Privacy Policy

Last updated: August 11, 2026

This Privacy Policy describes how Beach League, operated by Patrick Schwagler, located in Brooklyn, NY ("we," "us," or "our"), collects, uses, discloses, and protects your personal information when you use our beach volleyball league management platform and related services (the "Service").

1. Information We Collect

1.1 Information You Provide Directly

We collect information you provide when you create an account, update your profile, or use the Service, including:

  • Account Information: Name, email address, phone number, and password
  • Profile Information: Nickname, gender, skill level, height, playing position, preferred side, general location, and optional profile picture
  • Age and Consent Information: Whether the account is junior or adult, the country and state or province used for eligibility, how the age range was provided, whether guardian consent was confirmed, and when the check occurred. We do not ask for or derive an exact birthdate from an age-range response.
  • Game Data: Match results, team compositions, scores, and game statistics you enter or participate in
  • Communications: Messages, feedback, or support requests you send to us

1.2 Information Collected Automatically or by App Features

When you access or use the Service, we collect limited technical information needed to operate and protect it:

  • Operational Log Data: IP address, access time, requested route, response status, and sanitized error category
  • Authentication Data: Session tokens, refresh tokens, and login timestamps
  • Notification Data: A random app-installation identifier, Expo push token, and your notification preferences when you enable mobile notifications
  • Crash Diagnostics: When mobile crash reporting is enabled, an internal account identifier, app version, route, device and operating-system class, error type, and stack trace. We exclude contact information, message and review content, precise location, photo URLs, request and response bodies, tokens, cookies, screenshots, and session replay.

Beach League does not currently use an advertising identifier, advertising SDK, or product-analytics SDK, and does not build a behavioral profile from app taps or page views.

1.3 Location Information

You may save a city, league location, or home court to personalize nearby results. When you choose to use a device-location feature, the app requests foreground location permission and sends your current latitude and longitude to the Service only to rank nearby locations or courts. Those precise coordinates are discarded after the request and are not stored in a location-history or profile table. You can use manual city, league-location, and court selection without device location.

1.4 Cookies and Similar Technologies

We use local storage, session storage, and similar technologies to:

  • Maintain your login session
  • Remember your preferences
  • Cache Service data and restore app state
  • Protect accounts and troubleshoot operational failures

You can control these technologies through your browser settings, though disabling them may affect Service functionality.

2. How We Use Your Information

We use the information we collect for the following purposes:

  • Service Delivery: Create and manage your account, provide access to features, and deliver requested services
  • Authentication: Verify your identity using SMS verification codes sent to your phone number
  • Game Management: Track game results, calculate player rankings and statistics, manage league memberships and schedules
  • Communication: Send account-related notifications, security alerts, and respond to your inquiries
  • Service Improvement: Troubleshoot operational issues and improve reliability without advertising or cross-company tracking
  • Security: Detect and prevent fraud, abuse, security incidents, and other harmful activity
  • Community Safety: Process messages, reviews, photos, reports, and related safety signals using automated classification and human review to detect possible guideline violations
  • Legal Compliance: Comply with legal obligations and enforce our Terms of Service

3. How We Share Your Information

We do not sell your personal information. We may share your information in the following limited circumstances:

3.1 Within the Service

Certain information is visible to other users as part of the Service functionality:

  • Your profile information (name, nickname, skill level, statistics) is visible to other members of leagues you join
  • Game results and statistics are visible to league members
  • Player rankings and match history may be visible to league members

3.2 Service Providers

We share information with third-party service providers who perform services on our behalf:

  • SMS Service Provider (Twilio): To send verification codes and account-related SMS messages
  • Apple and Google: To provide federated sign-in, credential revocation where required, and Apple push notification delivery
  • Expo Push Service: To deliver privacy-conscious mobile notification payloads to devices that have opted in
  • Email Service Provider (Resend): To send transactional account, moderation, and support email
  • Hosting and Infrastructure: To store data and host the Service
  • Database Services: To securely store and manage user data
  • Object Storage: To store profile, court, and review photos and access-controlled moderation evidence
  • Geocoding Provider: To return city, place, and nearby-location results from search text or coordinates you submit for that request
  • OpenAI: To provide automated text and image safety classification and recommendation-only case triage. We limit submissions to the content and pseudonymous identifiers needed for safety review, disable response storage where supported, and do not opt this data into model training. Provider abuse-monitoring and legally required safety retention may still apply.
  • Sentry: To receive privacy-scrubbed mobile crash diagnostics when crash reporting is enabled. Beach League uses Sentry's United States hosted region and does not enable session replay, screenshots, attachments, product analytics, or advertising tracking.

These service providers are contractually obligated to use your information only for the purposes we specify and to maintain appropriate security measures.

3.3 Mobile Information Protection

Important: No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties, except as necessary to deliver SMS verification codes through our service provider.

3.4 Legal Requirements

We may disclose your information if required by law or in response to valid legal requests, such as:

  • Compliance with legal obligations, court orders, or subpoenas
  • Protection of our rights, property, or safety, or that of others
  • Investigation of fraud, security issues, or illegal activity
  • Enforcement of our Terms of Service

3.5 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will provide notice before your information becomes subject to a different privacy policy.

4. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you the Service. We will retain and use your information as necessary to:

  • Maintain your account and provide ongoing services
  • Preserve historical game data and statistics for league records
  • Comply with legal obligations (such as tax or accounting requirements)
  • Resolve disputes and enforce our agreements

Account deletion includes a 30-day recovery period. After permanent deletion, we erase account credentials, provider identifiers, profile details, social data, messages, photos, reviews, invitations, roster memberships, personal statistics, and rating history. The former player profile is no longer searchable, viewable, or usable for contact or interaction.

We retain only the portions of completed match records needed to preserve other players' histories and league records: the anonymous match position, score, winner, ranked and public flags, and the related session, league, season, and court context. The deleted participant is shown only as a non-clickable "Deleted Player"; public responses do not include their former player ID, profile link, avatar, or player attributes. These factual match records may be retained indefinitely because removing a participant would corrupt the records of everyone else in the match.

When content is reported or restricted, a limited evidence copy may be stored in a separate access-controlled system for up to 180 days after the moderation case closes, unless a legal hold requires longer retention. Content-free moderation audit metadata may be retained for one year.

5. Data Security

We implement reasonable technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction, including:

  • Encryption: Data is encrypted in transit using HTTPS/TLS protocols
  • Password Security: Passwords are hashed using industry-standard bcrypt algorithms and never stored in plain text
  • Authentication: JWT-based authentication with secure token management
  • Access Controls: Limited access to personal data on a need-to-know basis
  • Secure Infrastructure: Data stored on secure servers with regular security updates

However, no method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

6. Data Storage and International Users

Your information is stored and processed in the United States. The initial mobile release is intended for users in the United States and Canada. If you access the Service from outside the United States, your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction.

7. Your Privacy Rights

7.1 General Rights

You have the following rights regarding your personal information:

  • Access: Request access to the personal information we hold about you
  • Correction: Update or correct inaccurate information through your account settings or by contacting us
  • Deletion: Request deletion of your personal information, subject to certain legal exceptions
  • Portability: Request a copy of your personal information in a portable format
  • Opt-Out: Opt out of SMS messages by replying STOP or by contacting us

7.2 California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

  • Right to Know: You have the right to request disclosure of the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purposes for collection, and the categories of third parties with whom we share information
  • Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions (e.g., completing transactions, legal compliance, security purposes)
  • Right to Non-Discrimination: You have the right not to receive discriminatory treatment for exercising your privacy rights
  • No Sale of Personal Information: We do not sell your personal information to third parties

How to Exercise Your Rights: To exercise any of the above rights, please contact us at patrick@beachleaguevb.com. We will verify your identity before processing your request and respond within 45 days. You may designate an authorized agent to make requests on your behalf, subject to verification requirements.

7.3 Data Portability Process

If you request a copy of your personal information, we will provide it to you via email in a commonly used format (such as CSV or JSON) within 45 days of verifying your identity. The data export will include your account information, profile data, game statistics, and other personal information we maintain about you.

8. Teen and Children's Privacy

You must be at least 13 in the United States and at least 14 in Canada, including Québec, to create an account. We ask for a broad age range before we ask for registration details. If the age range is below the applicable minimum, we do not allow registration and do not ask for account information.

Junior accounts are private by default. We do not use junior data for behavioral advertising or profiling. Juniors are excluded from public and unrestricted player discovery. Only authenticated players who are already accepted friends or share an active league may discover a junior. Direct messages involving a junior require both an accepted friendship and an active shared league; organizers communicate with juniors through shared league channels.

We do not publish a junior's precise location. Device location is optional, is used only while the nearby feature is active, and can be replaced with manual city, league-location, or court selection. Profile photos and other uploads follow our moderation and audience controls.

If we learn that an account belongs to someone below the applicable minimum age, we restrict the account while a trained reviewer handles deletion, preservation required by law, and any safety escalation. A parent, guardian, or other person can report an underage account or ask questions at beachleaguevb@gmail.com.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

  • Updating the "Last updated" date at the top of this policy
  • Sending an email notification to your registered email address
  • Displaying a prominent notice within the Service

Your continued use of the Service after the effective date of the updated Privacy Policy constitutes your acceptance of the changes. We encourage you to review this Privacy Policy periodically.

10. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party sites you visit.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, including requests to exercise your privacy rights, please contact us at:

Email: beachleaguevb@gmail.com

Service Name: Beach League

Operator: Patrick Schwagler

Location: Brooklyn, NY, United States

We will respond to your inquiry within a reasonable timeframe, typically within 45 days for privacy rights requests.