Your information
Version 2026-10-02-draft · effective date to be set
Privacy Policy
AthletECO Sports Privacy Policy
Effective date: [EFFECTIVE DATE]
1. Who we are
AthletECO Sports, LLC ("AthletECO", "we", "us") runs athletecosports.com, athletecosports.app and the GameStation scoring consoles used at youth basketball events. This policy explains what personal information we collect, how we use and share it, what is public, and the choices you have.
It applies to everyone who uses our services: families, athletes, coaches, club staff, tournament directors, trainers, referees, recruiting coaches and visitors.
2. Children come first
Most athletes on AthletECO are minors, and many are under 13. We have designed the service around that:
- A child under 13 cannot have their own login. [BLOCKING — see note.] A parent or guardian manages their child's record.
- Coaches don't enter a child's birthdate. A coach adds an athlete to a roster with a name and a jersey number. A parent or guardian supplies the birthdate and grade — or, when it is missing, the club the child plays for may, because the club is responsible for age eligibility. We record who entered it, and a verified birthdate cannot be changed by either.
- Parents claim their own child by entering a code printed on their child's athlete card, so nobody can pick a child from a list.
- We never offer a way to message an athlete. When messaging arrives, it will be between adults only.
- No public rankings or leaderboards under 13U.
- Athlete photographs are taken only by our staff at events, with a guardian's consent. Families and coaches cannot upload a photo of an athlete.
- An athlete's social media handles are never public.
- We do not sell personal information, and we do not show targeted advertising.
Parents' rights. A parent or guardian can review their child's information in the Parent portal, correct it, and ask us to delete it or stop collecting it, by contacting kurtis@athletecosports.com. See section 10.
3. What we collect
Information you give us
- Account: name, email address, phone number if you give one, and password (stored by our sign-in provider, never readable by us), the roles you choose, and your notification preferences.
- About an athlete you manage: birthdate, grade, school, basketball experience, an emergency contact (name, phone and relationship), username and social media handles; availability answers for games and practices, with any note you write to the coach; tryout registrations (school, grade, school team, previous clubs, experience, position, and a guardian's name, email and phone); interest forms sent to a club; training bookings.
- If you run events or a business: your organization's or club's details, teams, schedules, locations, prices, fees, and the public page you choose to publish. Trainers also give a legal name, phone number, town, bio and specialties.
- When you contact us: your name, email, organization, role and message.
Information others give us about you
- Coaches create athletes on a roster with a first and last name, jersey number and position.
- Tournament directors may enter an official's name and email to assign them to games.
- Clubs and tournament directors record invoices and payments — amount, method, payer name and a reference.
- Scorers at a GameStation record each game: the score, clock, fouls, and which athlete scored.
- Background-check and safeguarding-training providers tell us whether a trainer passed and when it expires. We never receive or store the report itself.
Information our staff record at events
- Combine measurements: height, wingspan, vertical jump and broad jump.
- Identity verification: that an athlete's age was verified, when, by whom and by what method. We record the result, not a copy of the document shown.
- Profile photographs, with a guardian's consent.
Information collected automatically
- Sign-in cookies that keep you logged in. These are necessary for the service to work.
- Preferences stored in your browser, such as whether the menu is open and which maps app you use for directions.
- Your location, only when you ask for it. If you press "near me" when searching tournaments or trainers, your browser asks your permission first. It is used only in your browser to sort the list, and is not sent to us or stored.
- Server logs kept by our hosting providers, such as IP address, browser type and the pages requested. [CONFIRM RETENTION WITH PROVIDERS.]
- Scoring consoles report which court they are on and when they last checked in, so we can respond if one goes offline during an event.
We do not use analytics, advertising or tracking cookies.
We do not collect medical information. Waivers and forms on AthletECO do not ask for conditions, medications or health details.
4. How we use information
- To run the service: accounts, schedules, scoring, standings, rosters, registrations, invoices, bookings and waivers.
- To show each person what they are entitled to see, and nothing more.
- To calculate statistics, badges, rankings and leaderboards from game records.
- To verify athletes' ages for events that require it.
- To vet trainers before they are listed.
- To send messages you need: sign-in links, registration decisions, receipts, invitations and reminders. You can turn off optional notifications in Settings; messages you need to use the service, such as sign-in links, cannot be turned off.
- To keep the service secure, investigate misuse, and make sure platform fees are paid (see the Terms of Service, section 9).
- To keep events running, including alerting our staff if a scoring console goes offline.
- To comply with the law.
We do not use personal information for advertising, and we do not sell it or share it for others' advertising.
5. What is public
Anyone, without an account, can see:
- schedules, live and final scores, brackets and standings;
- team rosters: each athlete's first and last name, jersey number, position and team;
- each athlete's scoring in each game, and box scores built from it;
- an athlete's public card: name, club, jersey, age group, whether their identity is verified, and their badges and points;
- rankings and points leaderboards, for 13U and older only;
- the public pages of approved clubs and currently-vetted trainers (no contact details, a town rather than an address), and coach pages a coach chooses to publish;
- pictures uploaded for a tournament, club or team.
Never public: an athlete's birthdate, grade, athlete code, social media handles, measurements, photograph, contact details, availability answers, payments and bookings; a trainer's legal name and phone number; anyone's email address.
6. Who can see what inside AthletECO
| Information | Who can see it |
|---|---|
| An athlete's birthdate and grade | The athlete's guardians, the athlete, the staff of the club they play for, and AthletECO administrators |
| An athlete's school, experience and emergency contact | The athlete's guardians, the athlete, the staff of the club they play for, and administrators |
| A guardian's name, email and phone | The guardian, administrators, and the clubs their athlete plays for |
| An athlete's measurements and photograph | The athlete's guardians, the athlete, their coach, and administrators |
| An athlete's social media handles | The athlete's guardians, the athlete, and their coach |
| Availability answers | The family and the team's coaches and club staff. Other families on the team see a first name, last initial and the answer, not any note |
| Tryout registrations and interest forms | The club they were sent to |
| Invoices and payments | The family, the club or tournament organization that issued them, and administrators |
| Training bookings | The family, the trainer, and administrators |
| A trainer's legal name, phone and screening outcome | The trainer and administrators |
AthletECO administrators can see all information, to support users, resolve disputes and keep the service safe. When an administrator opens a person's full record, the access and the reason are logged in a record no one can edit. [BLOCKING — see note.]
7. Who we share information with
The organizers you deal with. When you register a team, join a club, answer a tryout, book a trainer or play in an event, the tournament organization, club, coach or trainer involved receives what they need to run it. They are responsible for how they use it. A club can export its tryout list to a spreadsheet; once exported, it is subject to the club's own practices.
Service providers that help us run AthletECO, under contracts limiting their use of the information:
| Provider | What they do | What they receive |
|---|---|---|
| Supabase | Database, sign-in and file storage | All information held on AthletECO |
| Vercel | Website hosting | Requests to the website, and server logs |
| Resend | Sending email | Your email address and the message |
| Google Maps Platform | Address search when a venue or practice location is typed, and nearby place search | The text typed into the search box |
| Pushover | Alerting our staff to a console problem | The tournament, court and game involved — not information about athletes or families |
| Twilio | Sending text messages to people who turn them on: schedule updates, and our staff's alerts | The mobile number and the text: a team, an event, a time and a place |
| [BACKGROUND-CHECK PROVIDER] | Screening trainers | Information the trainer gives the provider directly, under the provider's own consent |
| [PAYMENT PROCESSOR — WHEN LIVE] | Card payments | Payment details |
Text messages. We send texts only to people who turn them on, and never to athlete accounts. Parents, guardians, coaches and team staff can turn on schedule texts in Settings: a text when a schedule with one of their teams is published or one of their games moves, under the terms at athletecosports.com/sms/schedule. AthletECO staff can sign up for operational alerts, under the terms at athletecosports.com/sms. We keep the number, the wording agreed to and when. We do not sell, rent or share mobile numbers or text-message consent with third parties or affiliates for marketing or promotional purposes; a number is shared only with Twilio, to deliver those texts.
Links you follow. An athlete's social media handles open the athlete's page on that platform. We send nothing to those platforms.
Legal and safety. We may share information when the law requires it, to respond to legal process, or to protect a child or anyone else from harm.
Business transfer. If AthletECO is merged, acquired or sells its assets, information may transfer to the new owner, who must honor this policy for information collected under it.
8. How long we keep information
[BLOCKING — NOT YET DECIDED.]
| Information | Kept for |
|---|---|
| Accounts | [PERIOD after the account is closed] |
| Game records, scores and statistics | [PERIOD / permanently as the historical record of the game] |
| Payment records | [PERIOD — likely set by tax and accounting obligations] |
| Signed waivers | [PERIOD — set by the answer to the waiver retention question] |
| Athlete identity-verification history | [PERIOD] |
| Trainer screening outcomes | [PERIOD] |
| Tryout registrations and interest forms | [PERIOD after the tryout] |
| Email records | [PERIOD] |
| Administrator access log | [PERIOD] |
9. How we protect information
- Access rules enforced by the database itself, not only by the website, and tested automatically.
- An athlete's birthdate and grade can be reached only through checks that confirm the person asking is entitled to it.
- Payment records, athlete identity changes and trainer screening outcomes cannot be edited or deleted, so they cannot be quietly altered.
- Administrator access to a full record is logged.
- Data is encrypted in transit. [CONFIRM ENCRYPTION AT REST WITH SUPABASE.]
No system is perfectly secure. If a breach affects your information, we will notify you as the law requires.
10. Your choices and rights
- See and correct: most of your information, and your athlete's, is in your portal, where you can correct it.
- Notifications: turn optional email notifications on or off in Settings.
- Social handles: a guardian can remove an athlete's social handles at any time.
- Photograph: a guardian can withdraw consent, and we will delete the photograph. [NO PROCESS YET — TO BUILD WITH THE CONSENT IN THE WAIVER, PART A.]
- Delete your account: from Settings, at any time. Your login, name, phone number and links to athletes and teams are erased; games your teams played and payments already recorded stay, shown as "Deleted user", because they are other people's records too. If you are the only owner of a club or organization, you will be asked to hand it on first.
- Delete your athlete's information: ask us at kurtis@athletecosports.com. [PROCESS TO BE BUILT — see note.]
- Parents of children under 13: you can review your child's information, ask us to delete it, and refuse further collection.
Depending on where you live, you may have other rights under state law, such as to obtain a copy of your information or to appeal a decision we make about a request. [STATE-LAW RIGHTS — COUNSEL TO CONFIRM WHICH APPLY.] We will not treat you differently for using them.
11. Trainers
If you apply as a trainer, we record the outcome of your background check and safeguarding training — whether you passed, when it expires, the provider and the provider's reference — but never the report. Your legal name and phone number are never public. Your public page shows the name, town, bio and specialties you choose. [FCRA NOTICES — COUNSEL TO ADVISE.]
12. Where information is stored
AthletECO is for use in the United States. Information is stored in the United States by our service providers. [CONFIRM SUPABASE AND VERCEL REGIONS.]
13. Changes to this policy
We will post any change here and update the effective date. For a material change, we will tell account holders by email before it takes effect and, where the law requires, ask parents for fresh consent.
14. Contact
AthletECO Sports, LLC, 6 William Albert Way, Lovettsville, VA 20180.
Email: kurtis@athletecosports.com