VolleyLogic Privacy Policy
- VolleyLogic has two parts. The website at www.volleylogic.com explains what VolleyLogic is. The app, on the web at volleylogic.com and on iPhone/iPad, is where coaches create an account and record matches.
- The website doesn’t ask for any information about you. It has no sign-up or contact forms, analytics or tracking pixels, and it doesn’t set cookies or use your browser’s storage. Cloudflare hosts it, and its home page loads fonts from Google Fonts.
- VolleyLogic is a volleyball coaching tool. In the app, we store what you enter (your teams, players, matches and rally stats) so it syncs between your devices.
- Your coaching data is private to your account. We do not sell it, share it for advertising, or track you across other apps or websites.
- To delete your account and everything in it, or to make any other privacy request, email matthew@volleylogic.com.
1. Who we are
VolleyLogic is operated by Matthew Mitchell (“we”, “us”) in Brisbane, Queensland, Australia. You can contact us about privacy at matthew@volleylogic.com.
2. The VolleyLogic website (www.volleylogic.com)
The website describes VolleyLogic and links to the app. It does not collect match statistics or account information. You create an account, sign in and record matches in the app, not on the website.
What the website doesn’t use. The website has no account registration, contact or mailing-list forms, no analytics, no tracking pixels and no advertising. It doesn’t set cookies or use your browser’s storage. The interactive demo on the home page runs entirely in your browser, and nothing you tap in it is sent to us.
Hosting. Cloudflare hosts the website. To deliver the pages and protect the site from abuse, Cloudflare processes the technical information that comes with every web request, such as your IP address, browser type, the page requested and the time. With our current settings, Cloudflare doesn’t set cookies on the website. If it ever has to check whether a visitor is a person, for example during an attack, it may set a short-lived, strictly necessary security cookie for that purpose. Cloudflare also asks browsers to report failed connections to it (“network error logging”). These reports go to Cloudflare, not to us, and contain technical details such as the page address, the type of error and your IP address. We don’t keep our own logs of website visits.
Fonts. The website’s home page loads its fonts from Google Fonts. When you open that page, your browser connects to Google’s servers, which receive your IP address and browser information. Google handles this under its own privacy policy. The website’s other pages use fonts already on your device.
Links to the app. Buttons such as Sign in and Create free account take you to the app at volleylogic.com. The rest of this policy describes the app.
3. The VolleyLogic app: what we collect and why
The app runs on the web at volleylogic.com and on iPhone/iPad. Both versions use the same account and the same servers.
| What | Details | Why |
|---|---|---|
| Account details | Your first and last name, email address and password. Your password is never stored as text; only a salted, one-way hash is kept. | To create your account and sign you in. |
| Coaching content you enter | Team names, player names and numbers, positions, lineups, matches, every recorded rally and stat, scouting notes, and any stats files you choose to import. Changes you sync are tagged with a random ID for the device they came from. | To provide the app, keep your data safe, and sync it between your devices. |
| Sign-in and security data | Session tokens (on the iPad app, held in the iOS Keychain; on the web app, held in a sign-in cookie). With each signed-in session we record your browser or device type and a shortened one-way hash of your network address. We also keep one-way hashes of your network address and email, used only to limit repeated sign-in attempts. | To keep you signed in and protect accounts from guessing attacks. |
| Server logs | Operational records such as request errors, which identify your account only by an internal random ID, not your name or email. | To keep the service reliable and fix faults. |
| Password-reset emails | If you request a reset we send an email to your address through our email provider (see “Who else handles your data”). | To let you recover your account. |
Player information. Coaches enter player names and numbers. We do not ask for dates of birth, photos, contact details, or any other information about players. Please only enter information about players that you are entitled to store.
What we do not collect. The iPad app does not use your location, contacts, camera, microphone, photos or advertising identifier, and does not include advertising or cross-app tracking. The web app does not use your location, camera or microphone, and does not include advertising or cross-site tracking.
Data kept on your device. The app keeps a copy of your data on your device, so your work isn’t lost if the connection drops. In the web app, this copy is kept in your browser’s storage for volleylogic.com. It includes your coaching data and, while you are signed in, your name and email address. Some of your coaching data stays in the browser after you sign out. To remove it, for example on a shared device, clear the site data for volleylogic.com in that browser’s settings.
Usage statistics. The VolleyLogic web app records anonymous feature-usage events (for example “a match was started”) tied to a random device ID that is not linked to your name or email. The iPad app does not send these events, and the website does not record usage events.
Error reports. The app contains optional error-reporting code. It is currently switched off. If we ever turn it on, we will update this policy first, and reports will exclude your email, password and file names.
4. Who else handles your data
We do not sell your data. We use these providers to run the website and the app:
- Cloudflare hosts the VolleyLogic servers and database, which is where your account and coaching content are stored. It also hosts the website. For both, your browser may send Cloudflare reports of failed connections (see section 2).
- Resend delivers password-reset emails. It receives your email address and the reset message.
- Google Fonts supplies the fonts on the website’s home page (see section 2). The app does not use it.
- Content delivery networks (Cloudflare cdnjs and jsDelivr) supply open-source PDF and text-recognition libraries if you use the stats-import feature. Your device fetches these libraries directly, so those networks can see your IP address. Your imported file is processed on your device and is not sent to them.
Overseas processing. Our providers run global networks, so your information may be stored or processed in other countries, including the United States, in addition to Australia.
We may disclose information if the law requires it.
5. Public showcase
VolleyLogic has a “Featured Match” showcase. Only the VolleyLogic owner can publish a match to it, and only from the owner’s own account. Other coaches’ matches are never published there. When a match is published as the Featured Match, its details are publicly available, including to people who are not signed in: its team names, player names and numbers, match statistics and rally-by-rally records. Earlier Featured Matches of the same team may be shown with it. When no match is published, no Featured Match details are publicly available.
6. Sharing and exports
Exports (backups, match files and box-score files) are created on your device when you ask for them. On the iPad you choose where they go using the iOS share sheet. In the web app they download through your browser. We do not receive them.
7. How long we keep your data, and deleting it
We keep your account and coaching content for as long as your account exists.
To delete your account, email matthew@volleylogic.com from your account email address. We will confirm the request with you by email, delete your account and all of its teams, players, matches and rallies from our live database, and let you know when it is done. You may export a backup first. We cannot recover a deleted account.
In the iPad app you can also delete your account yourself: tap DELETE ACCOUNT next to LOG OUT, enter your password, and type DELETE. Deletion is immediate and permanent, and the app erases its copy on that device. The web app does not have a delete button. To remove the copy it keeps in a browser, clear the site data for volleylogic.com in that browser’s settings.
Backups. Deleting an account removes it from our live database straight away. Backups made before the deletion still contain it until they expire, because a backup can’t be changed once it is made. Backup copies are kept according to our backup and recovery schedules:
- our hosting provider’s database restore points are kept for up to 30 days;
- our nightly backups are normally kept for 90 days, and the backup made at the start of each month for 365 days;
- under our current storage lifecycle rules, backup copies may be kept for up to 400 days.
This means a deleted account can remain in backup copies for up to 400 days after it is deleted. Backups are used only to recover from a serious fault, and not for any other purpose. We keep a record of the accounts we delete on request, separately from our database and its backups. If we ever have to restore a backup, we will use that record to delete those accounts again as soon as the restore is complete.
From time to time we make extra copies of the database to check that our backups can be restored. We keep these copies on encrypted storage and delete them within 30 days.
Operational logs are kept for a limited period set by our hosting provider. The one-way hashes used to limit sign-in attempts are not stored against your account and are not removed. Anonymous usage events from the web app cannot be linked to you, so they are not removed either.
8. Security
Data is sent over encrypted connections (HTTPS). Passwords are hashed with a salted, slow, one-way function. On the iPad app your sign-in token is held in the iOS Keychain. On the web app your sign-in cookie is only sent over HTTPS and cannot be read by the page’s scripts. No system is perfectly secure, so please use a strong, unique password.
9. Your choices and rights
You can view and edit your data in the app, export it, and ask us to delete your account. You can also ask us for a copy of your information or to correct it. For these and any other privacy requests, contact matthew@volleylogic.com and we will respond within a reasonable time (we aim for 30 days).
Complaints. We aim to handle personal information in line with the Australian Privacy Principles. If you have a concern, please contact us first. If you are not satisfied, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.
10. Children
VolleyLogic is for coaches and is not directed at children under 13. We do not knowingly create accounts for children. If you believe a child has an account, contact us and we will delete it.
11. Changes
If we change this policy, we will update the date at the top, and for material changes we will tell you in the app or by email.