What personal information do we process? We process names, login/contact emails, hashed passwords, date of birth, cricket performance statistics, coach-written evaluations, team/roster data, and parent-to-child account links. See "1. What Information Do We Collect" below.

Do we process any sensitive personal information? No. We do not collect racial or ethnic origin, sexual orientation, religious beliefs, health information, or similar sensitive categories.

Do we collect information from minors? Yes. Because our Services are built for youth cricket teams (age groups as young as approximately U11) through adult teams, we knowingly collect personal information from children, subject to the protections described in "8. Children's Privacy" below, including a parental-consent gate before any under-16 player account is activated.

Do we collect information from third parties? Yes — we import match/scorecard data from CricClubs, a third-party cricket league platform, and match it to players on file.

How do we process your information? To operate the coaching organization's team management, scoring, ranking, and evaluation system; to secure accounts; and to communicate with users. We do not process information for advertising.

Do we share your information, and with whom? We do not sell or share personal information with advertisers or data brokers. We share information only with the service providers who host and operate the Services on our behalf (listed below), and as required by law.

What are your rights? Depending on your role and, for minors, your parent/guardian's role, you may review, correct, or request deletion of information, and parents may review or delete their child's data at any time. See "9. Your Privacy Rights".

How do you exercise your rights? Contact us at cricketminds@gmail.com or 3043 Ivy Lane, Irving, TX 75063.

In Short: We collect account information you or a linked parent/guardian provide, cricket performance data entered by coaches and admins, and data imported from CricClubs.

Depending on your role, we collect:

We do not knowingly collect sensitive personal information (such as racial or ethnic origin, religious beliefs, sexual orientation, or health data) through the Services.

We do not currently collect information automatically through analytics or advertising trackers; see Section 4.

In Short: We process information to operate the coaching organization's team, scoring, ranking, and evaluation system, to secure accounts, and to communicate with users.

We process personal information to:

• Create and administer Admin, Coach, Player, and Parent/Guardian accounts
• Verify a player's age to route account access correctly between the player and a parent/guardian
• Record and evaluate match performance, rankings, and coach assessments
• Maintain an audit trail of manual corrections to scores or points
• Import and match league data from CricClubs to the correct player record
• Send transactional emails, such as password-reset messages
• Detect, prevent, and respond to security incidents, fraud, and abuse
• Comply with legal obligations

We do not process personal information for interest-based advertising, and we do not sell personal information.

In Short: We share information only with the service providers who operate the Services on our behalf, and as required by law. We do not sell or share information with advertisers.

We use the following third-party service providers (data processors) to operate the Services:

We may also disclose information: (a) to comply with a legal obligation, court order, or governmental request; (b) to protect the safety of any person, including a minor; (c) in connection with a merger, acquisition, or sale of company assets, subject to this Privacy Notice continuing to apply to the transferred data; or (d) with your, or a parent/guardian's, consent.

We do not share personal information with advertisers, data brokers, or marketing partners, and we do not permit third parties to use the Services for advertising or analytics tracking.

In Short: We use only a single essential session/authentication cookie. We do not use advertising or analytics cookies.

The Services use one strictly necessary cookie to keep you signed in and to protect your session. This cookie is set with the HttpOnly, Secure, and SameSite=Strict attributes. We do not use advertising cookies, third-party tracking pixels, or analytics cookies, and we do not permit third parties to place tracking technologies on the Services.

In Short: We retain information for as long as an account is active and as necessary to fulfill the purposes in this Notice, including maintaining historical match and audit records, unless a longer or shorter period is required by law.

Because match history, rankings, and audit trails have ongoing value to the coaching organization and its teams, some performance and audit data may be retained in an archived form after an account is closed. Account credentials (login email and password hash) and recovery email are deleted or anonymized once an account is deleted, except where retention is needed to prevent fraud, resolve disputes, or comply with legal obligations.

Parents/guardians may request deletion of a minor's account and associated personal data at any time, as described in Section 8.

In Short: We use industry-standard technical safeguards appropriate to the sensitivity of the data we hold, including for accounts belonging to minors.

Security measures in place include:

• Passwords stored only as bcrypt hashes, never in plain text
• Session cookies set as HttpOnly, Secure, and SameSite=Strict
• Rate limiting on all application routes
• Audit logging of data changes, including manual point corrections
• An admin-gated approval workflow before any account (including a claimed minor account) is granted access
• No caching of personal data by the application or browser

No method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security. If you believe your account has been compromised, contact us immediately at cricketminds@gmail.com.

Our service providers host data within the United States. If you access the Services from outside the United States, your information will be transferred to, stored in, and processed in the United States, which may have data protection laws that differ from those of your country.

In Short: Our Services are intentionally used by children as young as approximately U11 age-group players, and we have designed specific safeguards for their accounts. Where the U.S. Children's Online Privacy Protection Act (COPPA) applies, we obtain verifiable parental consent before collecting personal information from a child under 13.

Unlike a general-audience website, the CricketMinds 360 coaching platform is built for youth cricket teams, and youth players are core, intended users of the Services — not incidental ones. Because of this, we apply the following protections:

• Parental gate for accounts. Before a player under 16 is granted any account access, a parent or guardian must complete an attestation and approval step. Date of birth is collected specifically to determine whether the player or a parent/guardian is the party authorized to claim the account.
• Verifiable parental consent for children under 13. For any player under 13, we obtain verifiable parental consent, consistent with COPPA, before collecting personal information beyond what is necessary to complete the account-claim and consent process itself.
• Parental access and control. A parent/guardian with a linked account may review the personal information collected from their child, request that we delete it, and refuse to permit further collection or use of their child's information, at any time, by contacting us at cricketminds@gmail.com.
• Data minimization for minors. We collect only the information described in Section 1 that is necessary to operate team management, scoring, and evaluation for the child's team — we do not use children's information for advertising, and we do not enable public-facing profiles for minors.
• No behavioral advertising to children. We do not serve targeted advertising to any user, and in particular never to a known minor account.
• Internal-only coach notes. Certain coach evaluations of a player may be marked "internal only" and are visible solely to coaches and admins — not to the player or the parent/guardian — for legitimate coaching-management purposes. Parents/guardians may contact us with questions about this practice.

If we learn that a child's personal information was collected without the required parental consent, we will take steps to obtain consent or delete the information promptly. Parents/guardians who become aware of information collected from their child without proper consent should contact us at cricketminds@gmail.com or 3043 Ivy Lane, Irving, TX 75063.

Depending on your role, you (or, for a minor, your parent/guardian) may:

• Request access to the personal information we hold
• Request correction of inaccurate information
• Request deletion of your account and associated personal information
• Withdraw consent previously given, where we rely on consent

To exercise these rights, contact us at cricketminds@gmail.com or by mail at 3043 Ivy Lane, Irving, TX 75063. We will respond in accordance with applicable law. Deleting an account may not remove records we are required to retain, such as audit logs needed to investigate a prior scoring dispute.

Because we do not use tracking or advertising technologies, Do-Not-Track browser signals have no effect on the Services — there is no tracking to disable.

We may update this Privacy Notice from time to time. The "Last updated" date at the top will reflect the most recent revision. If we make a material change — particularly one affecting how we handle children's information — we will provide notice to users and, where applicable, to parents/guardians of minor account holders, before the change takes effect.

CricketMinds INC
3043 Ivy Lane
Irving, TX 75063
United States

Phone: (479) 366-5760
Email: cricketminds@gmail.com