Privacy

What our server can and can't see.

Your team is encrypted on your phone before it reaches us, with a key we never receive. We can't read it. We don't sell, rent or share anyone's data, and nothing shows ads. What we can read is short enough to list, so here it is.

Got a game link? What it shows. Each app's own ledger: Hockey · Soccer · Cross Country · Cold Plunge (the plan)

The ledger

Encrypted on your phone. We can't read it.

  • Players and runners: names, numbers, group, class year
  • Games and races: scores, goals, assists, penalties, shots, subs, minutes, splits, results
  • Lineups, availability and injuries
  • Season stats and team settings
  • What a parent logs from a game or meet link, and their name
  • Feedback from the hockey and soccer apps Cross country encrypts feedback so only we can read it.

Readable on our side.

  • Your email and name, for signing in
  • Which coaches belong to which team, with role, name and email
  • A random id per device, when it joined and last saved
  • The lock-screen card while a game runs Hockey and soccer iPhone apps: team names, score, clock, the last scorer's and keeper's first names, and in soccer the first names on the stats lines each phone picks (least time, longest on). Passed to the team's other phones, not stored.
  • Usage counts Hockey and soccer: how many games, which features, the kind of phone, country and state. Never a name, a score or an opponent.
  • Page views on clubclock.com Totals per day: which page, which site sent you, phone or computer. No cookies, nothing that identifies you.
  • Request logs Kept 90 days in hockey and soccer, a limited time in cross country.

Your choices, in one place

  • Coaches remove a player, a runner, a game or a race in the app, any time.
  • Parents: ask your child's coach, or write to privacy@clubclock.com, and we'll help the coach do it. We can't remove it ourselves: the team is encrypted and only its coaches can open it.
  • Delete your account from the app's menu. The app shows what happens to each of your teams before anything is deleted. A team nobody else can reach goes with it.
  • A deleted team is gone from our storage, earlier versions included, after 30 days.

Got a game link?

What a parent's game link shows, stores and asks, in short. What the page looks like and what to do when a link has ended: Follow a game.

  • What it shows about the teamThe score, the clock and each goal, by first name (or jersey number, if the coach switches first names off); in the lineup or lines, each player's number beside the name. Anyone who has the link sees it. Never minutes played, rankings or season stats.
  • About youNo account and no cookies, and watching asks nothing. A second link, for a parent who helps log stats, asks your name once; the coaches see it beside what you log. What you log, and that name, is encrypted with a key only the link carries (details below).
  • To change or remove your child's nameAsk the coach, who can edit or remove a player in the app, or ask us for help and we'll help the coach do it. The team is encrypted and only its coaches can open it.

The policy

Effective October 29, 2026. Last revised October 30, 2026.

ClubClock makes three coaching apps for youth sports (a fourth, ClubClock Cold Plunge, is in development and not covered here yet): ClubClock Hockey (at hockey.clubclock.app), ClubClock Soccer (for now at pitchboard.r26.dev) and ClubClock Cross Country (at xc.clubclock.app). This policy covers all three apps, in a browser or as a phone app, and this website. It explains what we collect, why, and what you can do about it.

The short version: your team's information is encrypted on your devices before it reaches us, so we can't read it. We don't sell, rent or share anyone's data, and we don't show ads.

Who we are

ClubClock is made and run by Ryan Hebert, in Michigan, USA ("we" in this policy), who is responsible for the information described here. For any privacy question or request, write to privacy@clubclock.com.

Your team's information is end-to-end encrypted

Rosters, lineups, games, races, goals, splits, substitutions, playing time, stats, notes and team settings are encrypted on your device with your team's key (AES-256-GCM) before they're stored on our servers. The key stays on your team's devices and in your team's invite links; it is never sent to us. We store only the encrypted data, so we can't read it, and neither can anyone who gets access to our storage.

Because of this, we can't recover a team if every device that has its key is lost.

What we collect

Players and runners (children)

Children never have accounts. Coaches enter what the app needs to run a team: a first name, a jersey number in hockey and soccer (in hockey the name is optional), a group such as girls or boys and a class year in cross country, and what happens in games and races. Coaches may also add a last name: ClubClock Soccer shows it only in its computer version, and ClubClock Cross Country shows runners' full names. All of it is part of the encrypted team information above. Please don't enter more about a child than this.

Coach accounts (adults only)

  • your email address and name, used to sign you in and to show your team who you are;
  • a sign-in code we email you each time you sign in on a new device (through Amazon SES).

Each app has its own accounts: signing in to one doesn't sign you in to the others.

Team membership and devices

These are needed to decide who may open a team, so they're stored unencrypted:

  • for each team: which accounts are members and their role (owner, coach), with name and email;
  • in ClubClock Hockey and ClubClock Soccer, for each device that joined: a random device id, a sign-in token (stored only as a hash), when it joined and last saved, and whether it's a guest and until when.

Device details inside the team

Encrypted with the team: the coach name you typed, the kind of device (phone, tablet, computer) and whether it's the app or a browser, and when it was last seen, so coaches can tell their devices apart.

Lock-screen game updates (the hockey and soccer iPhone apps)

We keep a push token per phone. When a coach changes a game, the app sends us a short summary (teams, score, clock, and, in soccer, lock-screen stats lines with players' first names, for example the last scorer, the keeper, who has been on longest and who has had the least time; in hockey, the last scorer) that we forward to the team's other phones through Apple's push service. We don't store the summary; we keep only each phone's choice of stats lines. ClubClock Cross Country doesn't send lock-screen updates through us.

Scoreboard camera (the ClubClock Hockey iPhone app)

When a coach points the phone at the rink's scoreboard, the clock is read on that phone: nothing from the camera is saved, sent to us or anyone else, or kept after it's read. Only the game clock's starts, stops and times go into the team's encrypted information.

A coach can send a parent a link for one game (hockey and soccer) or one meet (cross country), to follow it or to help log it: shots, keeper saves, corners and free kicks, or runners' splits at a checkpoint. The link's page shows the score or race clock and players' or runners' names (soccer and hockey show first names, or jersey numbers if the team turns first names off) to whoever opens it, so coaches should send it only to the team's families and helpers. A soccer or hockey stats link asks for the parent's name so the coaches know who logged. What a parent logs, and that name, is encrypted with a key only the link carries; we can't read any of it. A stats link works on one phone (we keep a scrambled id of it). Links end after a day, or when a coach stops them.

Feedback

Feedback you send from the app comes with where you were in the app (screen, game minute, device type and system version) so we can understand it. In ClubClock Hockey and ClubClock Soccer it is encrypted with your team's key. In ClubClock Cross Country it is encrypted so that only we can read it.

Usage counts (ClubClock Hockey and ClubClock Soccer)

To see how the apps are used and where they need work, our servers keep plain counts and labels that ride along with the app's normal saves: per team, numbers such as how many games, practices and players it has and how many games used features like live tracking or parent stats; per device, its kind (iPhone, iPad, Android, computer), whether it's the app or a browser, the app and system version, how it first arrived (for example an invite link or a parent's game link), and the country and state or region it's used in, which we take from our hosting provider's location lookup; and per day, how often features were used and how often saving or syncing failed. These never include team content, names, scores, opponents, places or anything a coach types, and we never store IP addresses or precise locations. Daily counts are deleted after 60 days; all of it is deleted with the team or with your account. ClubClock Cross Country doesn't keep usage counts.

Server logs

Our servers log technical details of requests (for example the browser's user agent, a short prefix of the team id, and whether a request succeeded) to keep the service running and fix problems. Logs are kept for 90 days in ClubClock Hockey and ClubClock Soccer, and for a limited time in ClubClock Cross Country.

Early access list

If you ask for early access on clubclock.com, we keep your email address, the apps you picked, the phone and role you chose (if any), and when you signed up and last changed it. We use them only to send what the form promises: a TestFlight invite or one note per app when it's ready. We don't add you to anything else, share the list or use it for marketing, and we never email you anything you didn't ask for. The list is stored in our own private, encrypted storage at Amazon Web Services in the United States, one entry per address; asking again with the same address adds apps to that entry. We get a short email for each new sign-up with the apps and role, not your address. To stop abuse, the form counts requests per hour using a scrambled form of your IP address that can't be turned back into it; those counts, and the daily key that scrambles them, are deleted within two days, and we never store or log your IP address itself. We delete the list when the apps it's for are out, and an address no one has changed for a year is deleted automatically. To be taken off the list sooner, or to ask what we hold, write to privacy@clubclock.com from that address.

This website

clubclock.com sets no cookies and loads nothing from other companies. We count page views per day and which site sent you, with no cookies and nothing that identifies you. Each page you open sends us its address, the name of the site whose link brought you (only the site's name, such as linkedin.com, never the page), a campaign tag if the link had one, and whether you're on a phone or a computer. We add that to the day's totals for that page and keep only the totals, for as long as the site runs: no record of the visit, no IP address and nothing that tells one visitor from another. We look at the description of the browser that comes with every request only to leave robots out, and don't keep it. If your browser sends Global Privacy Control or Do Not Track, the page sends nothing. As with the early-access form, an hourly count of requests per scrambled IP address, deleted within two days, keeps any one source from flooding the totals.

Our hosting provider handles your IP address to deliver the pages; we don't keep access logs for this site. If you pick Light or Dark under Appearance, that choice is kept in your browser's storage on your device; it isn't sent to us.

We don't use advertising, third-party analytics or tracking, and we don't use cookies to track you. The apps keep your settings and your team data on your device (browser storage, and in the iPhone apps the Keychain for your team keys and sign-in).

Who we share it with

No one, except the services that run ClubClock for us: Amazon Web Services (hosting, storage, sign-in through Amazon Cognito, email through Amazon SES; United States) and Apple (lock-screen push notifications, the App Store and TestFlight). When the Android version of ClubClock Soccer is available, its lock-screen updates go through Google's Firebase Cloud Messaging.

Weather (ClubClock Soccer). To save the weather with a game, your device (not our server) asks Open-Meteo (open-meteo.com) for the coordinates of the game's town and the weather there at kickoff. It sends only the town name, those coordinates and the date and time, nothing about your team or players. Only a summary is kept with the game (a temperature band such as "cool", sunny, cloudy, rain or snow, windy or not, day or night), not the readings, encrypted like the rest of your team's information.

We'd disclose information only if the law required it, and team information is encrypted, so we could only hand over what we can read.

How long we keep it

  • Encrypted team data: while the team exists. Earlier versions are kept for 30 days so a mistake can be undone; deleted games and races stay deleted. A deleted team is gone from our storage, including those earlier versions, after 30 days.
  • Your account: until you delete it.
  • Membership and device records: while you're on the team, and removed when an owner removes you or you delete your account.
  • The early access list: until the apps it's for are out, at most a year after you last signed up, or until you ask us to remove you.

Your choices

  • Delete your account in the app's menu under Account. You're removed from every team, your devices lose access, and your account is deleted. In ClubClock Hockey and ClubClock Soccer, a team that no other coach can reach is deleted with it (the app shows which, first); if you're a team's only owner and other coaches have accounts, you make one of them the owner first.
  • Remove a player, runner, game or race: a coach can edit or delete it in the app.
  • Parents: to have your child's information changed or removed, ask your child's coach, or write to privacy@clubclock.com and we'll help the coach do it.
  • Privacy questions or requests: privacy@clubclock.com. Help with the apps: support@clubclock.com.

Children

ClubClock isn't for children to use, and we don't knowingly create accounts for anyone under 18. The information about players and runners is entered and managed by their coaches.

Changes

If we change this policy we'll update the date above, and tell you in the app for significant changes.