Privacy policy

Last updated November 11, 2026

This policy explains what information Mohammed A Wasay ("we") collects through Matchday, why, and the choices you have. Matchday has no ads, uses no third-party trackers and does not sell or share personal information for advertising.

Information we collect

• Account details: name, email, optional phone, time zone, a hashed password and an optional two-step sign-in key.
• Family and player details you enter: guardian titles and pronouns, player names, birth dates, optional gender and pronouns, T-shirt size, medical notes, allergies and emergency contacts.
• Coaching records: attendance and short notes coaches write about a player's progress. Only the team's coaching staff and administrators see notes.
• Training materials: videos, documents and links coaches share with their team.
• Team activity: rosters, schedules, replies, scores, snack turns, chat messages and support tickets.
• Photos and links: photos coaches and parents upload to a team, chat or event, and links to videos or live streams hosted elsewhere. Photos are re-encoded on upload, which removes camera and location data. Matchday does not accept video uploads.
• Home address: each parent's street address, city, state and ZIP, collected at registration for carpools and emergencies. To place it on a map, the address is sent once to the US Census Bureau geocoder, a free government service, and the coordinates are stored.
• Carpool and volunteer sign-ups: rides offered or requested, direction, seats, departure time, riders and volunteer slots.
• Device notifications: if you turn them on, a push address from your browser's push service so we can deliver alerts.
• Privacy choices: your cookie and media choice, the time, the policy version, a salted hash of your IP address and your browser type, kept as proof of consent.
• Security records: sign-in times, IP addresses and an audit log of administrative changes.

How we use it

• To run teams: schedules, reminders, clash alerts, scores, chat and snack rotations.
• To send service email such as invites, reminders, notices and password resets.
• To secure the service, prevent abuse and investigate problems.

Who can see it

• Guardians in your family see your family's details.
• Coaches and club admins of a team see that team's roster, guardian contact details and players' medical and emergency notes.
• Other families on a team see first names, last initials, jersey numbers, positions and a player's birth month and year. They never see full birth dates, email addresses, phone numbers or medical notes.
• Email addresses, phone numbers and home addresses are shown only to the team's coaches and to club and platform administrators. In carpools, other parents see a driver's city, ZIP and distance, never the street address.
• Chat messages are visible to the members of that chat. Coaches and administrators can remove team messages and review reported ones.
• Platform administrators can see records to provide support and correct errors. Every administrative change is logged.
• Service providers that host the site (DreamHost, United States) and deliver email process data for us under confidentiality obligations. Browser push services (Apple, Google, Mozilla or Microsoft) carry notification content to your device if you turn notifications on.
• If you allow Media, embedded maps, videos and streams load from Google, YouTube, Vimeo or Twitch, which then receive your IP address under their own policies. Live venue cameras are fetched by our server from the venue's camera service and played inside Matchday, so the camera service sees our server and not you.
• Weather comes from the US National Weather Service. Only a venue's map coordinates are sent, never information about you.
• We disclose information when the law requires it or to protect someone's safety.

Cookies and storage

See the Cookie policy. Matchday uses no advertising or analytics cookies.

Legal bases

Where the GDPR or UK GDPR applies, we rely on performing our contract with you to run your teams, on legitimate interests to secure the service, on consent for optional cookies, media embeds and notifications, and on legal obligation where required. You can withdraw consent at any time under Cookie settings or in Account.

Security

Data is encrypted in transit with TLS. Passwords are stored with Argon2id hashing. Coaches and admins must use two-step sign-in. Accounts lock after repeated failed sign-ins. No system is perfectly secure, and we cannot guarantee that information will never be accessed without permission.

Retention

We keep information while your account is active. After a deletion request we delete or anonymize your account and family data within 30 days, except records the law requires us to keep and security logs kept up to 1 year.

Your choices and rights

• Download your data or request deletion from the Account page.
• Correct details on the Family and Account pages, or ask support.
• Depending on where you live, including the EU, UK, California and other US states, you may have rights to access, correct, delete, restrict or port your data and to object to processing. Contact [email protected] to use them. You may also complain to your local data protection authority.

International transfers

Matchday is hosted in the United States. If you use it from another country, your information is transferred to and processed in the United States.

Changes

We will post changes here and email account holders about material changes.

Contact

Mohammed A Wasay · Privacy: [email protected] · Support: [email protected]