Privacy Policy

Last updated: May 28, 2026

1. Overview

Illustrated Stats ("we", "us", or "our") provides a self-hosted, on-premises progressive web application (PWA) for basketball statistics tracking, roster management, film study, and performance analysis. The service is typically deployed by schools, clubs, or organizations ("Teams" or "Organizations") on their own infrastructure.

This Privacy Policy explains how we (as the software provider) and the organizations that self-host Illustrated Stats collect, use, and protect personal information. Because the application is self-hosted, the primary data controller is the organization that operates each instance.

2. Information We Collect (When Self-Hosted)

  • Account information: Name, email address, organization name, location (state/county/city), password hash, theme preference, 2FA verification timestamps, and account status flags.
  • Player information: First and last name, birth year and month (for age-group and eligibility calculations), graduation year, position flags, jersey numbers, contact emails (primary + delegates), invite/claim status, and optional notes.
  • Statistical and performance data: Game logs, per-player and per-team statistics, film study notes, video timestamps, and event annotations entered by coaches or staff.
  • Team and season metadata: Team names, season definitions, role assignments (Owner, Admin, Coach, AD, Member), and membership status.
  • Usage and audit logs: Login timestamps, password reset activity, theme changes, and administrative actions (limited to what is necessary for security and support).

3. Children's Privacy — COPPA (US) and GDPR-K / Age of Consent (EU/UK)

Illustrated Stats is designed for organized youth, high-school, and club basketball programs. We take children's privacy extremely seriously.

United States — COPPA (Children Under 13)

In accordance with the Children's Online Privacy Protection Act (COPPA), we do not knowingly collect personal information from children under 13 in the United States without verifiable parental consent. Organizations using Illustrated Stats are responsible for:

  • Obtaining verifiable parental consent before entering or claiming accounts for players under 13.
  • Providing parents with direct notice of the information being collected and how it will be used.
  • Allowing parents to review, delete, or refuse further collection of their child's information.

European Economic Area / UK — GDPR-K (Children Under 16)

For users in the EEA or UK, where the age of digital consent is 16 (or lower in some member states), organizations must obtain parental or guardian consent before processing personal data of children below that threshold.

Our Commitments for Minor Player Data

  • Data minimization: Only the minimum fields required for legitimate team operations (roster eligibility, age-group placement, statistical tracking, and safety) are collected for players.
  • Restricted display/export: Certain sensitive or contact fields for players determined to be minors are suppressed or redacted in public-facing views, PDF exports, and bulk reports unless the requesting user has explicit coach/admin rights on that specific team.
  • Age-group calculations: Birth year and month are used solely to compute age-group eligibility and season-appropriate cohorts. Full birth dates are never required or stored.
  • Consent and claim flows: Player profile claim and delegate invitation flows include explicit language about data use and parental involvement for minor players.

4. How We Use Information

  • Provide core basketball statistics, roster, film study, and reporting features.
  • Enable coaches and staff to manage teams, seasons, and player development.
  • Support account security (2FA, password resets, login auditing).
  • Allow organizations to export their own data for record-keeping or migration.
  • Comply with legal obligations and protect against fraud or abuse.

5. Data Sharing and Third Parties

Illustrated Stats is self-hosted. We (the software provider) do not receive, store, or process personal data from production deployments unless the organization explicitly shares logs with us for support. We never sell personal information. Organizations that self-host are responsible for their own data-sharing practices and any integrations they add.

6. Data Retention

Data is retained for the duration of the organization's active use of the system plus a reasonable period for historical season records (typically 3–7 years depending on the organization's policies and legal requirements). Organizations control deletion. When an account or player record is deleted, associated statistical and film data is removed or anonymized according to the organization's retention schedule.

7. Your Rights

Depending on your jurisdiction and relationship to the data, you may have the right to:

  • Access the personal information held about you or your child.
  • Request correction of inaccurate data.
  • Request deletion of personal information (subject to legitimate team record-keeping needs).
  • Request a portable copy of your data (export).
  • Withdraw consent (where processing is based on consent).
  • Lodge a complaint with a supervisory authority (GDPR/UK).

For production instances, these requests should be directed to the organization operating the Illustrated Stats deployment. For the software provider, contact the email below.

8. Security

We design the application with least-privilege database accounts, parameterized queries, input validation, and strong authentication (including optional 2FA). Organizations are responsible for securing their own hosting environment, network, and backups.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be announced in release notes and the policy date above will be updated. Continued use of the software after changes constitutes acceptance of the revised policy.

10. Contact

For privacy questions, data subject requests, or concerns about this policy:
Illustrated Analytics
Email: [email protected]
X: @IllustrateStats

This policy is intended to support compliance with COPPA, GDPR (including Article 8 / GDPR-K), and common app store privacy requirements. Organizations self-hosting Illustrated Stats remain the data controllers for all personal information processed within their instance.