Privacy Policy

1. Information We Collect

When you use DiamondOS, we collect information you provide directly, and some automatically as you use it:

• Account Information: Name, email address, and password when you create an account.
• League Data: Team rosters, player names, game scores, schedules, and statistics you enter.
• Payment Information: Billing details processed securely through Stripe. We do not store credit card numbers.
• Usage Data: For adult accounts we log, the pages you open, the requests the app makes for you, where you tap, how fast screens load, and error reports, tied to your account; Sentry, which processes error reports and screen replays for us, gets only a scrambled code, never your account id. For accounts we don't log, including children's, only anonymous error reports with no account, no name, and no record identifiers. See Your Activity Log below.

2. How We Use Your Information

• To provide and maintain the DiamondOS platform
• To process transactions and send related information
• To send notifications about your leagues, games, and account
• To improve and personalize your experience
• To respond to support requests
• To keep the platform secure and fix problems

3. Data Sharing

We do not sell your personal data. League information (team names, scores, standings) is visible to other members of your league. We may share data with:

• Service Providers: Stripe (payments), Supabase (hosting), Vercel (infrastructure), Sentry (error reports and screen replays)
• Legal Requirements: When required by law or to protect our rights

4. Data Security

We use industry-standard security measures including encryption in transit (HTTPS), secure authentication, and role-based access controls. Your data is stored in secure, SOC 2 compliant infrastructure.

5. Children's Privacy

DiamondOS is used by youth leagues. Player accounts for minors must be created by a parent or league administrator. We comply with COPPA requirements and do not knowingly collect personal information from children under 13 without parental consent.

6. Your Rights

You may request to access, update, or delete your personal data at any time by contacting us. League commissioners can manage data for their league members.

7. Your Activity Log

When you're signed in, DiamondOS keeps a detailed log of what you do in the app so we can find and fix problems. It's tied to your account, and it's separate from the cookies and analytics described on our Cookies page.

• What we record: The pages you open while signed in; the requests the app makes to our servers on your behalf (which screen asked, which feature, whether it worked, how long it took, and how big the answer was); where you tap on a screen (the name of the button in our code, never the words on it); how fast each screen loads and responds; error and warning messages from your browser's console (the message text only, after the same removal of personal details); and a list of key actions (playing a video, opening the scoring screen, submitting a lineup, sending a message, starting a Fan Pass checkout, and uploading a document). Each entry has your account, your league, the page, request or action, the time, the app version, and a rough device and browser type (phone, tablet, computer, or app; Chrome, Safari, and so on).
• Errors: When something breaks on your screen or on our servers while you're signed in, we keep an error report, including what broke, where in our code, the app version, and the last few screens, buttons, and requests before it (names only, never what was on them or what you typed). When a request to our servers fails, we also keep the shape of what was sent and what came back, meaning field names, the ids of the records involved (a game, a team, a lineup), never your account id, numbers, and short codes, and never any words you typed, since names, notes, messages, and every other piece of free text are removed before saving; for the medical, payment, registration, waiver, and child-detail screens we keep nothing but the fact that it failed.
• Screen replays: For adult accounts we log, we may also keep a replay of what your screen showed, meaning the page's shape, where you tapped, and how you scrolled. Before it leaves your device, all text, including menus and buttons, and every box you type in is masked out, and every photo and video is blacked out; the replay shows the layout, not names, numbers, or words. The medical, payment, registration, waiver, child-detail, account, and message-writing screens are blacked out completely. We don't keep a replay for any account we don't log.
• Who helps us: Error reports and screen replays are processed for us by Sentry (Functional Software, Inc., United States), which may use them only to provide that service to us and keeps them for up to 90 days. Sentry never receives your account id, name, or email; those reports carry only a scrambled code that can't be turned back into you. Everything else in your activity log stays in our own database.
• What we don't record: Anything you type. No passwords, no form contents, no message text (we log that a message was sent, not what it says), and never the contents of a request that worked. We don't keep your photos or videos in a replay. We don't save your IP address, and the app doesn't send it to Sentry. We remove tokens, email addresses, and most search details from page and request addresses before saving them. People who aren't signed in aren't logged, and neither are pages on a league's public fan site; if something breaks for them, we keep only an anonymous error report (what broke and where), with no account, no name, and no record identifiers.
• Why: To help you when something breaks, to see what's slow or confusing so we can fix it, and to catch account abuse and security problems.
• Who can see it: Only the DiamondOS platform owner can look at it, not your commissioner, your coach, or your league.
• How long: Page views, actions, and error reports are kept 90 days; request, tap, and speed records are kept 30 days. Then they're deleted automatically. If your account is deleted, your log is deleted with it, within a day, and the scrambled code that linked you to any Sentry report is deleted too, so nothing there points at you while those reports expire.
• Kids' accounts: We don't knowingly log accounts that we know belong to children, and we don't keep screen replays for them. We can only go by the ages and league details we have, so if you think a child's account is being logged, tell us at ragubot@outlook.com. If an error happens in an account we don't log, we keep only an anonymous error report (what broke and where) with no account, no name, and no record identifiers, so we can still fix the bug.

We don't sell it.

8. Contact

Questions about this policy? Email us at ragubot@outlook.com