Privacy Policy

Section 1

Overview

Baol LLC, ("Guest Player," "we," "us," or "our") operates the Guest Player platform, including our website at guestplayer.org and any associated mobile applications (collectively, the "Platform"). This Privacy Policy explains how we collect, use, disclose, and protect personal information when you use the Platform.

By creating an account or using the Platform, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Platform.

This policy applies to all users, including players, parents, coaches, team managers, club administrators, and visitors who browse without an account.

Section 2

Information We Collect

2.1 Information you provide directly

• Account information: Name, email address, phone number, and password when you register.
• Profile information: Sport, playing position(s), age group, skill level, zip code, profile photo, and bio.
• Athlete profiles: If you register as a parent, information about the athletes linked to your account, including their name, sport, position, and age group.
• Team and roster information: If you register as a coach or club admin, your team name, sport, age group, and the roster details you enter.
• Payment information: Billing name and email. Card numbers and payment credentials are processed directly by Stripe and are never stored on our servers.
• Communications: Messages you send through the Platform, inquiry forms, and support requests.

2.2 Information collected automatically

• Usage data: Pages viewed, features used, search queries, connection requests sent and received, and time spent on the Platform.
• Device and browser information: IP address, browser type and version, operating system, device identifiers, and referring URLs.
• Log data: Server logs including access times, error logs, and request details.
• Cookies and similar technologies: Session cookies for authentication, preference cookies, and analytics cookies. See Section 9 for details.

2.3 Information from third parties

We may receive limited information from payment processors (Stripe) to confirm transaction status. We do not purchase data from data brokers or import social media profiles.

Section 3

How We Use Information

We use the information we collect to:

• Create and maintain your account and provide access to Platform features.
• Enable coaches to search for and connect with available players in their area.
• Surface your player profile in search results when your availability is set to "open."
• Process payments and manage subscriptions through Stripe.
• Send transactional emails: account confirmation, receipts, connection requests, and system notifications.
• Send optional marketing communications (only with your explicit consent, which you can withdraw at any time).
• Respond to support inquiries and resolve disputes.
• Monitor for abuse, fraud, and violations of our Terms of Use.
• Improve the Platform through aggregate usage analytics.
• Comply with legal obligations.

Section 4

Sharing & Disclosure

4.1 Between users on the Platform

When your availability is set to "open," your player profile — including your name, sport, position, age group, skill level, and general location (city/zip area) — is visible to coaches and team managers with active subscriptions. Your email address and phone number are not shared until you explicitly approve a connection request.

4.2 Service providers

We share information with third-party service providers who help us operate the Platform, subject to confidentiality obligations:

• Stripe — payment processing. Stripe's privacy policy governs their handling of payment data.
• Cloud hosting and infrastructure — servers, databases, and storage.
• Email delivery — transactional and notification emails.
• Analytics — aggregate, anonymised usage statistics only.

4.3 Legal requirements

We may disclose information when required by law, court order, or valid legal process, or when we believe in good faith that disclosure is necessary to protect the safety of any person, investigate fraud, or protect our legal rights.

4.4 Business transfers

If Guest Player is acquired, merged with another entity, or undergoes a similar business transition, user data may be transferred as part of that transaction. We will notify users via email and a notice on the Platform before data is transferred and becomes subject to a different privacy policy.

Section 5

Children & Minors

Guest Player is a platform designed in part for youth travel sports. Athletes under 18 ("minors") may have profiles on the Platform, but only when created and managed by a parent or legal guardian who holds the account.

We do not allow minors to create independent accounts. The parent or guardian account holder is responsible for all information associated with their account and for ensuring the accuracy of athlete profiles they manage.

For athletes under 13, we comply with the Children's Online Privacy Protection Act (COPPA). If we learn that we have collected personal information from a child under 13 without verifiable parental consent, we will delete that information promptly. To report a concern, contact us at privacy@guestplayer.org.

Contact information for minor athletes is never shared with coaches without explicit approval from the parent or guardian account holder.

Section 6

Data Security

We use industry-standard security measures to protect your information, including:

• Encrypted transmission via TLS/HTTPS for all data in transit.
• Encrypted storage for sensitive data at rest.
• Hashed, salted passwords — we cannot recover your password, only reset it.
• Access controls limiting employee access to personal data on a need-to-know basis.
• Regular security reviews and vulnerability assessments.

No method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee absolute security. In the event of a data breach that affects your rights, we will notify affected users as required by applicable law.

Section 7

Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Platform. Specifically:

• Active accounts: Data is retained for the life of the account.
• Deleted accounts: We delete or anonymise personal data within 90 days of a verified account deletion request, except where retention is required by law (e.g., financial records).
• Transaction records: Payment and billing records are retained for 7 years to comply with tax and accounting obligations.
• Logs: Server and access logs are retained for up to 90 days.

You may request deletion of your account and associated data at any time from your account settings or by contacting us at privacy@guestplayer.org.

Section 8

Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request that we correct inaccurate or incomplete information.
• Deletion: Request deletion of your personal information, subject to legal retention requirements.
• Portability: Request your data in a structured, machine-readable format.
• Restriction: Request that we restrict processing of your data in certain circumstances.
• Objection: Object to processing based on legitimate interests.
• Withdraw consent: Withdraw consent for marketing communications at any time via your notification settings or the unsubscribe link in any email.

To exercise any of these rights, contact us at privacy@guestplayer.org. We will respond within 30 days. We may need to verify your identity before processing certain requests.

If you are located in the European Economic Area, United Kingdom, or California, additional rights may apply under GDPR, UK GDPR, or the California Consumer Privacy Act (CCPA) respectively. We will honour those rights as required.

Section 9

Cookies & Tracking

We use the following categories of cookies and similar technologies:

• Strictly necessary cookies: Required for authentication and basic Platform functionality. These cannot be disabled without breaking the Platform.
• Preference cookies: Remember your settings (e.g., billing cadence selection, availability toggle state).
• Analytics cookies: Help us understand how users interact with the Platform using aggregate, anonymised data. You may opt out of analytics cookies in your account settings.

We do not use advertising cookies or share browsing data with advertising networks. We do not use cross-site tracking technologies.

You can control cookies through your browser settings, though disabling strictly necessary cookies will affect Platform functionality.

Section 10

Third-Party Services

The Platform integrates with third-party services for payment processing and infrastructure. When you interact with those services, their own privacy policies apply:

• Stripe (stripe.com/privacy) — handles all payment card data. Guest Player never stores raw card numbers.

The Platform may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their policies.

Section 11

Policy Changes

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Update the "Last updated" date at the top of this page.
• Send a notification to registered users via the email on file at least 14 days before the change takes effect.
• Display a prominent notice on the Platform.

Continued use of the Platform after the effective date constitutes acceptance of the updated policy. If you do not agree to the revised policy, you may delete your account before the effective date.

Section 12

Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact us: