responsible for obtaining appropriate consent before publishing information about minors
- We do not knowingly collect personal information directly from children under 13
- If you believe we have inadvertently collected data about a minor, contact us at privacy@dugoutsync.com
6. Photo Gallery and Contributors
- Photos uploaded by coaches are published immediately to the team gallery
- Photos uploaded by parent contributors require coach approval before appearing publicly
- Public team sites are visible to anyone on the internet unless the coach enables private gallery mode
- Contributors receive a unique upload link valid for 90 days; we store their name and email to manage access
7. Data Retention
- Active account data is retained as long as your account is active
- Upon account cancellation, data is retained for 30 days then deleted
- You may request immediate deletion by contacting privacy@dugoutsync.com
- Payment records are retained as required by law (typically 7 years)
8. Security
- All data is transmitted over HTTPS/TLS
- Passwords are hashed and never stored in plain text (via Supabase Auth)
- Database access is protected by row-level security policies
- Payment data is handled exclusively by Stripe and never touches our servers
- We conduct regular security reviews
9. Your Rights
You have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your data
- Export your team data (roster, schedule, stats, photos)
- Opt out of non-transactional marketing emails
To exercise these rights, contact privacy@dugoutsync.com
10. Cookies and Tracking
- DugoutSync uses Vercel Analytics which is cookieless and privacy-friendly by default
- We do not use third-party advertising trackers
- We do not sell data to advertisers
- Session data is stored in secure HTTP-only cookies for authentication only
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you by email at least 14 days before material changes take effect. The “last updated” date at the top will always reflect the current version.
12. Contact
Questions about this Privacy Policy?
Email: privacy@dugoutsync.com
Mail: DugoutSync, Charlotte, NC, United States
See also our Terms of Service.