Privacy Policy

Effective date: April 14, 2026

Club Team Manager ("we", "us", or "our") operates this website and platform. This Privacy Policy explains how we collect, use, and protect your information when you use our service.

1. Information We Collect

When you sign up or use our platform, we may collect:

• Account information: Your name, email address, and profile photo provided through Google OAuth sign-in.
• Team data: Player names, jersey numbers, positions, parent contact information, and team rosters that you enter into the platform.
• Payment records: Payment tracking data you enter (amounts, dates, status). We do not process credit cards or store financial account numbers.
• Photos: Images you upload to team photo galleries.
• Messages: Content you post in team chat.
• Usage data: Pages visited, features used, and basic device/browser information for improving the service.

2. How We Use Your Information

We use the information we collect to:

• Provide and maintain the team management platform.
• Authenticate your identity and manage role-based access (Coach, Team Manager, Parent).
• Enable team communication, roster management, and payment tracking.
• Send service-related notifications (invite links, team updates).
• Improve the platform based on usage patterns.

3. Information Sharing

We do not sell your personal information. We share data only in these limited cases:

• Within your team: Team members can see roster information, chat messages, and shared photos based on their role permissions.
• Service providers: We use Cloudflare for hosting, data storage, and content delivery. Your data is processed through Cloudflare's infrastructure.
• Google: Authentication is handled through Google OAuth. We receive your name, email, and profile photo from Google.
• Legal requirements: We may disclose information if required by law or to protect the safety of our users.

4. Data Storage and Security

Your data is stored on Cloudflare's global infrastructure using Cloudflare D1 (database) and R2 (file storage). All data is encrypted in transit via HTTPS. Authentication uses secure, HttpOnly cookies with JWT tokens.

We implement role-based access controls so parents can only see their own player data, while coaches and team managers can manage the full roster.

5. Children's Privacy (COPPA Notice)

Club Team Manager is a team management platform designed for youth soccer clubs. Because many of the players on our teams are under 13, our practices comply with the U.S. Children's Online Privacy Protection Act (COPPA).

What we collect about children

Coaches, team managers, and parents may enter the following about a player:

• First and last name
• Jersey number and position
• Date of birth (optional — used for birthday reminders)
• Photo (optional — uploaded by a parent or coach)
• Parent/guardian contact information (phone, email)

Children never interact with our service directly. All child data is entered by a parent, guardian, coach, or team manager acting on the child's behalf.

Parental consent

Before a parent joins a team and adds their child, they must affirm on the join-up screen that they are the child's parent or legal guardian and that they consent to our storing the child's information for team management. We record the consent with a timestamp.

How we use children's data

Exclusively to operate the team — populating rosters, sending RSVP reminders, tracking tournament payments, and displaying attendance to authorized team members. We do not sell, rent, or share children's data with any third party except the service providers that run our infrastructure (Cloudflare for hosting, Resend for transactional email), and only to the minimum extent needed to provide the service.

Parental rights

As a parent or legal guardian, you have the right at any time to:

• Review the information we hold about your child — available on your dashboard, or by emailing us.
• Correct or update the information — editable from your dashboard's Roster section.
• Delete the child's record — remove the player from your dashboard, or email us for a full deletion.
• Withdraw consent — leave the team, which removes your and your child's records from that team.

We do not use children's data to target advertising, profile behavior, or train machine-learning models.

Retention

Player records are retained while the child is an active member of a team. If a team is archived or the child leaves, the record is marked inactive. Inactive player records are fully purged after two years unless you request earlier deletion.

Parental review + deletion of a child's data

While signed in, parents can download a complete copy of everything stored about their children or permanently delete it at Account Settings. The Delete my account flow includes a checkbox to also remove the linked player record. For requests you can't self-serve, email [email protected] and we'll respond within 30 days.

6. Your Rights

You can:

• Access — view and update your profile information in the dashboard at any time.
• Portable export — download a JSON copy of every row we store about you (must be signed in).
• Deletion — permanently delete your account and linked children's records from Account Settings.
• Leave a team — removes your access to that team's data without deleting your account.
• SMS opt-out — reply STOP to any text message to immediately stop all SMS from us.

7. Cookies

We use a single session cookie to keep you logged in. This cookie is HttpOnly, Secure, and SameSite=Lax. We do not use tracking cookies or third-party advertising cookies.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes by posting the updated policy on this page with a new effective date.

9. Contact Us

If you have questions about this Privacy Policy, contact us at:

Club Team Manager
Email: [email protected]