Privacy Policy

This describes what Liga collects, why, and what you can do about it. It applies to the Liga web app and the Liga Scorekeeper companion app. It doesn't apply to third-party sites you reach through Liga (a streaming platform you broadcast to, for instance) — those have their own policies.

Account info. Email address and password (your password is hashed by our authentication provider — nobody at Liga can see it in plain text).

Profile info. First/last name and, if you upload one, a profile photo.

Team & roster info. Team names, jersey numbers, and — if you or your organizer add them — player names and photos for a team roster. If you register a minor, this includes the information you provide about them.

Game data. Schedules, scores, period-by-period stats, and box scores tied to games you or your team play in, or that a scorekeeper enters on your behalf.

Organizer info. If you request or hold organizer access: organization name and any reason you give for the request, plus the events, divisions, and teams you create and manage.

Uploaded images. Avatars, team logos, event banners, and sponsor logos you or an organizer upload.

Usage & device info. Standard web server logs (IP address, browser type, pages requested) generated automatically by our hosting infrastructure for security and reliability — we don't run analytics or advertising trackers on Liga.

We don't collect payment information (Liga doesn't process payments today), we don't run ad trackers or sell data to advertisers, and we don't receive your stream credentials from the companion app beyond what your device needs locally to maintain a broadcast connection — those never touch Liga's servers.

• To create and secure your account, and let you sign in.
• To run the actual product — display rosters, schedules, standings, and live scores to the people who should see them.
• To let organizers manage their own events and teams.
• To composite the live-score overlay when you broadcast a game through the companion app.
• To keep the service secure and diagnose problems.

We don't sell your data. It's visible within Liga according to your role and the platform's access rules — for example, a team's roster is visible to the public on that team's page (that's the point of a public schedule site), while things like your email address are only visible to you and, where necessary, platform admins.

We use infrastructure providers to run Liga — a database/authentication provider (Supabase) and a hosting provider (Vercel). They process data on our behalf under their own security commitments; they don't use it for their own purposes. If you broadcast a game, the video and overlay go directly from your device to the streaming platform you chose (e.g. YouTube), under that platform's own terms — Liga is not a party to that transmission.

Liga uses a session cookie to keep you signed in. It's functional, not tracking/advertising — we don't use third-party ad or analytics cookies.

Liga accounts are created and controlled by adults (parents, guardians, coaches, or organizers) — we don't knowingly let a child create their own account or submit their own information directly. Roster entries for minors are entered by the adult registering them, who is responsible for having the right to do so. If you believe a child has provided us information directly without appropriate consent, contact us and we'll remove it.

We keep your data for as long as your account is active, so the product keeps working (your team's history, stats, and past games stay intact for everyone else who was part of them). If you delete your account, we remove your personal data — see below for exactly what that means.

From your Profile page you can:

• Correct your name and photo at any time.
• Export a copy of the personal data tied to your account as a downloadable file.
• Delete your account — this removes your login, profile, and personal identifiers. Team rosters and game stats you were part of stay intact for the other participants (with your entry unlinked from your identity, not deleted outright) so tournament history isn't erased for everyone else. If you organize events, deleting your account deletes those events and everything under them — we'll show you exactly what that includes before you confirm.

Data access is enforced server-side with row-level security — not just hidden in the UI — so a request for data you shouldn't see is rejected by the database itself, not just the app. Traffic is encrypted in transit (HTTPS), and we apply standard security headers to the site. No system is perfectly secure, but we treat this seriously and fix issues promptly when found.

If we make a material change to how we handle your data, we'll update the effective date above and, where practical, let you know.

Questions, or want to exercise any of the rights above without using the Profile page? Reach us at support@liga.app.