Privacy policy
Last updated: July 14, 2026
The short version
We collect only what a soccer league needs to run a season, we never sell or share your data, and you can get it back or have it deleted by asking. Most of our users are volunteers and parents — this policy is written for them, not for lawyers.
What we collect
Account details (your name and email, and a password we store only as a one-way hash). Player details entered by a parent, guardian, or league administrator: name, birth date, division, team, and any medical notes the league chooses to collect for player safety. Payment records — handled by Stripe; we see the amount and status, never your card number. Signed waivers, stored with a timestamp and IP address so the signature holds up. Messages and announcements sent through the platform, plus a delivery log of the emails we send. On this website, our waitlist form stores your email and which page you signed up from.
Children's information
Most players are minors, so we hold their information to a higher bar. Children never create accounts — a parent or guardian (or the league) enters and controls a player's information, and can correct or remove it at any time. We collect the minimum a league needs to place a child on a team safely, and we never use children's information for marketing, profiling, or anything beyond running the league.
Where your data lives
This website is delivered by Cloudflare's global network. Waitlist emails and league communications are sent through Resend, which processes data in the United States. When the LeagueMgmt application launches for your league, application data will be hosted with our infrastructure provider and the specific regions will be listed here before any league data is stored. We design for compliance with PIPEDA and BC's Personal Information Protection Act (PIPA), and where data crosses borders we say so plainly — like we just did.
Who we share it with
Our subprocessors, used only to run the service: Stripe (payments), Resend (email delivery), Cloudflare (website and application delivery), and our application hosting provider. Your league's administrators and your player's coach see the roster information they need to run the season. That's the whole list — no advertising networks, no data brokers, no exceptions.
Cookies & analytics
This website uses Cloudflare Web Analytics, which is cookieless and doesn't track you across sites — which is why you don't see a cookie banner here. The application uses only the cookies and local storage needed to keep you signed in.
Your rights
You can ask for a copy of your data, ask us to correct it, or ask us to delete it — email us and it happens, no forms or phone trees. Leagues can export their full data (players, contacts, registrations, payment records) as CSV at any time, self-serve. If you close an account, we delete the associated data after a 30-day grace period, except records we're legally required to keep (like payment records for tax purposes).
Changes to this policy
If we make a material change, league administrators get an email 30 days before it takes effect, and the date below always reflects the current version.
Contact
Questions about privacy or your data: leaguemgmt@thinkxdesign.com. You'll get an answer from a human.