Privacy Policy

What an account holds

You can read almost all of this site without an account. If you make one, this is everything stored about you:

• Your email address. It is how you sign in and how we send you a confirmation link or a password reset.
• Your password, stored only as a one-way scramble. Nobody at TexaSports can read it, including us.
• Your name, if you choose to give one. It is optional and it is never shown publicly.
• A display name, if you choose one. This one is public — it is what appears beside anything you post in a live chat.
• Whether you have confirmed your email address, and when.
• If you sign in with Google: the account identifier Google uses for you, the email address Google gave us, and the date you connected it.

What we do not ask for

There is no field anywhere on this site for a phone number, a postal address, a date of birth, or any government identification. We do not take payments on this site, so no card or bank detail is ever entered here or held by us. If a page ever asks you for one of these things, it is not us.

Cookies

This site sets three cookies of its own, and Google Analytics sets two more. None of them is an advertising cookie, none of them follows you to other websites, and there is no advertising network and no advertising pixel anywhere on this site.

• A sign-in cookie, so you stay signed in. It lasts up to 30 days and disappears when you sign out.
• A short-lived security cookie used only during a Google sign-in, to check the sign-in finished where it started. It lasts ten minutes.
• A cookie remembering an option you selected inside your account, so the page you land on matches the one you chose. It involves no payment and lasts 30 days.
• Two cookies set by Google Analytics, which counts visits. They tell a returning visitor from a new one and hold nothing that identifies you by name. Google sets them to last up to two years. If you would rather not be counted at all, Google publishes a browser add-on that switches Google Analytics off on every website: tools.google.com/dlpage/gaoptout. Your browser's tracker-blocking settings work too.

Sign-in records

Each time you sign in we record the internet address you signed in from and a description of the browser you used, and we keep those alongside that sign-in session. This is the ordinary security record that lets an account be checked after a suspicious sign-in, and it is the only place this site writes an internet address into its database. The record we keep of significant actions taken in the league office names the account and the action, and holds no address.

Live chat during a broadcast

Chat is open only to people who are signed in and have confirmed their email address. Messages are checked automatically before they post, and a message carrying a link, an email address, a phone number, an address, a social handle or an attempt to arrange contact is refused outright rather than partly hidden. The check does not catch everything, which is why every message can be reported and why a person moderates.

• A chat message stores your public display name and what you typed. It does not store your real name, your email address, your internet address or anything about your device. It does hold a link back to the account that posted it, which is not shown to anyone reading the chat but is what lets the league office moderate.
• Messages are removed 30 days after posting. A reported one stays while its report does — see the retention section below.
• Records of mutes and reports are kept as part of the league's safety record.

Children

This is a youth sports league, so this section matters more here than the rest of the page put together.

• Athletes do not register on this website and this site holds no athlete records. Registration is handled by the league through a separate provider, and the consent forms parents sign there — including permission to show photographs on the league's website and social media — are the league's, not this site's.
• This site is not aimed at children and accounts are meant to be held by adults. We do not knowingly collect information from a child. If you believe a child has made an account here, email us and it is removed.
• News articles identify athletes by first initial and surname, and never print an athlete's age beside a name. This is enforced automatically, not left to whoever is typing.
• News photographs come from the league's own Facebook page or are supplied by the league office; the rest of the pictures on the site are artwork and stock rather than photographs of anybody's child. A photograph imported from Facebook can appear after automatic checks with nobody having looked at it. If a photograph of your child is on this site and you want it taken down, email us and we will remove it — you do not have to explain why.
• A photograph taken on a phone can carry a hidden record of where and when it was taken, often the exact coordinates. That record is stripped out before a photograph is stored, and the picture itself is not altered or re-processed. A small number of pictures added when the site was first built predate that step and have not been gone back over; if you would rather one came down, email us and it goes.

The league's Facebook page

The news section is partly filled by reading the league's own posts from its public Facebook page and rewriting them into articles here.

• Only posts published by the league itself become articles. A comment, a like or a reaction is never turned into anything on this site, and we never ask Facebook for the list of people who left them.
• Facebook does send us notifications about activity on the page, and those can include comments and reactions. Those notifications are recorded in an operational log we keep for security. So if you comment on the league's Facebook page, the notification about that comment can end up in that log even though nothing about it is published here. It is not used for anything else and is not shown to anyone outside the league office.
• Nothing is ever posted from this site back to Facebook. The connection runs one way.
• The rewriting is done by an automated language service at the moment a post is imported. It is given the league's post and nothing else — no visitor information is ever sent to it, and it is never involved in showing you a page.
• A post the automatic checks are not happy with is held for a person at the league office to look at instead of being published.

Who else receives information

We do not sell anyone's information and we do not share it for advertising. These are the only outside services involved, and what each one gets:

• Our hosting provider, Railway, runs the servers and the database. Everything on this site sits there.
• Resend, which delivers our email. When we send you a confirmation link, a password reset or another message about your account, Resend receives your email address and the whole of that message in order to deliver it.
• Google Fonts. Your browser fetches the site's typefaces from Google on every page you view, which means Google sees the request — including your internet address. Nothing about your account is sent with it.
• Google Analytics, which counts visits. It runs on the public pages and tells us how many people come to the site, which pages they read, and whether they arrived from a search, a link or by typing the address. Google receives the address of the page you looked at, roughly where you are — the city, not the street — and what kind of device and browser you used. What is sent is the page address only, with everything after the question mark removed before it leaves your browser: a word you typed into a search box, or the one-time link from a password-reset email, is never part of it. It is not told your name, your email address or anything about your account, it is not used to advertise to you, and we do not sell any of it. The pages staff use to run the league are not counted at all.
• Google, if and only if you choose to sign in with a Google account. We receive your email address and name from Google; Google is told nothing about you by us.
• The league's streaming provider. Their player loads the moment you open a page for a game that is being broadcast — there is no press-to-start in front of it — so they see that request, including your internet address. The front page also fetches a still frame from them for anything live at the time. Questions about a broadcast come to us, not to them.
• Facebook, only if you click play on an embedded video. Nothing loads from Facebook until you do.

How long things are kept

Different records have different lives, and we would rather say so than write “as long as necessary”.

• Your account is kept until you ask us to remove it. Nothing on the site deletes an account on its own.
• A sign-in session stops working after 30 days. Signing out deletes that session straight away, and finishing a password reset deletes every session on the account.
• Password reset and email confirmation links stop working within hours and can be used only once.
• Chat messages are deleted 30 days after they are posted. A message somebody has reported stays for as long as its report does: a report that has been dealt with is cleared after a year, and a report nobody has dealt with yet keeps, along with the message it points at, until someone acts on it.
• The log of notifications from Facebook, and the record of significant actions taken in the league office, are kept as an operational and safety trail.

Asking for your information, or asking us to delete it

Email us and a person deals with it.

• Email info@texasports.info from the address on the account, and say whether you want a copy of what we hold or want it deleted.
• The account and its sign-in records go, and chat messages you have already posted are removed on the schedule above. Anything a moderator has already acted on is deliberately kept — the safety record is built so it cannot be erased by asking — and while a message is held that way the account it belongs to is held with it.
• To change your display name, your name or your email address, email us as well.
• If a photograph or an article on this site concerns you or your child, say so in the same email. That request is treated as urgent and does not require a reason.

Keeping it safe

The site is served only over an encrypted connection. Passwords are stored using a modern one-way hashing method designed for the purpose, so a stolen database does not hand anyone a password. Access to the league office section is checked on every request. No system is perfect, and if something ever went wrong that affected people's information we would tell the people affected rather than wait to be asked.

Changes to this policy

If what the site does changes, this page changes with it and the date at the top moves. We do not make quiet edits. If a change is significant — a new company receiving information, or a new kind of information collected — this page will say what changed and when.

• 18 August 2026: we added Google Analytics, which counts visits. It sets two cookies and sends Google the pages you look at and roughly where you are. Until this date the site ran no analytics at all, and this page said so.

Contact

Questions, corrections, takedown requests and anything else about this page: email info@texasports.info, call (940) 442-7447, or write to TexaSports 501c3, P.O. Box 330665, Fort Worth, Texas 76163. A person reads all three.