Privacy Policy
Effective February 2026
Information We Collect
When you create an account, we collect your name, email address, and an optional profile photo. When you use the service, we collect team rosters, player names, game schedules, lineup data, and pitch count records that you enter. We also collect standard usage data such as IP addresses, browser type, and pages visited to maintain and improve the service.
How We Use Your Information
We use your information to provide and operate the Who's on Second service, including generating lineups, tracking pitch counts, calculating rest days, and producing fairness reports. We also use your information to communicate with you about your account, send transactional emails (such as magic link sign-ins and team invitations), and improve the service.
Data Sharing
We do not sell your personal information. We share data only with service providers that help us operate the platform and when required by law. Within the app, team data is shared with other members of your team based on their assigned role (head coach, assistant coach, scorekeeper, or parent).
Third-Party Services
We use the following third-party services to operate the platform. Each provider receives only the data necessary for their function:
- Stripe processes payments and subscription billing. Stripe receives your payment method details and billing information. Stripe Privacy Policy
- Mailjet delivers transactional and lifecycle emails. Mailjet receives your email address and email content. Mailjet Privacy Policy
- Google provides optional OAuth sign-in. If you sign in with Google, we receive your name and email address from your Google account. Google Privacy Policy
- Cloudflare provides DNS, CDN, DDoS protection, and bot management (Turnstile). Cloudflare processes IP addresses and request metadata. Cloudflare Privacy Policy
- Umami provides privacy-friendly analytics, self-hosted on our own infrastructure. No cookies, no personal data collection, no cross-site tracking. Umami Privacy Info
Data Security
We use industry-standard security measures to protect your data, including encrypted connections (HTTPS/TLS), secure password hashing, and isolated multi-tenant database architecture. While no system is 100% secure, we take reasonable steps to protect your information from unauthorized access, alteration, or destruction.
Children's Privacy
Who's on Second is designed for use by coaches, scorekeepers, and parents to manage baseball and softball teams. Users must be at least 13 years old to create an account. To accept the Terms of Service and take responsibility for team data, users must be at least 18 years old. We do not knowingly collect personal information directly from children under 13.
Player names, jersey numbers, and related roster data are entered into the platform by authorized adult team members (coaches, scorekeepers, or parents). Coaches are responsible for ensuring they have appropriate authorization to enter player information and for informing parents or guardians that their player's data is stored in the service. If you are a parent or guardian and believe your child's information has been entered without appropriate authorization, please contact us at [email protected] so we can address it.
Your Rights
You can access, update, or delete your personal information at any time through your account settings. To request a data export or full account deletion, contact us at [email protected]. If you delete your account, we will remove your personal data, though some anonymized or aggregated data may be retained for analytics.
Data Retention
We retain your data for the following periods:
- Account data (name, email, profile): retained until you delete your account.
- Team and game data (rosters, lineups, pitch counts): retained until you delete your account or remove the data.
- Email delivery logs: retained for 90 days, then automatically deleted.
- Security logs (sign-in attempts, account changes): retained for a reasonable period consistent with our security needs, then automatically deleted.
- Analytics data: aggregate, anonymous usage statistics are retained indefinitely. No personally identifiable information is stored in analytics.
Cookies
We use essential cookies to keep you signed in and maintain your session. We do not use third-party advertising or tracking cookies. Session cookies are removed when you close your browser or sign out.
Changes to This Policy
We may update this privacy policy from time to time. If we make material changes, we will notify you by email or through a notice in the app. Your continued use of the service after changes take effect constitutes acceptance of the updated policy.
International Users
Who's on Second is operated from the United States. If you are accessing the service from outside the United States, your data will be transferred to and processed in the United States. By using the service, you consent to this transfer.
If you are located in the European Economic Area (EEA) or United Kingdom, we process your personal data on the following legal bases: (a) performance of our contract with you (providing the service), (b) your consent (for optional features like marketing emails), and (c) our legitimate interests (improving the service, preventing fraud). You have the right to access, correct, delete, or port your data, and to object to or restrict processing. To exercise these rights, contact us at [email protected].
Contact
If you have questions about this privacy policy or your data, contact us at [email protected].