1. Scope and who we are
FlagSketch is operated by Sandlot Holding LLC ("FlagSketch," "we," "us," or "our"). This Privacy Policy applies to flagsketch.com, the FlagSketch mobile applications, and related services that link to this policy (collectively, the "Service").
This policy does not apply to websites or services controlled by others, even if we link to them. Our Terms of Service govern your use of the Service.
2. Information we collect
Information you provide
- Account information: name, email address, authentication provider, and account preferences. If you sign in with Google or Apple, we receive the account details that provider makes available to us. We do not receive your provider password.
- Coaching and team content: playbooks, plays, formations, routes, drills, practices, notes, team details, game schedules, attendance, lineups, scorekeeping records, and other content you choose to enter.
- Roster and contact information: player names, birth years, jersey or position information, skill tags, roster notes, and, when those features are used, guardian names, email addresses, phone numbers, and relationships.
- Collaboration information: email addresses of coaches you invite, team or playbook permissions, and information about invitations and referrals.
- Communications: support messages, survey responses, product feedback, and email preferences.
- AI-assisted feature inputs: roster images you submit for name extraction and text you enter into AI-assisted search or classification features. Roster images are sent to our AI provider to process your request and are not intentionally saved by FlagSketch after the request finishes. Extracted names are added to your roster only when you choose to add them.
Information collected automatically
- Usage information: pages and features viewed, buttons or tools used, referral and campaign parameters, session identifiers, and approximate event times. For signed-in users, analytics may be associated with an account identifier, name, email address, subscription tier, and signup details.
- Device and network information: browser and device type, operating system, app platform, IP address, referring page, and similar request information.
- Diagnostics: error messages, stack traces, affected URLs, performance data, and account identifiers used to investigate problems.
- Mobile app information: push-notification token and device platform if you enable notifications, plus locally cached playbook data used for offline viewing.
Subscription information
Stripe processes subscription payments and collects your payment method, billing details, and transaction information under its own privacy policy. We receive limited payment-related information such as your Stripe customer identifier, subscription status, plan, renewal or access dates, and transaction status. We do not receive your full card number.
Information from other people and partners
Another coach or team administrator may provide your email address to invite you to a team or playbook, or may enter player and guardian information as part of managing a roster. We may also receive limited information from referral, league, or promotional partners when you use an associated link or code.
3. How we use information
We use personal information to:
- Provide, secure, maintain, and troubleshoot the Service.
- Authenticate users; sync content; support teams, sharing, printing, scheduling, lineups, scorekeeping, and other requested features.
- Process subscriptions, maintain entitlements, and prevent payment fraud.
- Send service messages such as authentication emails, invitations, receipts, security notices, and push notifications you enable.
- Send product tips, onboarding messages, or marketing emails where permitted. You can opt out of promotional messages without affecting service messages.
- Understand product usage, improve features, and develop new functionality.
- Respond to support requests, feedback, and privacy requests.
- Detect misuse, enforce our terms, comply with law, and protect rights and safety.
We may create aggregated or deidentified information that cannot reasonably identify you and use it for analytics, product development, and business operations. We will not try to reidentify information maintained in deidentified form.
4. How we disclose information
We disclose information only as reasonably needed for the purposes below. We do not sell personal information, and we do not share it for cross-context behavioral advertising or use it to serve third-party ads.
Service providers
Vendors process information for us under contractual or other restrictions appropriate to their role. Current providers include:
- Supabase for database hosting, authentication, and server functions.
- Vercel for application hosting and request delivery.
- Stripe for subscription billing and payment management.
- PostHog for product analytics, attribution, and in-app surveys.
- Sentry for error reporting and performance diagnostics.
- Resend for transactional and product email delivery.
- OpenAI for optional roster-image extraction, natural-language search, and content classification features.
- Google Firebase Cloud Messaging for mobile push notifications.
- Google and Apple when you use their sign-in services.
- Telegram to notify our small operations team about feedback you submit through the in-app feedback survey.
Other users and the public
Team members and collaborators can see content and account details made available to them under the permissions set for a team or playbook. Content you authorize us to publish as a public template or resource may be visible to anyone. Be careful not to publish roster details, private notes, or other personal information.
Legal, safety, and business transfers
We may disclose information when we reasonably believe disclosure is required by law or legal process, or is necessary to protect the Service, our users, or others. If Sandlot Holding LLC is involved in a merger, financing, acquisition, reorganization, bankruptcy, or sale of assets, information may be disclosed or transferred as part of that transaction, subject to applicable law.
5. Youth player information
We do not knowingly collect personal information directly from children under 13. A coach or authorized adult may enter limited information about youth players to manage a team. That information is provided by the adult account holder, not collected from the child. Account holders must have authority to provide and use that information, including any permission required from a parent, guardian, league, school, or organization.
Please provide only what is needed for coaching and team administration. Do not enter sensitive information such as medical records, precise home addresses, government identifiers, or account credentials in roster notes or other free-text fields. If you believe a child has created an account or information was provided without proper authority, contact us at privacy@flagsketch.com.
7. Your choices and privacy rights
- Access and correction: review and update available account and team information in the Service, or contact us for help.
- Deletion: delete your account from the Account page. You may also ask us to delete specific personal information, subject to legal and operational exceptions.
- Copy or portability: ask for a copy of personal information associated with your account.
- Email: use an unsubscribe link where provided or email us to opt out of promotional and product messages. We may still send necessary service messages.
- Push notifications: change notification permissions in your device settings.
Depending on where you live, law may give you additional rights to know, access, correct, delete, or obtain a portable copy of personal information, and to appeal a request we deny. You also may have rights concerning sensitive data, targeted advertising, sales, or certain profiling. FlagSketch does not sell personal information, share it for cross-context behavioral advertising, or use it for decisions producing legal or similarly significant effects.
Submit a request to privacy@flagsketch.com. We may need to verify your identity and authority before acting. An authorized agent may submit a request where applicable, but we may ask for proof of authorization. We will not discriminate against you for exercising an applicable privacy right.
8. Retention and security
Retention
We keep personal information only as long as reasonably necessary to provide the Service, fulfill the purposes described here, comply with law, resolve disputes, and enforce agreements. Account and coaching content generally remains while your account is active. Account deletion removes active account content promptly, although limited information may remain temporarily in backups, security records, provider systems, or records we must retain for tax, accounting, fraud-prevention, or legal purposes. Aggregated or deidentified information may be retained longer.
Security
We use reasonable administrative, technical, and organizational safeguards, including encrypted network connections, access controls, and database row-level security. However, no online service can guarantee absolute security. Protect your password and notify us promptly if you suspect unauthorized access to your account.
9. U.S. processing
FlagSketch is operated in the United States. We and our providers may process information in the United States and other places where they operate. These locations may have data protection laws different from those where you live. The Service is currently intended for users in the United States.
10. Changes and contact
We may update this policy as our Service or legal obligations change. We will post the revised policy and update the effective date. If a change is material, we will provide additional notice when reasonably appropriate, such as by email or in the Service.
For privacy questions, legal notices, or privacy requests, email privacy@flagsketch.com.
Sandlot Holding LLC
FlagSketch
California, United States