Privacy policy
Haddonfield Youth Basketball · Last updated September 22, 2026
What we collect
To register a player and run the season we collect the player's name, grade, date of birth, school and any medical notes you choose to share, along with a parent or guardian's name, email, phone and address. Coaches provide a name, email and phone.
How we use it
Only to run the league — forming teams, publishing schedules and rosters to your team, contacting families about games and practices, and processing registration payments. We do not sell it, rent it, or use it for advertising.
Who can see it
Club administrators and commissioners see registration data for their divisions. Once rosters are published, families on the same team this season can see your child's name, grade, photo and jersey number, and your household's address and the parent and emergency contacts' names, phone numbers and emails, so teams can arrange rides. Medical notes are visible only to administrators and your child's coach, who is given them on the printed team sheet the club prepares. They are not shown anywhere in the app or on the website.
Payments are handled by Stripe and never touch our servers — we never see or store card numbers.
In the HYBA app
Families and coaches can also use the HYBA Mobile app, on iPhone and on Android. When you use it we collect the email address you sign in with; the messages you post to your team, with your name, team and the time; your RSVP answers; reports you file and people you block; notes you send us through Contact HYBA; your own player's roster photo, if you add one, which the club checks before your team can see it; and, if you allow notifications, a notification token for your phone. Coaches can also add practices and enter game scores.
We use this only to run the app and the league. Team messages are visible to the people they are addressed to on that team — the whole team, the coaches, or the families you pick — and to club administrators, who can read the messages on the teams they run and review any that are reported. Your RSVP answers are visible to the families and coaches on the team. The app shows teammates the same roster details described above. It contains no analytics or advertising, does not read your location or your contacts, and does not track you.
Who processes it for us
Vercel hosts the website and the app's server, Supabase stores our data and runs sign-in, Resend sends our email, Porkbun forwards email sent to the club's address, Stripe takes payments, and Expo with Apple's push notification service delivers notifications to the app. They handle your information only to provide those services to us, and must protect it at least as well as this policy does.
To prevent abuse — for example, repeated sign-in attempts — our servers count requests by IP address and sign-in email for a short time and delete those counts within two days.
Cookies
We use cookies only to make the site work: to keep you signed in and to hold a half-finished registration so you can come back to it. Payments are handled by Stripe, which sets its own cookies on the payment step.
We use no analytics, no advertising and no third-party tracking of any kind. Nothing here follows you to other websites, so there is nothing to opt out of and no consent banner to click.
Children's data
Accounts belong to parents and guardians, not to children. Players do not sign in. We collect a child's information only from the registering adult.
Keeping and deleting it
We keep registration records to run the club season to season. Ask us to correct or delete your family’s information and we will, except where we must keep a payment record.
In the app, More → Delete account does it straight away. It deletes your household’s sign-ins (a co-parent’s too) and removes the guardians and emergency contacts on file, your address, your children’s names, birthdates, photos, your RSVPs and your notification tokens. It also removes everything you typed into the questions on the registration form — the medical notes, the shirt size, any coach or teammate request — including from the club’s own record of corrections it has made. Messages you posted stay on the team’s board but show “Removed parent” instead of your name.
Some records stay with the club after that: registration and payment history (which we keep for our accounts), camp sign-ups, and notes you sent us through the contact form. Email us and we will remove what we are not required to keep.
Questions, or want your data removed? Email hyba@haddonfieldyouthbasketball.org or use the contact form.