Privacy Policy

Information We Collect

When you create an account, we collect your name, email address, and an optional profile photo. When you use the service, we collect team rosters, player names, game schedules, lineup data, and pitch count records that you enter. We also collect standard usage data such as IP addresses, browser type, and pages visited to maintain and improve the service.

How We Use Your Information

We use your information to provide and operate the Who's on Second service, including generating lineups, tracking pitch counts, calculating rest days, and producing fairness reports. We also use your information to communicate with you about your account, send transactional emails (such as magic link sign-ins and team invitations), and improve the service.

Data Sharing

We do not sell your personal information. We share data only with service providers that help us operate the platform and when required by law. Within the app, team data is shared with other members of your team based on their assigned role (head coach, assistant coach, scorekeeper, or parent).

Third-Party Services

We use the following third-party services to operate the platform. Each provider receives only the data necessary for their function:

• Stripe processes payments and subscription billing. Stripe receives your payment method details and billing information. Stripe Privacy Policy
• Mailjet delivers transactional and lifecycle emails. Mailjet receives your email address and email content. Mailjet Privacy Policy
• Google provides optional OAuth sign-in. If you sign in with Google, we receive your name and email address from your Google account. Google Privacy Policy
• Cloudflare provides DNS, CDN, DDoS protection, and bot management (Turnstile). Cloudflare processes IP addresses and request metadata. Cloudflare Privacy Policy
• Umamiprovides product analytics, self-hosted first-party on our own infrastructure. We won't sell this data or share it with third-party ad networks. See the Analytics section below for details on what we collect. Umami Privacy Info
• Sentry provides error and crash reporting for our website and iOS app so we can find and fix bugs. When something breaks, Sentry receives technical diagnostics: the error details, your device model, operating system, and app version. We configure it not to collect personal information, and crash data is never used for tracking or advertising. Sentry Privacy Policy

Analytics

We use self-hosted, first-party analytics (Umami, running on our own infrastructure) to understand how the app is used so we can make it better. We will never sell this data, and we won't share it with third-party advertising networks.

When you're signed in, this usage activity is tied to your account. That includes your name, email address, and account identifier, along with your device, app version, and approximate (city-level) location derived from your IP address. We also record which features you use and general usage events in the app. So while you're signed in, this information isn't anonymous.

We keep analytics data indefinitely. You can ask us to delete your personal data anytime by contacting us at [email protected].

How We Use This Data

We use this usage data only to make the app better for you. We don't use it for advertising, resale, or building marketing profiles. Here's what that looks like:

• Building new features.Seeing how the app actually gets used tells us what to build next, so we can put our time into the parts of Who's on Second that matter most to you and your team.
• Supporting you faster. When you open a support ticket, this usage context helps us understand what happened, so we can diagnose and fix your issue more quickly.

We will never sell this usage data, and we won't share it with advertisers or data brokers. Your product-usage analytics stays on our own self-hosted infrastructure, so it isn't sent to outside analytics vendors. This applies to your usage analytics specifically. The service providers and legal disclosures described under Data Sharing and Third-Party Services still cover the other data described there.

Data Security

We use industry-standard security measures to protect your data, including encrypted connections (HTTPS/TLS), secure password hashing, and isolated multi-tenant database architecture. While no system is 100% secure, we take reasonable steps to protect your information from unauthorized access, alteration, or destruction.

Children's Privacy

Who's on Second is designed for use by coaches, scorekeepers, and parents to manage baseball and softball teams. Users must be at least 13 years old to create an account. To accept the Terms of Service and take responsibility for team data, users must be at least 18 years old. We do not knowingly collect personal information directly from children under 13.

Player names, jersey numbers, and related roster data are entered into the platform by authorized adult team members (coaches, scorekeepers, or parents). Coaches are responsible for ensuring they have appropriate authorization to enter player information and for informing parents or guardians that their player's data is stored in the service. If you are a parent or guardian and believe your child's information has been entered without appropriate authorization, please contact us at [email protected] so we can address it.

Your Rights

You can access, update, or delete your personal information at any time through your account settings. To request a data export or full account deletion, contact us at [email protected]. If you delete your account, we will remove your personal data, though some anonymized or aggregated data may be retained for analytics.

Data Retention

We retain your data for the following periods:

• Account data (name, email, profile): retained until you delete your account.
• Team and game data (rosters, lineups, pitch counts): retained until you delete your account or remove the data.
• Email delivery logs: retained for 90 days, then automatically deleted.
• Security logs (sign-in attempts, account changes): retained for a reasonable period consistent with our security needs, then automatically deleted.
• Analytics data: usage activity (see the Analytics section) is retained indefinitely.

Cookies

We use essential cookies to keep you signed in and maintain your session. We do not use third-party advertising or tracking cookies. Session cookies are removed when you close your browser or sign out.

Changes to This Policy

We may update this privacy policy from time to time. If we make material changes, we will notify you by email or through a notice in the app. Your continued use of the service after changes take effect constitutes acceptance of the updated policy.

International Users

Who's on Second is operated from the United States. If you are accessing the service from outside the United States, your data will be transferred to and processed in the United States. By using the service, you consent to this transfer.

If you are located in the European Economic Area (EEA) or United Kingdom, we process your personal data on the following legal bases: (a) performance of our contract with you (providing the service), (b) your consent (for optional features like marketing emails), and (c) our legitimate interests (improving the service, preventing fraud). You have the right to access, correct, delete, or port your data, and to object to or restrict processing. To exercise these rights, contact us at [email protected].

Contact

If you have questions about this privacy policy or your data, contact us at [email protected].