LeagueRun Privacy Policy
DRAFT: prepared internally by GizmoBuild Legal (AI-assisted). Not reviewed by a licensed attorney. Attorney review is required before this notice is removed.
Last updated: October 11, 2026
This Privacy Policy explains how GizmoBuild, LLC, a Maryland limited liability company ("GizmoBuild," "we," "us"), handles information on leaguerun.io and, at launch, in the LeagueRun product (together, the "Service"). Section 1 covers the website as it works today. Sections 2 onward describe the registration product, which has not launched yet; we will update this policy before it does. See also our Terms of Service.
1. The Website Today
leaguerun.io is a marketing site. It has no accounts and no logins. Here is everything it collects:
- Waitlist sign-ups. If you join the waitlist, we store the email address you enter, the date, and which site you signed up from. That is all. The list is stored in our database provider (Supabase) and is not readable from the website.
- Waitlist email. If we email you about the waitlist, the email is sent through our email provider (Resend). Every email has an unsubscribe link. If you unsubscribe, we add your address to a suppression list so we stop sending to it.
- Product analytics. On leaguerun.io itself we use PostHog to count page views and a small set of actions, such as clicking a "Book a demo" button. We do not record sessions, and we do not create a profile for you unless you identify yourself. If you arrive from a link that carries campaign tags (for example
utm_source), we note those tags so we know which channels bring visitors. We never send the numbers you type into the fee calculator. They stay in your browser. - Error monitoring. If the page hits a software error, we send a technical error report to Sentry so we can fix it. Reports describe the error and your browser, not you.
- Server logs. Our hosting provider (Vercel) keeps standard request logs, such as IP address, browser type, and the page requested, for a short time for security and operations.
- Fonts. The site loads its typefaces from Google Fonts, so your browser contacts Google to download them.
- Booking a call. The "Book a demo" and "Book a pricing call" buttons open a Google Calendar booking page. Anything you enter there is handled by Google under its own terms and privacy policy, and is shared with us as a calendar booking.
2. Cookies and Local Storage
We do not use advertising cookies or cross-site trackers, and we do not sell or share data for advertising. That is why the site has no cookie banner.
- Analytics storage. PostHog stores a random identifier in a first-party cookie and in your browser's local storage, so repeat visits are counted once. It contains no name or email.
- Campaign tags. If you arrived from a tagged link, the tags are kept in your browser's session storage until you close the tab.
You can block or clear cookies and site data in your browser settings. The site works normally without them.
3. The Product at Launch
When the LeagueRun registration product launches, we expect to process:
Council administrator accounts. Name, email address, council or league affiliation, and login credentials (passwords stored as secure hashes).
Family registration data. Information families submit when registering participants, typically the registering adult's name and contact details, and for each participant: name, age or birth year, and sport or team preferences ("Participant Data"). Many participants are minors; see Section 7.
Payment data. Registration fees will be processed by a third-party payment processor and passed through to councils at cost. We will receive transaction status and references, never card numbers.
Usage analytics and technical data. Product analytics on administrator usage, and standard log data.
4. How We Use Information
- To run the waitlist and tell you when LeagueRun is ready.
- To understand which pages and channels are useful, and to fix errors.
- To provide the product at launch: registration intake, team balancing, and roster management for councils.
- Participant Data is used only for league operations of the council it was submitted to. It is not used for advertising, not sold, and not shared across councils.
- To communicate: waitlist updates, registration confirmations, and account email. Marketing email only with your opt-in, and you can unsubscribe at any time.
5. Who Sees the Data
- Service providers that run the Service for us, acting on our instructions: Vercel (hosting), Supabase (database), Resend (email), PostHog (analytics), Sentry (error monitoring), Google (fonts and calendar booking), and, at launch, a payment processor.
- Your council (at launch): the council a family registers with controls its league's registration data and is its primary steward. Council administrators see registrations submitted to their council only.
- No one else. We do not sell personal information.
6. Data Retention
Waitlist emails are kept until LeagueRun launches or you ask us to remove yours, whichever comes first. Registration data (at launch) is retained for the league season(s) the council operates plus a reasonable administrative period, or as directed by the council's own retention policy. Deletion requests are honored within 30 days, except minimal records kept for security, payment, or legal reasons.
7. Children's Privacy
The website is not directed at children and does not knowingly collect information from anyone under 13.
Most league participants are minors. The registration product is built so that children never interact with the Service directly:
- Registration information about a minor is submitted by the minor's parent or legal guardian (or by a council administrator processing a family's submission), never collected from the child.
- Children cannot create accounts, and the Service does not knowingly collect any information directly from children under 13.
- Participant Data about minors is used solely to operate the league the family registered with, as directed by the council.
- Parents and guardians may review, correct, or request deletion of their child's information through their council, or by contacting us directly; we will work with the council to honor verified requests.
- If you believe a child has submitted information directly, contact us and we will remove it.
8. Your Choices and Rights
You may request access, correction, export, or deletion of your (or your child's) personal information by emailing us, or through your council at launch. Depending on where you live, state privacy laws may grant additional rights; we honor verified requests regardless of state.
9. Security
Data is encrypted in transit. The waitlist can only be written to from the website, not read. At launch: per-council access controls, hashed credentials, and payment handling delegated entirely to a payment processor so card data never touches our systems.
10. Changes to This Policy
Material changes will be announced on the site or by email, with an updated "Last updated" date. This policy will be updated and republished before the registration product launches.
11. Contact
GizmoBuild, LLC, Maryland
Email: hello@leaguerun.io