Privacy Policy

Last updated: December 2, 2025

This Privacy Policy describes how Beach League, operated by Patrick Schwagler, located in Brooklyn, NY ("we," "us," or "our"), collects, uses, discloses, and protects your personal information when you use our beach volleyball league management platform and related services (the "Service").

1. Information We Collect

1.1 Information You Provide Directly

We collect information you provide when you create an account, update your profile, or use the Service, including:

  • Account Information: Name, email address, phone number, and password
  • Profile Information: Nickname, gender, skill level, age, height, playing position, preferred side, location, and optional profile picture
  • Game Data: Match results, team compositions, scores, and game statistics you enter or participate in
  • Communications: Messages, feedback, or support requests you send to us

1.2 Information Collected Automatically

When you access or use the Service, we automatically collect certain information, including:

  • Usage Information: Pages viewed, features used, time spent on the Service, and other usage patterns
  • Device Information: Device type, operating system, browser type and version, unique device identifiers
  • Log Data: IP address, access times, referring URLs, and error logs
  • Authentication Data: Session tokens, refresh tokens, and login timestamps

1.3 Cookies and Similar Technologies

We use local storage, session storage, and similar technologies to:

  • Maintain your login session
  • Remember your preferences
  • Analyze Service usage and performance
  • Improve user experience

You can control these technologies through your browser settings, though disabling them may affect Service functionality.

2. How We Use Your Information

We use the information we collect for the following purposes:

  • Service Delivery: Create and manage your account, provide access to features, and deliver requested services
  • Authentication: Verify your identity using SMS verification codes sent to your phone number
  • Game Management: Track game results, calculate player rankings and statistics, manage league memberships and schedules
  • Communication: Send account-related notifications, security alerts, and respond to your inquiries
  • Service Improvement: Analyze usage patterns, troubleshoot issues, and develop new features
  • Security: Detect and prevent fraud, abuse, security incidents, and other harmful activity
  • Legal Compliance: Comply with legal obligations and enforce our Terms of Service

3. How We Share Your Information

We do not sell your personal information. We may share your information in the following limited circumstances:

3.1 Within the Service

Certain information is visible to other users as part of the Service functionality:

  • Your profile information (name, nickname, skill level, statistics) is visible to other members of leagues you join
  • Game results and statistics are visible to league members
  • Player rankings and match history may be visible to league members

3.2 Service Providers

We share information with third-party service providers who perform services on our behalf:

  • SMS Service Provider (Twilio): To send verification codes and account-related SMS messages
  • Hosting and Infrastructure: To store data and host the Service
  • Database Services: To securely store and manage user data

These service providers are contractually obligated to use your information only for the purposes we specify and to maintain appropriate security measures.

3.3 Mobile Information Protection

Important: No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties, except as necessary to deliver SMS verification codes through our service provider.

3.4 Legal Requirements

We may disclose your information if required by law or in response to valid legal requests, such as:

  • Compliance with legal obligations, court orders, or subpoenas
  • Protection of our rights, property, or safety, or that of others
  • Investigation of fraud, security issues, or illegal activity
  • Enforcement of our Terms of Service

3.5 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will provide notice before your information becomes subject to a different privacy policy.

4. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you the Service. We will retain and use your information as necessary to:

  • Maintain your account and provide ongoing services
  • Preserve historical game data and statistics for league records
  • Comply with legal obligations (such as tax or accounting requirements)
  • Resolve disputes and enforce our agreements

We retain data for a reasonable period after account closure or inactivity to allow for potential account recovery and to maintain league historical records. You may request deletion of your data at any time as described in Section 7.

5. Data Security

We implement reasonable technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction, including:

  • Encryption: Data is encrypted in transit using HTTPS/TLS protocols
  • Password Security: Passwords are hashed using industry-standard bcrypt algorithms and never stored in plain text
  • Authentication: JWT-based authentication with secure token management
  • Access Controls: Limited access to personal data on a need-to-know basis
  • Secure Infrastructure: Data stored on secure servers with regular security updates

However, no method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

6. Data Storage and International Users

Your information is stored and processed in the United States. The Service is intended for users in the United States. If you access the Service from outside the United States, your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction. By using the Service, you consent to the transfer and processing of your information in the United States.

7. Your Privacy Rights

7.1 General Rights

You have the following rights regarding your personal information:

  • Access: Request access to the personal information we hold about you
  • Correction: Update or correct inaccurate information through your account settings or by contacting us
  • Deletion: Request deletion of your personal information, subject to certain legal exceptions
  • Portability: Request a copy of your personal information in a portable format
  • Opt-Out: Opt out of SMS messages by replying STOP or by contacting us

7.2 California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

  • Right to Know: You have the right to request disclosure of the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purposes for collection, and the categories of third parties with whom we share information
  • Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions (e.g., completing transactions, legal compliance, security purposes)
  • Right to Non-Discrimination: You have the right not to receive discriminatory treatment for exercising your privacy rights
  • No Sale of Personal Information: We do not sell your personal information to third parties

How to Exercise Your Rights: To exercise any of the above rights, please contact us at patrick@beachleague.com. We will verify your identity before processing your request and respond within 45 days. You may designate an authorized agent to make requests on your behalf, subject to verification requirements.

7.3 Data Portability Process

If you request a copy of your personal information, we will provide it to you via email in a commonly used format (such as CSV or JSON) within 45 days of verifying your identity. The data export will include your account information, profile data, game statistics, and other personal information we maintain about you.

8. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you are under 18, do not use the Service or provide any personal information. If we learn that we have collected personal information from a person under 18, we will promptly delete that information. If you believe we may have information from a child under 18, please contact us immediately at beachleaguevb@gmail.com.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

  • Updating the "Last updated" date at the top of this policy
  • Sending an email notification to your registered email address
  • Displaying a prominent notice within the Service

Your continued use of the Service after the effective date of the updated Privacy Policy constitutes your acceptance of the changes. We encourage you to review this Privacy Policy periodically.

10. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party sites you visit.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, including requests to exercise your privacy rights, please contact us at:

Email: beachleaguevb@gmail.com

Service Name: Beach League

Operator: Patrick Schwagler

Location: Brooklyn, NY, United States

We will respond to your inquiry within a reasonable timeframe, typically within 45 days for privacy rights requests.