Privacy Policy

1. Information We Collect

We collect information you provide directly, including your name and email address when you sign up via Google OAuth. We also collect volleyball match data (tags, stats, player rosters) that you enter into the app.

2. How We Use Your Information

We use your information to provide and improve VolleyTag, process payments via Stripe, and communicate with you about your account. We do not sell individually identifiable personal data to third parties. We may share or commercialise anonymised, aggregated data (for example, population-level statistics about hitting efficiency or position distributions across the platform) with sports analytics partners or researchers. This data cannot be used to identify you or any individual player.

3. Data Storage

Your data is stored securely on Supabase infrastructure. Payment processing is handled by Stripe — we do not store credit card details. Data in transit is encrypted via HTTPS. Data at rest is encrypted by Supabase infrastructure.

4. Cookies & Analytics

We use cookies solely for authentication session management. We do not use advertising or tracking cookies. We use Vercel Analytics to understand aggregate page traffic — it does not use persistent advertising cookies and does not collect personally identifiable information.

5. Your Rights

You may request deletion of your account and all associated data at any time. Account deletion can be performed directly from your account settings.

6. Children's Privacy

VolleyTag is not directed at children under 13. We do not knowingly collect personal information from anyone under 13. If you are between 13 and 17, you must have parental or guardian consent before using the service. If we become aware that we have collected data from a child under 13 without verified consent, we will delete that data promptly. Parents or guardians who believe their child has submitted information to us should contact us immediately.

7. Third-Party Processors

We use the following sub-processors to operate the service: Supabase (database and authentication infrastructure), Stripe (payment processing — we do not store card details), and Vercel (hosting and edge delivery). Each processor operates under its own privacy commitments and industry-standard data protection agreements.

8. Data Retention

We retain your account data for as long as your account remains active. Match data and player rosters are retained until you delete them or close your account. On account deletion, all personal data is removed within 30 days. Anonymised aggregate analytics data may be retained longer for service improvement.

9. Organisations and Schools

If you use VolleyTag on behalf of an organisation, school, or club and require a formal Data Processing Agreement (DPA) for GDPR, UK GDPR, or institutional compliance purposes, our DPA is available at /dpa. The DPA is incorporated by reference into our Terms of Service and is effective upon your use of the service.

10. Contact

Questions about this policy? Please use the feedback option within the app.