Privacy Policy

This policy covers the Ouray Trojans basketball program website at ouraybasketball.com and the Ouray Trojans mobile apps. We run this site to promote the program, take registrations for our fundraiser events, and give our coaches a place to plan practices. Nothing more.

What we collect

Anyone visiting the site

Nothing beyond what our web server records to operate and secure the site. There is no advertising network, no third-party analytics, and no tracking across other websites.

Registering for an event

Your first and last name, your email address, the number of people in your party, and any details the specific event asks for, such as the names of the others in your group.

Sponsoring a hole

Your first and last name, your business name, your email address, and the sponsorship amount.

Coach, staff, and player accounts

Your name, your email address, and a securely hashed version of your password — we never store the password itself. When you sign in we record the IP address and browser of that session so you can be signed out safely.

Player records

Coaches record a player's name, position, and school year to build practice plans and rosters. We do not collect grades, health information, or any other school record.

A coach can also invite a player to sign in, which creates an account for them. That takes one more piece of information — an email address, which may be a parent's. A player who signs in can see the schedule, practices, and team events for their own team, and can turn on reminders. They cannot change anything.

The mobile apps

The apps show the same pages as the website. If you turn on notifications, we store the push token your phone provides along with whether it is an iOS or Android device, so we can send you practice reminders. The token is a handle for the device rather than a name, but we keep it against your account, so treat it as part of that account. Signing out deletes it. If you delete the app without signing out, the token stops working, and we drop it the next time a notification fails to reach it.

How we use it

• To confirm and manage event registrations and sponsorships.
• To send transactional email — registration confirmations, sponsorship confirmations, and password resets. Delivery is handled by Amazon Simple Email Service.
• To let coaches plan practices and manage rosters, and to show players their team's schedule.
• To send practice reminders to phones that asked for them. Apple and Google deliver those on our behalf, which means the reminder passes through them on its way to the phone.
• To keep accounts secure.

What we never do

• We do not sell or rent your information.
• We do not share it with advertisers or data brokers.
• We do not send marketing email you did not ask for.
• We do not track you across other websites.

Who can see your information

Registration and sponsorship details are visible to program administrators. Practice plans, drills, and player records are visible only to coaches, staff, and players assigned to that team, and to program administrators. Two companies handle data on our behalf: DigitalOcean, where the site is hosted, and Amazon Web Services, which delivers our email. If you turn on practice reminders, Apple or Google carries those to your phone, since that is the only way anything reaches a lock screen. No one else, for anything.

Cookies

Two, both necessary to run the site, and neither used for advertising or analytics. The first is set as soon as you arrive and carries the security token that stops other sites from submitting our forms in your name. The second is set when you sign in and holds a signed session identifier, so the site knows it is still you as you move between pages; signing out removes it.

Student athletes

Roster records are entered by coaches as part of running the team, not gathered from students. A coach may invite a player to sign in, and that account is created by the coach using an address the coach was given — a family address is fine. An invited player chooses their own password and can turn practice reminders on; that is the only information a student gives us directly. If you are a parent or guardian and want to see, correct, or remove what we hold about your athlete — or want their sign-in taken away — email us and we will take care of it.

Keeping and deleting information

We keep a player's roster record and account for as long as they are an active member of the boys' or girls' program, and remove them after that. Coach and staff accounts are kept while they are with the program. Event registrations and sponsorship records are kept for the program's financial records.

You do not have to wait for any of that. You can delete your own account from account deletion at any time, and that page also covers asking us to remove records that are not yours to delete — including a parent or guardian asking us to take an athlete off the roster.

Security

The site is served over HTTPS, passwords are stored hashed, and access to coaching data is limited to the teams you belong to. No system is perfect, but we treat this data as if it were our own, because most of it is.

Changes

If this policy changes we will update the date at the top of this page.

Contact

Questions, corrections, or deletion requests: ckaminsky@ourayschool.org.