Privacy Policy
Effective November 2, 2026
League Hub is a league management service for youth sports leagues, operated by SiteRise LLC, doing business as Acorn Lab (“we,” “us”). This policy covers the League Hubwebsite at acornlab.dev and its league sites (for example, yourleague.acornlab.dev), and the League Hubapps for iOS and Android (together, the “Service”).
The short version: we collect what a league needs to run its season, we use it only to run the Service, we don’t sell it, we don’t show ads, and we don’t track you across other apps or websites.
Who is responsible for your information
Each league decides who it invites and what it enters about its teams, players and sponsors. For that information, the league is responsible for it and we process it on the league’s behalf. For your sign-in account and for how the Service itself works, we are responsible. If you have a question about what your league has entered, ask your league first. You can always contact us at [email protected].
What we collect
| Information | Where it comes from | Why |
|---|---|---|
| Name, email address, optional phone number, and a hashed password | You, or the league admin who invites you | To create your account, sign you in and send account emails |
| Your role, league and teams | Your league admin | To show you the right schedule, team and tools |
| Schedules, field bookings, games and events | League admins and coaches | To run the league’s schedule and calendar feeds |
| Team rosters (player name and jersey number), lineups, and player evaluation scores | League admins and coaches | To build lineup cards and support player evaluations for the league |
| League rule book | League admins | To make the rules searchable |
| Sponsor and donor contact details (name, company, email, phone, address), pledges, payment status and logos | League admins, or imported from the league’s own lists | To help the league manage its sponsorships, receipts and thank-yous |
| Push notification token and device platform (apps only) | Your device, if you allow notifications | To send schedule changes, rainouts and lineup alerts |
| Sign-in session cookie, and basic server logs (such as IP address, time and page requested) | Your browser or app | To keep you signed in, keep the Service secure, and fix problems |
| An activity log of changes (for example, who booked or moved a practice) | Generated as you use the Service | So league admins can see what changed and by whom |
We do not collect precise location, contacts, photos, health information, or government ID numbers, and we do not use advertising identifiers.
Payments
When a sponsor pays a league, the payment is handled by the league’s own Stripe or Square account. We never see or store card numbers. We record that a payment was made, its amount and the provider’s reference, so the league’s books match. A league’s payment API keys are stored encrypted.
Children’s information
The Service is used by adults: league board members, coaches, volunteers and parents. Accounts are for adults, and children are not invited to create them. We do not knowingly collect personal information directly from children under 13.
Leagues and coaches may enter limited information about youth players (name, jersey number, team, lineup positions and evaluation scores) to run their teams. We use it only to provide the Service to that league. We never use it for advertising or sell it. Leagues are responsible for having the permissions they need from parents. A parent or guardian can ask the league, or us at [email protected], to review or delete their child’s information.
How we share information
We do not sell or rent personal information, and we do not share it for targeted advertising. We share it only:
- Within your league, according to your role. For example, a coach sees their own team and a league admin sees the league.
- With service providers that help us run the Service, under obligations to protect it: hosting and network delivery (including Cloudflare), email delivery (Resend), and push notification delivery (Expo, Apple and Google).
- With your league’s payment provider (Stripe or Square), when a sponsor pays a league.
- When the law requires it, or to protect the safety of any person or the security of the Service.
- In a business transfer, such as a merger or sale, where this policy would continue to apply to the information.
Cookies and tracking
We use one essential cookie to keep you signed in. We do not use advertising or analytics cookies, and the apps do not track you across other companies’ apps or websites.
How long we keep information
We keep account information while your account is active. A league’s data stays as long as the league uses the Service. When a league stops, we delete its data within 90 days of a written request from the league. When you delete your account, we delete your account information within 30 days. Records a league needs to keep (for example, its schedule history, or a payment record it relies on) may stay with the league, no longer linked to your account. Backups are overwritten on a rolling basis.
Your choices and rights
- Access and correction: you can see and edit your name and contact details in the Service, or ask us to.
- Deletion: delete your account in the app (Account → Delete account), or see how to delete your account.
- Notifications: turn push notifications off at any time in your device settings.
- California residents: you have the right to know what personal information we collect and how we use it, to request access, correction and deletion, and not to be discriminated against for using these rights. We do not sell or share personal information as those terms are defined under California law.
To make any request, email [email protected]. We will respond within 30 days and may need to confirm your identity first.
Security
Passwords are stored only as salted hashes. Sign-in tokens are stored hashed. Payment keys are encrypted at rest. All traffic is encrypted in transit, and each league can only see its own data. No system is perfectly secure. If we learn of a breach that affects your information, we will notify you as the law requires.
Where information is stored
The Service is operated from, and information is stored in, the United States.
Changes to this policy
If we make material changes, we will update the effective date above and tell league admins before the change takes effect.
Contact
SiteRise LLC (d/b/a Acorn Lab), California · [email protected]