Privacy Policy

Who we are and how to contact us

Playbook operates the Playbook sports-community service. For privacy questions, access or correction requests, objections, or deletion requests, use our privacy contact form.

Information we collect

• Account and profile information: username, authentication credentials, name, date of birth, gender, email address, phone number, profile image, biography, country/state, sports, skill level, goals and preferences. If you choose Google or Facebook sign-in, we also receive the provider's stable account identifier and the basic profile information you permit it to share, such as name, email address and profile image.
• Community and activity information: posts, photos, videos, captions, comments, reactions, friendships, squads, events, attendance, messages, reports, notification choices, badges and progress.
• Location: a saved home region and coordinates derived from that region. With permission, current device coordinates are sent to our service to find nearby activities. Current coordinates are not added to your profile unless you choose a location to save.
• Device and security information: IP address, user agent, device/browser/operating-system description, login and activity times, session identifiers, a pseudonymous signup device identifier and hashed anti-abuse signals.
• Support information: email address, support messages and any information you choose to include in correspondence.

Camera access is used only when you choose to scan an attendance QR code. Media access is used only when you choose files to upload.

How we use information

• create, authenticate, secure and support your account;
• show profiles and content according to your privacy settings;
• provide squads, activities, nearby discovery, chat and attendance features;
• send verification, security, service and opted-in notification messages;
• moderate content, investigate reports and prevent spam, fraud and abuse;
• maintain, troubleshoot and improve the service; and
• comply with law and enforce our rights.

Playbook does not sell personal data or use it for targeted advertising.

Service providers and sharing

We share only what is necessary with providers that help operate Playbook, including cloud hosting, database and object storage, email and SMS delivery, Cloudflare Turnstile for abuse prevention, OpenStreetMap services for maps and place search, and Google or Meta when you choose their sign-in service. These providers process data under their own terms and privacy commitments.

We may also disclose information when required by law, to protect users or the service, or as part of a business transfer subject to appropriate safeguards. Profile and community content is visible to other users according to the feature and privacy settings you select.

Cookies and device storage

Playbook uses the following storage to provide requested features:

• Authentication cookies:playbook_access and playbook_refresh keep you signed in. They are Secure and HttpOnly; the access cookie normally lasts 15 minutes and the refresh cookie normally lasts 14 days. Signing out or deleting the account clears them.
• Language cookie:lang remembers the selected language for up to 7 days.
• Local storage:playbook-theme remembers the selected appearance, and playbook_device_id is a pseudonymous identifier used to protect signup from automated abuse.
• Security provider storage: Cloudflare Turnstile may use necessary cookies or similar storage when a security check is shown.

We do not currently use advertising cookies or third-party analytics cookies. Blocking essential storage may prevent sign-in, security checks or preference saving from working correctly.

Retention and deletion

• Account information and user content are kept while the account is active.
• Unverified accounts may be removed after 72 hours.
• Expired login history is removed after 180 days.
• Anti-abuse registration signals are normally retained for 30 days.
• Support tickets are retained while open and for up to 180 days after closure.

Account deletion removes the account and associated data except for limited records retained for security, fraud prevention, dispute handling, legal compliance or shared-community continuity. Retained records are restricted to those purposes and are not used for marketing. See Account deletion for the process and itemised effects.

Security and international processing

We use encrypted transport, protected authentication cookies, access controls, password hashing and operational monitoring. No system is completely secure. Providers may process data outside your country, subject to applicable legal safeguards.

Your choices and rights

You can update profile details, visibility, messaging and notification settings in the app; deny device permissions; sign out; and request access, correction or deletion through our contact form. Rights vary by location, and we may need to verify your identity before acting on a request.

Age eligibility

Users must meet the minimum age shown during registration and any higher age required by local law. Where guardian consent is legally required, the account may only be used with that consent. Contact us if you believe a child provided personal data without required permission.

Changes to this policy

We may update this policy when Playbook or legal requirements change. We will update the date above and provide additional notice when a change materially affects users.