Privacy Policy

This policy explains what information Hydro Tactix Waterpolo Labs (the "Service") collects, why, who it is shared with, and the choices you have.

What we collect

• Account details — name, email, phone number (optional), profile photo (optional), password (stored only as a one-way hash), language and display preferences, and the date of your last login.
• Team content — practice plans, tactical diagrams, matches, attendance, game statistics and notes that coaches enter, plus USAWP membership status a coach chooses to record for a player.
• Recruiting information — college coaches using the Recruit Tracker can record details about prospective athletes: name, school and club, contact details, graduation year, height, weight, swim times, notes, an uploaded résumé, and the names and contact details of the athlete's club and high-school coaches. This is entered by the coach, not collected from the athlete directly, and is visible only to that coach's staff.
• Security and technical data — the IP address and browser/device type of your active sessions (so you can review and sign out other devices in Settings), and error reports (the error message, the page it happened on and your browser type) so we can fix bugs.
• Push notification tokens — if you use the iOS or Android app and allow notifications, a device token so we can send practice reminders.
• Billing — if you subscribe, Stripe collects your payment details directly. We never see or store your full card number; we keep only your Stripe customer ID, subscription status and the card's brand and last four digits.

Connected accounts (optional)

These are only used if you connect them yourself in Settings, and you can disconnect them at any time.

• Google Calendar / Outlook Calendar — we create, update and delete calendar events for your practices, matches and recruit visits, and read back changes you make to those same events. We don't read your other calendar events.
• Gmail / Outlook Mail (read-only) — on a recruit's page, we show your messages to and from that recruit's email address. Messages are fetched live each time and are never stored by the Service, never used for advertising, and never read by people except where you ask us to for support, or where required for security or by law.

Hydro Tactix Waterpolo Labs's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Access tokens for connected accounts are stored encrypted.

Cookies

We use only strictly-necessary cookies: one to keep you logged in (your session) and one to protect forms from cross-site attacks (CSRF). We do not use tracking, advertising or analytics cookies. The login page uses Cloudflare Turnstile to block automated password guessing, which may set its own strictly-necessary cookie.

Who can see your data

Team data is visible only to the coaches and players on that team; a coach decides how much of each practice their players can see. Superadmins can access account-level information (email, role, team assignment) to operate the Service, but not to share it with other teams.

Service providers

We don't sell your data or share it for advertising. We only share it with the providers needed to run the Service:

• Stripe — subscription payments.
• Google and Microsoft — calendar and mail features, only if you connect them.
• Apple and Google (Firebase) — delivering push notifications to the mobile apps.
• Cloudflare — bot protection on the login page, and network delivery.
• Sentry — error monitoring, so we can find and fix crashes.
• Our hosting provider, which stores the database and uploaded files.

Public game schedules and statistics are imported from thefosh.net and 6-8 Sports when a coach follows a team there; we only read from those services and don't send them your data.

Young athletes

Player accounts are created by invitation from a team's coach; the Service is not offered for children to sign up for on their own. If you believe we hold information about a child without the appropriate parental consent, contact us and we will delete it.

How long we keep data

We keep your data for as long as your account is active. When you delete your account, it is removed from the live database; copies in our backups are deleted automatically within 14 days. A coach can delete a recruit's record at any time.

Your choices and rights

You can view and correct your details, download a copy of your account data, and delete your account from the Settings page. Depending on where you live, you may also have the right to object to or restrict certain processing, or to complain to your local data-protection authority. To exercise any of these, contact us.

Changes to this policy

If we make a significant change, we'll update the date at the top of this page and let active users know.

Contact

Questions about this policy, or requests about your data, can be sent through the Contact section of your account Settings.