01 Scope
This policy explains how Athlete-Hub ("we", "us") handles information on
athlete-hub.org and every subdomain and application we operate under it — including
the LaxScore live scoring app, the Region 8-5A football site, and
athlete profile pages
(collectively, the "Services").
We are a small independent operation building sports apps for high school teams. We do not sell personal information, and we do not run user accounts with passwords for the public portions of our Services.
02 What we collect
Information you choose to give us
- Scorer credentials. Team staff who log in to enter live scores have a username issued by us. That is limited to authorised team personnel.
- Anything you email us. We keep correspondence only as long as needed to answer it.
Information collected automatically
- Server logs. Our web server records IP address, timestamp, requested URL, referring page, user agent and response status. This is standard Apache logging, used for security and troubleshooting.
Storage on your device
Our games use your browser's localStorage — not cookies — to remember your
chosen display name, your statistics, and your win tier between visits. That data stays on your
device and is never transmitted to us except when you deliberately post a score. Clearing your
browser storage erases it.
Cookies on our Services come from advertising, described next.
03 How we use it
| Data | Purpose |
|---|---|
| Leaderboard name, score, time | Displaying public rankings and calculating win tiers |
| Session tokens and game state | Running the game and preventing score manipulation |
| Server logs | Security, abuse prevention, diagnosing faults, aggregate traffic counts |
| Advertising identifiers | Serving ads and measuring them — handled by Google, see below |
We do not build advertising profiles ourselves, we do not sell or share personal information for money, and we do not use your data to train machine learning models.
04 Advertising & cookies
We use Google AdSense and related Google advertising products to show ads on parts of our Services. Advertising is what keeps these apps free for teams.
- Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this and other websites.
- Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to our Services and/or other sites on the Internet.
- You may opt out of personalised advertising by visiting Google Ads Settings.
- You may opt out of some third-party vendors' use of cookies for personalised advertising at aboutads.info/choices or youronlinechoices.eu.
Consent in the EEA, UK and Switzerland
If you visit from the European Economic Area, the United Kingdom or Switzerland, you will be shown a consent message before personalised advertising cookies are set. We use a Consent Management Platform certified by Google and integrated with the IAB Transparency & Consent Framework. You can consent, refuse, or manage individual purposes and vendors, and you can change your choice at any time through the "Privacy & cookie settings" link presented by that message. Refusing consent does not restrict access to our Services — you will simply see non-personalised ads.
Rewarded and interstitial ads in games
05 Third parties
| Who | Role | Policy |
|---|---|---|
| Google (AdSense / Ad Manager) | Advertising delivery, measurement, consent management | policies.google.com/privacy |
| Our hosting provider | Runs the servers that store site data and logs | — |
| Let's Encrypt | Issues the TLS certificates that encrypt your connection | letsencrypt.org/privacy |
We disclose personal information to no one else, except where we are legally required to, or where it is necessary to investigate abuse of our Services.
06 Legal bases (GDPR)
Where the EU or UK GDPR applies, we rely on:
- Consent — for personalised advertising cookies and similar technologies.
- Legitimate interests — for server logging, security, abuse prevention, and keeping the Services running correctly.
- Performance of a service you requested — for storing your game session and the score you asked us to publish.
07 Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict, or object to our use of your personal information, to withdraw consent, and to receive a copy of your data. Residents of California have the additional rights under the CCPA/CPRA to know what is collected, to request deletion, to opt out of "sale" or "sharing" of personal information, and not to be discriminated against for exercising those rights.
We do not sell personal information, and we do not share it for cross-context behavioural advertising other than through the advertising cookies described in section 4, which you can decline.
To exercise any right, email us — see section 13. Removing a leaderboard entry is quick: tell us the display name and roughly when it was posted. We may ask a question or two to confirm the request is genuine, since leaderboard names are not tied to accounts.
You also have the right to complain to your local data protection authority.
08 Children
Our Services cover high school athletics and are intended for a general audience. They are not directed to children under 13, and we do not knowingly collect personal information from children under 13.
Where a page is likely to be viewed by minors, we instruct our advertising partners to treat it accordingly and to restrict ad personalisation. If you believe a child under 13 has provided us personal information, contact us and we will delete it promptly.
Athlete profile pages are published only with the permission of the athlete and, where the athlete is a minor, their parent or guardian. A parent, guardian or athlete may ask us to remove a profile at any time and we will do so without argument.
09 Retention
- Leaderboard entries — kept until you ask us to remove them.
- Game sessions — kept while a puzzle is in progress and for a short period afterwards for scoring integrity.
- Server logs — rotated and deleted on a rolling basis, typically within a few weeks.
- Email — kept only as long as needed to resolve your enquiry.
10 Security
All traffic to our Services is encrypted with HTTPS. Our servers are firewalled, patched, run SELinux in enforcing mode, disable direct root login, and use automated intrusion banning. Configuration files containing credentials are never served over the web.
No system is perfectly secure. We keep the amount of personal information we hold deliberately small, which is the most effective protection available to us.
11 International transfers
Our servers are located in the United States. If you access the Services from outside the US, your information will be processed there. Where required, transfers of personal data out of the EEA or UK rely on the European Commission's Standard Contractual Clauses or an equivalent safeguard adopted by the relevant provider.
12 Changes
If we change this policy we will update the "Last updated" date at the top of this page. If a change materially affects how we handle your information, we will make it obvious on the site before it takes effect.
13 Contact
Privacy questions, deletion requests and takedown requests:
We aim to respond within 30 days.