Privacy Policy

Dugout holds a child's name, photo and season statistics. That deserves a policy you can actually read, so this one says exactly what is stored, who can reach it, and how to remove it — in plain English, without the usual hedging.

Who this covers

This policy applies to the Dugout iPhone app and to dugoutstatsapp.com. Dugout is operated by an independent developer, contactable at [email protected].

What Dugout stores

Only what the app needs to do its job. Specifically:

Your account

• Your email address, used to sign you in and to send a reset code if you forget your password.
• Your name, if you enter one.
• A scrambled version of your password. The password itself is never stored and cannot be recovered by anyone, including us.
• Sign-in sessions, so you stay logged in. Only a scrambled form of each session token is kept.

Each player you add

• Their name, jersey number, position and team, including how those changed from season to season.
• A profile photo, if you add one.
• Your chosen colour theme for them.

Each game you log

• The date, opponent, result and score.
• The statistics you enter — plate appearances, hits, RBI, stolen bases, pitching lines and the rest.
• Any notes you type, and a game photo if you add one.

Each season's schedule, if you add one

• The date, start time, opponent, field and whether it is a home game, plus any note you type.
• If you create a share link for a schedule, the link's token — a random, unguessable string — and which season it points at.

A small amount of security housekeeping

• A count of failed sign-in attempts per email address, so an account can be locked briefly after repeated wrong guesses.
• A count of password-reset requests, to stop the reset email being used to spam someone.
• Scrambled reset codes, which expire and can only be used once.

What Dugout does not do

• No advertising, and no advertising or marketing SDKs in the app.
• No analytics, telemetry or usage tracking. We do not know which screens you open.
• No location data, no contacts, no microphone, no health data, no device identifiers for tracking.
• No selling, renting, licensing or sharing your information with other companies.
• No building of profiles, and no use of your data to train machine-learning models.

Photos

Photos you add are cropped on your phone and then stored on our servers so they can appear on your other devices and on the cards you share. They are reachable only through a long, unguessable web address, are never listed publicly or indexed by search engines, and are deleted when you delete the player, the game or your account.

When you share a stat card, your phone creates the image and hands it to whichever app you choose — Messages, Photos, Mail. That share happens on your device; the image does not pass through our servers.

Children's information

Dugout is made for parents, guardians and coaches. The account holder is an adult, and the information about a child is entered by that adult about their own player. The app is not directed to children, and children are not asked to create accounts or provide information themselves.

A player's name and photo belong to you. You can change or remove them at any time, and deleting a player removes everything recorded about them, photos included.

Who else can see it

Nobody, apart from two service providers who make the app run, and anyone you deliberately send a schedule link to. Neither provider uses your data for their own purposes:

• Cloudflare hosts the servers, the database and the photo storage. Your account, players, games and photos live there.
• Resend delivers exactly one kind of email: the code you get when you ask to reset your password. It receives your email address for that purpose only.

We would also disclose information if the law genuinely required it. If that ever happens and we are permitted to tell you, we will.

Schedules you choose to share

A season's schedule is private until you create a share link for it, which only you can do, from inside the app. Once you do, anyone holding that link can open a web page showing the player's name, their team, and each game's date, time and field — and nothing else. No statistics, no photos, no contact details and nothing about your account.

• The link contains a long random token, is never listed anywhere, and search engines are asked not to index the page. Treat it as public all the same: anyone it is forwarded to can open it.
• Stop sharing, in the same place you created it, deletes the token. Every copy of the link stops working immediately, including ones already sent. Creating a new link afterwards produces a different one; the old link stays dead.
• Deleting the season, the player or your account removes the link along with everything else.
• The page also offers the games as a calendar file. If someone subscribes to it, their calendar app fetches that same page periodically until you stop sharing it.

How it is protected

• Everything travels over an encrypted connection.
• Passwords are hashed with a slow, salted algorithm plus a server-side secret, so a stolen database still does not reveal them.
• Session tokens and reset codes are stored only as hashes — the originals exist only on your device.
• Every request is checked against the signed-in account, so one account can never read another's players or games.
• Repeated failed sign-ins lock an account temporarily, and reset codes expire quickly and work once.

No system is perfect. If a breach ever affected your information, we would tell you directly and promptly.

How long it is kept, and how to delete it

Your data is kept while your account exists, because it is the thing the app is for — a record that lasts across seasons. You are in control of removing it:

• A game — delete it from the Games tab.
• A share link — Games, then Schedule, then Share, then Stop Sharing. The link stops working for everyone at once.
• A season — delete it in Settings, along with the games in it, its schedule and any share link for it.
• A player — delete them in Settings, along with every game and photo.
• Your whole account — Settings, then Account, then Delete Account. This removes your login, every player, every game and every photo.

Deletion is immediate and permanent, and there is no way for us to restore it afterwards. Backups of the database roll off within thirty days.

Your choices

You can view and correct everything Dugout holds about you from inside the app, and delete any of it as described above. If you would like a copy of your data in a file, or have any other request about your information, email [email protected] and we will sort it out.

Dugout has no marketing emails to unsubscribe from. The only email it ever sends is a password reset code you asked for.

Changes to this policy

If this policy changes in a way that affects what is collected or who can see it, the app will tell you before the change takes effect — not just quietly update this page. The date at the top always reflects the current version.

Contact

Questions, concerns or requests: [email protected]. A real person reads it.