Privacy
How the Mustangs Hub uses information about players and families.
What we keep
- Players: name, jersey number, position, team, and game stats from games scored on the Hub.
- Players and parents who sign in: name and email address, and which players a parent looks after.
- Attendance: In, Out or Waitlist for each event, any note you add, and away dates.
- Forms you sign: what you signed, your typed name and drawn signature, when, and your device's IP address and browser.
- Season fees: amounts and payments. Card payments are made on Stripe's own page; your card details never reach the Hub.
- Phone notifications: a code from your browser that lets the Hub send notifications to that device. No location, contacts or phone number.
What's public
The public site shows team rosters, results, standings, stats, box scores and player pages with names, numbers and stats. A family can ask the team manager to keep a player off the public pages at any time; they're then shown only as “Player”. Email addresses, attendance, notes, forms, fees and anything about parents are never public.
Who sees what
- Everyone on a team sees its schedule, who's in or out, lines, volunteers and announcements.
- Team managers and coaches also see contact details, signed forms and fees for their own team.
- Parents see and answer for their own children.
Emails and notifications
We email about your team's events, forms, fees and results. Phone notifications are only sent if you turn them on, and you can choose which kinds on your Me page.
Keeping it safe
Sign-in uses one-time codes sent to your email, so there are no passwords to steal. Connections are encrypted (HTTPS). The Hub is backed up every night.
How long we keep things
- Sign-in codes: deleted as soon as they expire (15 minutes).
- Game codes for scorers: deleted a week after they expire.
- Notes on attendance answers: cleared a year after the event (the In/Out answer stays for stats).
- Contact form messages: deleted a year after they're dealt with (two years if never marked done).
- Phone notification devices: forgotten after six months without a successful delivery.
- Email log (subject lines only, never codes): kept for 90 days.
- Activity log (who changed what in the admin areas): kept for three years.
- Automatic-message records: kept for six months (final-score records stay, so nobody is told twice).
- Backups: 14 nightly and 8 weekly copies, on the club's computer only.
- Signed forms and payment records: kept as the club's records; a deleted account keeps these with the name it was signed under.
Your choices
- Download your data (and your children's) from your Me page.
- Delete your account from your Me page. Signed forms and payments stay as the club's records.
- Turn off phone notifications, by type, on your Me page. Sign out everywhere if you lose a phone.
- Keep a player off the public site: ask the team manager.
Changing or removing information
Ask your team manager to correct details, keep a player off the public pages, or remove a player or parent from the Hub, or contact the club. Signed forms and payment records are kept as the club's records.
