Privacy Policy

1. Introduction

Ribby Sports (ribbysports.com) is operated by ribby.dev LLC (“we”, “us”, “our”). This policy explains what information we collect, how we use it, and the choices you have. We collect as little as we need to run tournaments.

2. Information We Collect

• Organizer accounts. Your name, email address, and password (stored only as a secure one-way hash, never in readable form), plus which organizations you belong to and your role. When you sign in we record the network (IP) address and browser of the session so we can keep your account secure.
• Invitations. The email address of anyone an organizer invites, so we can send the invitation.
• Tournament information. What organizers enter: tournament names, dates, and locations; team and field names; schedules; scores and a history of score changes; and the organization’s logo, tagline, and website.
• Umpires. Umpires do not have accounts. After an umpire enters the scoring code, a cookie on their phone proves it was entered (it does not contain the code). To stop codes being guessed, we keep a count of wrong attempts tied to a random device identifier and to a one-way hash of the network address; we never store the address itself.
• Contact form. Your name, email address, phone number and organization (if you give them), your message, and whether you agreed to receive updates.
• Server logs. Our hosting provider keeps standard request logs (such as IP address, browser, and pages requested) for security and to keep the service running.
• Abuse limits. To stop automated abuse of sign-in, password reset, and the contact form, we keep short-lived counts of recent attempts. Each count is stored under a one-way scrambled form of the network or email address, never the address itself.

We do not use analytics or advertising trackers, and we do not collect information about players.

3. Cookies and Local Storage

• A sign-in cookie keeps organizers signed in.
• An umpire scoring cookie lasts up to a week; the umpire device cookie described above lasts up to a year.
• Your browser’s local storage remembers small choices on your device, such as which field you are umpiring.

We do not set third-party or advertising cookies.

4. How We Use Your Information

• To run the service: build brackets and schedules, record scores, and show tournament pages.
• To send account email, such as invitations and password resets.
• To keep the service secure and prevent abuse, such as guessing umpire codes.
• To reply to messages you send us through the contact form.
• To send occasional updates about Ribby Sports, only if you agreed on the contact form. Every update has an unsubscribe link, and you can also ask us to stop at any time.
• To meet legal obligations.

5. Public Information

When an organizer publishes a tournament, its name, dates, location, teams, fields, schedule, scores, and bracket become visible to anyone with the link, and it appears on the organization’s page along with its logo, tagline, and website. Draft tournaments are not public.

6. Sharing of Information

We do not sell, rent, or trade personal information. We use these service providers to operate Ribby Sports:

• Vercel — hosting.
• Railway — the database where accounts and tournament data are stored.
• Resend — sending email (invitations, password resets, contact form messages, and updates to people who agreed to them).
• Turso — the database for our mailing list, holding the name, email address, and phone number (if given) of people who agreed to updates.
• Cloudflare — domain name services for ribbysports.com.

Each provider handles information only to provide its service to us. We may also disclose information if the law requires it. Members of an organization can see that organization’s tournaments and the other members.

7. Children

Ribby Sports is for tournament organizers and is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we will delete it.

8. Data Retention

• Account information is kept while the account is active.
• Tournament information is kept until the organizer deletes the tournament, which removes it along with its teams, schedule, and scores.
• Records of wrong umpire code attempts hold only hashed identifiers and are cleared when the organizer replaces the code or unlocks umpire phones, or when the tournament is deleted.
• Contact form messages are kept as long as needed to reply and follow up. If you agreed to updates, your name and email are kept until you unsubscribe.

Backups may hold copies for a limited time after deletion.

9. Your Choices and Rights

You can ask to see, correct, or delete your personal information by contacting us. Organizers can edit or delete their tournaments and organization details in the app. For information in a particular tournament, such as a team name, we may refer you to the organizer who runs it.

10. Security

We use encrypted connections (HTTPS), store passwords and scoring codes only as one-way hashes, and keep each organization’s data separate from every other organization’s. No system is perfectly secure, but we work to protect your information.

11. Changes to This Policy

We may update this policy from time to time. The “Last updated” date above shows the latest change.

12. Contact

For questions about this policy or your information, email hello@ribby.dev or use our contact form.