Privacy Policy

Cardiff & District Netball League is run by Rees as a community sports league management tool. This policy explains what information is collected through this site, why, and how it's handled. It's written in plain language rather than legal boilerplate — if anything is unclear, use the contact form and ask.

Information we collect

Account information

If you register an account, we store your username, email address, and a securely hashed password (never the password itself). Your account may be linked to a player profile and to club/team memberships within the leagues you're part of.

League, club, team, and fixture data

Club names and addresses, team rosters, fixtures, results, and standings are entered by league and club administrators to run the competition. This data is used to display schedules, results, and league tables to visitors.

Contact form submissions

If you use the contact form, we store the name, email address, and message you provide, so we can read and reply to it. A copy is also sent as an email notification via Resend (see "Third parties" below).

Usage analytics

This site may use self-hosted, cookie-free analytics (Umami) to understand overall usage — pages visited, approximate visit duration, device/browser type, coarse location (derived from IP address, which is not stored), and whether a visit is likely a returning one. This runs on infrastructure we control, doesn't set cookies, and doesn't store any persistent identifier tied to you personally — no data is shared with a third-party analytics company.

How we use this information

• To operate your account and apply the correct permissions for your role.
• To display league, club, team, fixture, and results information to visitors.
• To respond to messages sent through the contact form.
• To understand how the site is used, so it can be improved.

We do not sell your data, and we do not use it for advertising.

Third parties

The only third-party service that sees personal data from this site is Resend, used solely to relay the email notification generated when someone submits the contact form. It is not used for marketing and receives no other data. Site infrastructure (hosting and the database) is provided by DigitalOcean; the analytics described above are self-hosted, not sent to a third party.

Data storage & security

Data is stored in a managed PostgreSQL database, accessed over an encrypted connection. Account passwords are stored as salted hashes, never in plain text. Your login session is kept in your browser's local storage, not in a tracking cookie.

Data retention

Account and league data is kept for as long as your account or the relevant season/league record exists. Contact form messages are kept for as long as reasonably needed to address them and for a record of correspondence, and can be deleted on request.

Your rights

You can ask to see, correct, or delete the personal data held about you — including account data or a past contact form submission — by reaching out through the contact form.

Changes to this policy

If this policy changes, the "Last updated" date at the top of this page will change too. Material changes will be noted here.