🔒 Privacy Policy

The Utah Adult Baseball League ("UABL," "we," "us," or "our") operates the website at utahadultbaseball.org (the "Site"). This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and your rights regarding that information.

By creating an account or using the Site, you agree to the practices described in this policy. If you do not agree, please do not use the Site.

Account & Registration Information

When you register for an account, we collect your first and last name, email address, phone number, and a securely hashed password. Players and managers may also provide a mailing address when completing their profile.

Baseball Experience & Profile Data

We collect optional profile information including your baseball experience level, preferred playing positions, and any team affiliations. This information is used to facilitate team assignments and league administration.

User-Uploaded Content

Players, managers, and administrators may upload photos and videos to the league gallery. Uploaded media is stored on our servers and may be visible to other registered users or the public, depending on gallery settings.

Interest / Lead Form Submissions

If you submit an interest form before registering, we collect your name, email address, phone number, mailing address, and any additional information you voluntarily provide (such as baseball experience or preferred team).

Technical & Usage Information

We automatically collect certain technical information when you visit the Site, including your IP address and a rough visit count for analytics purposes. We do not use third-party advertising trackers or sell this data.

Session Cookies

We use session cookies (via NextAuth) to keep you logged in. These are secure, HTTP-only cookies that expire when your session ends or after a defined period of inactivity. We do not use persistent advertising cookies.

Payment Information

League registration fees and other payments may be collected by league administrators. Payment details for league registration are handled via Stripe by league staff and are not stored in this web application.

• To create and manage your account
• To facilitate team assignments, rosters, and scheduling
• To communicate league news, schedule updates, and important announcements
• To allow team managers to contact their players
• To process league registration and fee tracking
• To moderate gallery content and ensure community standards
• To improve the Site through aggregated usage analytics
• To investigate and resolve disputes or policy violations

We do not use your personal information for automated decision-making, profiling, or any purpose unrelated to the operation of the UABL.

We do not sell, rent, or trade your personal information to third parties.

Within the platform, certain information is visible to other users based on their role:

• Team managers can view the names, email addresses, and phone numbers of players on their roster.
• League administrators have access to all user data for the purpose of league operations.
• Public pages (schedule, standings, stats, teams) display only aggregate or publicly-appropriate league data — not personal contact information.

We may disclose information if required by law, court order, or to protect the safety of members or the public.

We take reasonable technical and organizational measures to protect your personal information:

• Passwords are hashed using bcrypt and are never stored in plain text
• The Site is served exclusively over HTTPS (TLS encryption in transit)
• Session tokens are stored as secure, HTTP-only cookies
• Password reset tokens are single-use, cryptographically hashed, and expire after one hour
• The database is stored on a secure private server and backed up daily
• Sensitive actions are audit-logged for accountability

No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

You have the right to:

• Access — request a copy of the personal information we hold about you
• Correction — update your profile information at any time via your account settings
• Deletion — request deletion of your account and associated personal data by contacting a league administrator
• Opt-out — you may request to be removed from non-essential communications

To exercise any of these rights, contact a league administrator through the Site or at the contact information provided below.

The Site uses the following types of cookies:

• Session cookie — Required for login and authentication. Automatically deleted when you log out or close your browser session.
• CSRF token — Required to protect form submissions against cross-site request forgery. Session-scoped.

We do not use advertising cookies, analytics cookies from third parties (e.g., Google Analytics), or any cross-site tracking technologies.

Your browser may allow you to block or delete cookies, but doing so will prevent you from staying logged in to the Site.

The UABL is an adult baseball league for players 18 years of age and older. The Site is not directed at children under the age of 13, and we do not knowingly collect personal information from anyone under 13. If we become aware that a user under 13 has provided personal information, we will delete it promptly.

We retain your personal information for as long as your account is active or as needed to operate the league. Historical statistics, roster records, and audit logs may be retained for multiple seasons to maintain accurate league history.

If you request account deletion, we will remove your personal contact information but may retain anonymized or aggregate data (such as game statistics) as part of league records.

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the Site after changes are posted constitutes acceptance of the updated policy.

For significant changes, we will make a reasonable effort to notify registered users via the Site's "What's New" notification system.

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact the league administration through the Site, email support@utahadultbaseball.org, or reach out to your team manager, who can escalate to a league administrator.

Utah Adult Baseball League
Salt Lake City, Utah