Privacy.
Plain English. Last updated 2026-05-19.
What we collect.
- Tenant program data. The schedule, rosters, scores, brackets, and (Archive tier) source documents you upload.
- Account identifiers. Owner email, billing name, and the customer / subscription IDs from our payments provider.
- Admin audit log. Every edit on your tenant workspace writes a row to a Changes tab: timestamp, editor, before, after, source quote.
- Optional speech data. If your tenant enables live captions, we transcribe per session with consent; raw audio is stored 30 days, transcripts 1 year, approved post-game summaries permanently.
- Standard request logs. IP, user-agent, request path. Used for abuse prevention and to debug outages.
How we store it.
- Per-tenant managed database (owned by us, accessible to the tenant’s Owner email).
- Encrypted document store at the edge, for source documents and live-stream segments.
- PCI-DSS Level 1 payment processor for billing identifiers and payment cards — we never touch card numbers.
- Edge live-scoring service for in-game state and rate limits.
How long we keep it.
| Data type | Retention |
|---|---|
| Raw audio from live-caption sessions | 30 days, then auto-delete |
| Timed transcripts | 1 year, then archived |
| Approved post-game summaries / minutes | Permanent — this is the legal record |
| Executive / off-the-record portions | Never recorded, never transcribed |
| Source documents (PDFs, scans, photos) | Tenant-controlled; default retention is the lifetime of the tenancy |
| Audit log (Changes tab) | Append-only, lifetime of the tenancy |
| Standard request logs | 30 days |
Who we share with.
Nobody, except the processors below. We do not sell data, advertise against it, or share it with “trusted partners.”
- Payments processor — payment processing (PCI-DSS Level 1).
- Managed database provider — where your per-tenant data lives.
- Edge platform provider — live-scoring service, document store, and edge caching.
- Speech-to-text provider — live captions (only when a tenant explicitly enables them, and only on opt-in sessions).
- Privacy-respecting analytics — aggregate site analytics (no cookies, no cross-site tracking).
For a list of named subprocessors current as of today, email hello@madeby1891.com; we’ll share the live list under a standard DPA.
Your rights.
- Export. Download a ZIP of your site, your data, source documents, and audit log at any time from your account dashboard.
- Delete. Email hello@madeby1891.com; we delete within 30 days of confirmation.
- Correct. The AI editor inside your tenant lets you propose corrections to any record. Every change is audit-logged.
- Object. If you don’t want a particular processing activity, email us. Default opt-outs — live captions, live audio — are honored at the session level.
Minor privacy.
Player surnames are public by default. Full DOBs are hidden by default. Coaches can hide any player’s full name per-row (the public page shows “M. Johnson #14” while the internal Sheet has the full name). For minor athletes whose family opts out, the surname can be hidden too.
Cookies.
We use one strictly-necessary session cookie during the /start/ checkout flow to track the pending order. No advertising cookies, no third-party tracking pixels.
Contact.
Privacy questions go to hello@madeby1891.com. Postal mail to the PO Box on the contact page.