Privacy Policy

VolleyHQ (“VolleyHQ,” “we,” “us,” or “our”) operates the volleyball platform at volleyhq.app. This Privacy Policy describes how we collect, use, share, and protect your personal information, and explains your rights — including your rights under the California Consumer Privacy Act (“CCPA”), the California Online Privacy Protection Act (“CalOPPA”), and the Children’s Online Privacy Protection Act (“COPPA”).

By using VolleyHQ, you consent to the practices described in this Policy. If you do not agree, please do not use the Platform.

1. Information We Collect

A. Information You Provide

• Account Data: name, email address, password (hashed)
• Profile Data: username, date of birth, city/state, profile photo, skill level, sport discipline
• Event Data: registration details, waiver signatures (with timestamp, IP address, user agent), team rosters
• Payment Data: billing information (processed and stored by Stripe — we do not store full card numbers)
• Communications: messages sent via the Platform’s messaging features, support inquiries
• User Content: photos, match results, ratings, event listings you create

B. Information Collected Automatically

• Device & Log Data: IP address, browser type, operating system, referring URL, pages visited, timestamps
• Usage Data: features used, search queries, interactions with Events and profiles
• Cookies & Similar Technologies: session tokens, preference storage, analytics identifiers (see Section 8)

C. Information from Third Parties

• Social Sign-In: If you sign in via Google or another provider, we receive your name, email, and profile photo from that provider per your consent settings with them.
• Location Data: approximate location from IP address for venue and event discovery. We do not continuously track your GPS location.

2. How We Use Your Information

• To create and manage your account and authenticate your identity
• To facilitate tournament and event registrations, waiver signing, and team management
• To process payments through our third-party payment processor (Stripe)
• To display your public profile, stats, and match history to other users (subject to your privacy settings)
• To calculate and display your Sand Score rating
• To send transactional emails (registration confirmations, event reminders, password resets)
• To send marketing communications, where you have opted in (you may opt out at any time)
• To detect and prevent fraud, abuse, and violations of our Terms
• To maintain waiver signature records for legal compliance
• To improve the Platform through analytics and usage research
• To comply with applicable law, legal process, or government requests

3. How We Share Your Information

We do not sell your personal information. We share information only in these circumstances:

With Other Users (Public Profile)

Your username, profile photo, skill level, city/state, match history, and ratings are visible to other VolleyHQ users by default. You can adjust profile visibility in your settings.

With Event Organizers

When you register for an Event, the Organizer receives your name, email, skill level, and other registration details necessary to run the Event. Organizers are independently responsible for protecting this data and must not use it outside the context of their Event.

With Service Providers

We share data with vendors who help us operate the Platform, including:

• Stripe — payment processing
• Amazon Web Services (AWS) — cloud infrastructure, file storage
• SendGrid — transactional email delivery
• Mapbox — map and venue display
• Analytics providers — aggregated usage analytics

These providers are contractually bound to use your data only to provide services to us.

Legal Disclosures

We may disclose your information if required by law, court order, or governmental authority, or if we believe disclosure is necessary to protect the rights, property, or safety of VolleyHQ, our users, or the public.

Business Transfers

If VolleyHQ is involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a materially different privacy policy.

4. Your California Privacy Rights (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), gives you the following rights:

To submit a request: Email privacy@volleyhq.app with the subject line “California Privacy Request” and describe your request. We will respond within 45 days, with one possible 45-day extension where reasonably necessary.

Shine the Light (Cal. Civil Code § 1798.83): California residents may request information about our disclosure of personal information to third parties for their direct marketing purposes during the preceding calendar year. We do not disclose personal information for third-party direct marketing without your consent.

5. Children’s Privacy (COPPA)

VolleyHQ is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. Registration requires users to confirm they are at least 13 years old.

If you are a parent or guardian and believe your child under 13 has provided personal information to VolleyHQ without your consent, please contact us immediately at privacy@volleyhq.app. We will promptly investigate and delete any such information.

Users ages 13–17:A parent or legal guardian must consent to these Terms and this Privacy Policy on the minor’s behalf. We apply additional privacy-protective defaults for users who identify as minors, consistent with California’s Age-Appropriate Design Code (AB 2273).

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Platform. If you delete your account, we will delete or anonymize your data within 90 days, except where we are required by law to retain it longer (e.g., financial records, waiver signatures for legal compliance, fraud prevention records).

Waiver signatures are retained for a minimum of 7 years to support potential legal claims, as permitted under California’s statute of limitations for personal injury.

Aggregated or anonymized data that cannot reasonably be used to identify you may be retained indefinitely for analytics purposes.

7. Security

We implement industry-standard security measures including encrypted data transmission (TLS), hashed passwords (bcrypt), access controls, and secure cloud infrastructure. However, no method of transmission or storage is 100% secure. You use the Platform at your own risk and should use strong, unique passwords and keep your credentials private.

In the event of a data breach affecting your rights, we will notify you as required by California Civil Code § 1798.29 and applicable federal law.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Session cookies: keep you logged in during your session
• Preference cookies: remember your theme and UI preferences
• Analytics cookies: understand how users navigate the Platform (aggregated)

You can control cookies through your browser settings. Disabling cookies may affect certain Platform features. We honor Global Privacy Control (GPC) browser signals as opt-out of data sharing.

We do not use cross-site tracking cookies or serve targeted advertising.

9. Your Choices and Controls

• Profile visibility: Adjust what information is public in your account settings.
• Marketing emails: Unsubscribe via the link in any marketing email, or update your notification preferences in settings.
• Account deletion: Request deletion of your account by contacting privacy@volleyhq.app. Active registrations or outstanding financial obligations may need to be resolved first.
• Data portability: Request a copy of your personal data in a portable format by contacting us.

10. Third-Party Privacy

This Policy does not cover third-party services linked from the Platform (e.g., Stripe, Mapbox, social login providers). Each has its own privacy policy. We encourage you to review them.

11. Changes to This Policy

We will post any changes to this Policy on this page and update the “Last Updated” date. For material changes, we will send notice to the email address associated with your account at least 14 days before the changes take effect. Your continued use after the effective date constitutes acceptance of the updated Policy.

12. Contact Us

For privacy questions, rights requests, or concerns, contact us at: