Privacy Policy
At RecLeague.ca, we believe recreational sports websites shouldn't spy on players or force everyone to register an invasive account. This policy explains what minimal data we collect, why we collect it, and how we protect your personal information under Canadian privacy laws.
Table of Contents
1. Our Core Privacy Commitment
RecLeague.ca was engineered from the ground up to counteract the invasive data-harvesting practices common among large corporate sports platforms. We do not force individual league players to create user accounts, download tracking apps, or surrender unnecessary personal profiles just to check game times or standings.
2. Information We Collect
We collect only the minimum information necessary to operate league fixtures and coordinate match play:
When a convenor creates or manages a league, we collect their name, email address, and a cryptographically salted/hashed password. Convenors may also optionally choose to publish a public contact email and phone number to assist their league participants.
Convenors may store a team name, optional captain name, optional captain phone number, and a randomly assigned 4-digit Team PIN used to authenticate score reporting and unlock spare player contact info.
When free agents register on the Spare Player Board, they voluntarily submit their first name, last initial, gender, skill/position preference, phone number, and email address. A private removal token is generated to allow immediate self-deletion.
Like virtually all web platforms, our servers log standard HTTP request metadata (IP address, browser type, referral URL, and timestamps) strictly for server maintenance, rate limiting, and security audits.
3. Spare Player PIN-Gated Privacy Architecture
To protect substitute players from web scrapers, automated robocalls, and marketing spam, RecLeague.ca utilizes a specialized privacy architecture:
- Never Rendered in Public HTML: Phone numbers and email addresses are never included in the initial page source or public API endpoints.
- PIN-Gated On-Demand Decryption: Contact details are only transmitted over secure HTTPS after an active team captain verifies their identity using their authentic 4-digit Team PIN.
- 1-Click Removal: Every spare is issued an unguessable removal token upon signing up. Clicking this link purges or deactivates the player record immediately without requiring admin intervention.
4. Payment Information & Financial Security
As RecLeague.ca introduces paid organizer subscriptions and team fee collection features:
PCI-DSS Level 1 Compliance & Tokenized Processing:
All electronic payment transactions (credit cards, debit, digital wallets) will be processed through certified, PCI-DSS Level 1 compliant payment service providers (such as Stripe).
RecLeague.ca never collects, processes, stores, or has access to your full credit card number, CVV code, or banking PINs. Payment data is transmitted directly from your browser to the encrypted payment gateway. RecLeague.ca retains only non-sensitive transaction records (such as transaction date, amount, currency, and payment confirmation tokens) for accounting and receipt generation.
5. How We Use Your Information
The personal information collected on RecLeague.ca is used solely for the following legitimate purposes:
- Displaying league fixtures, tournament schedules, and standings tables.
- Permitting captains to record match results and submit set scores.
- Enabling team captains to recruit spare players for upcoming games.
- Providing automated iCalendar (RFC 5545) subscription feeds for calendars.
- Delivering critical league notices, gym permit updates, or weather cancellations.
- Processing software subscriptions and generating receipts (for paid convenor accounts).
6. Zero Sale of Personal Information
Your contact information is never used for telemarketing, third-party advertising campaigns, or behavioural retargeting.
8. Data Retention & Deletion Rights
We store information only for as long as necessary to support active recreational seasons:
- Spare Players: Can remove their entry at any time using their unique removal token, which deletes or deactivates the record immediately. Convenors may also purge spare lists at the end of each season.
- League Convenors: Can update or delete teams, schedules, and scores directly from the administration dashboard, or request complete account erasure by contacting support.
9. Canadian Privacy Compliance (PIPEDA)
RecLeague.ca operates in Canada and complies with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation in Ontario. Canadian residents have the right to request access to their personal data, rectify inaccuracies, or request complete deletion of their information.
10. Contacting Our Privacy Officer
If you have questions about this Privacy Policy, wish to exercise your data rights, or want to report unauthorized use of your contact information, please contact:
RecLeague.ca Privacy Officer
Email: privacy@recleague.ca
Support: support@recleague.ca
Jurisdiction: Ontario, Canada