Our Commitment to Privacy
At Hat Trick Local (HTL), we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services. Please read this policy carefully. By using hattricklocal.com, you consent to the practices described in this policy.
Information We Collect
We collect the following types of information to provide and improve our services:
- Account information: Email address, name, and profile picture (when provided or obtained through social login)
- Team and club data: Club names, team rosters, player names, jersey numbers, uniform sizes, and ordering preferences
- Player information: Names, jersey numbers, uniform sizes, and team assignments for youth athletes — provided and managed by parents or club administrators
- Order and payment data: Uniform orders, package selections, transaction history, and payment method details (processed securely by third-party payment providers)
- Usage data: Information about how you interact with our service, including pages visited, features used, and time spent
- Device information: Browser type, operating system, and device identifiers for service optimization
Social Login and Third-Party Authentication
We offer the ability to sign in using third-party platforms. When you choose to authenticate through these services, we receive certain information from them:
Google Sign-In
When you sign in with Google, we receive your Google account email address, name, and profile picture. We use this information solely to create and manage your Hat Trick Local account. We do not access your Google contacts, emails, or any other Google services data. Google's use of your information is governed by Google's Privacy Policy.
Apple Sign-In
When you sign in with Apple, we receive your name and email address (or an Apple relay email). We use this information solely to create and manage your Hat Trick Local account. Apple's use of your information is governed by Apple's Privacy Policy.
Facebook Login
When you sign in with Facebook, we receive your Facebook account email address, name, and profile picture. We use this information solely to create and manage your Hat Trick Local account. We do not post to your Facebook timeline, access your friends list, or collect any other Facebook data. Facebook's use of your information is governed by Facebook's Data Policy.
TikTok Login
When you sign in with TikTok, we receive your TikTok display name, username, and profile picture. We use this information solely to create and manage your Hat Trick Local account. We do not access your TikTok videos, followers, or any other TikTok content. TikTok's use of your information is governed by TikTok's Privacy Policy.
Data from social logins is used exclusively for account authentication and personalization of your Hat Trick Local experience. You can disconnect any linked social account at any time through your account settings.
Important: We do not have access to your social media passwords. Authentication is handled securely through OAuth protocols, and we only receive the limited profile information described above.
How We Use Your Information
We use the collected information for the following purposes:
- Account management: Create and maintain your user account, authenticate your identity
- Service delivery: Process uniform orders, manage team rosters, assign jersey numbers, and coordinate between clubs, stores, and families
- Service improvement: Analyze usage patterns to enhance our platform and overall user experience
- Communications: Send important updates about your account, orders, team activity, and service changes
- Security: Protect against unauthorized access, fraud, and abuse of our services
- Legal compliance: Comply with applicable laws, regulations, and legal processes
Data Sharing and Disclosure
We do not sell, rent, or trade your personal information to third parties for their marketing purposes.
We may share your information only in the following limited circumstances:
- Within your club or store ecosystem: Roster data, jersey numbers, and order information are shared between clubs, stores, and families that are connected within Hat Trick Local — this is core to how the service works
- Service providers: With trusted third-party service providers who assist in operating our service (e.g., hosting, analytics, payment processing), bound by confidentiality agreements
- Legal requirements: When required by law, court order, or governmental regulation
- Protection of rights: To protect the rights, property, or safety of Hat Trick Local, our users, or the public
- With your consent: When you have given explicit permission to share specific information
Data Security
We implement industry-standard security measures to protect your personal information, including encryption in transit (TLS/SSL) and at rest, secure authentication protocols, regular security assessments, and access controls. Our data is stored securely with Supabase, which maintains SOC 2 Type II compliance and implements robust security measures. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.
Data Retention
We retain your personal information for as long as your account is active or as needed to provide you services. If you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal, regulatory, or legitimate business purposes.
Your Rights and Choices
You have the following rights regarding your personal information:
- Access: View and download a copy of your personal data at any time
- Correction: Update or correct inaccurate information through your account settings
- Deletion: Request complete deletion of your account and all associated data
- Withdraw consent: Disconnect social accounts or withdraw consent for data processing
- Data portability: Request your data in a structured, machine-readable format
- Object: Object to certain processing of your personal information
To exercise any of these rights, please contact us at privacy@hattricklocal.com or use the relevant features in your account settings.
Cookies and Tracking Technologies
We use essential cookies to enable core functionality such as authentication and user preferences. We use analytics cookies to understand how visitors interact with our service. You can control cookie preferences through your browser settings. Disabling certain cookies may affect service functionality.
First-Party Measurement on the Public Directory
We measure how visitors use our public club directory using our own systems. We do not send this data to third-party analytics or advertising providers.
What we record
When you search or browse the directory, we record the action taken, the page type, the organization or program involved, and the search filters applied. Search filters may include a sport, a birth year, a program gender category, a program level, and a resolved location. Location is stored at city, state, or three-digit postal-code level, or as a coarse coordinate area. We do not store the raw text you type into a location field.
Identifiers
We assign a randomly generated identifier to your browser and a separate identifier to your browsing session. These are created by us, are specific to this site, and are not derived from your IP address, your email address, or any characteristic of your device. We use them to understand repeat visits, for example whether a club administrator found a profile through search and returned later to claim it. If you sign in, we may link that activity to your account so we can support you and measure whether the directory is useful. We do not use these identifiers to build profiles across other websites, to fingerprint your device, or to create advertising audiences.
What we do not collect
Directory measurement never records a child's name, a child's email address, an exact date of birth, a school name tied to a visitor, team roster data, the contents of form fields, a full IP address, or a device fingerprint. We do not record keystrokes and we do not use session replay.
Retention
Anonymous directory measurement records are deleted after 18 months. Aggregate statistics that contain no visitor identifier are kept for longer-term reporting. Records connected to an account follow the retention period described in Data Retention above. Security and rate-limiting logs are kept separately from measurement data.
Your choices
We honor the Do Not Track and Global Privacy Control signals sent by your browser. When either is present, we do not record directory measurement events. Requests from search engine and AI crawlers are identified, are not assigned the identifiers described above, and are not counted as visitors. To request deletion of the identifiers described above, contact privacy@hattricklocal.com.
Children's Privacy
Hat Trick Local is designed for youth sports operations. Player information for minors is provided and managed by their parents, guardians, or authorized club administrators — not by children directly. Children under 13 do not create their own accounts. We comply with the Children's Online Privacy Protection Act (COPPA) and equivalent regulations. If you believe we have collected information from a child without appropriate parental consent, please contact us immediately at privacy@hattricklocal.com, and we will take steps to address the situation.
International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. When we transfer your information, we ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable law.
Third-Party Services
Our service integrates with the following third-party services:
- Google Sign-In: For authentication (Google Privacy Policy)
- Apple Sign-In: For authentication (Apple Privacy Policy)
- Facebook Login: For authentication (Facebook Data Policy)
- TikTok Login: For authentication (TikTok Privacy Policy)
- Authorize.Net: For payment processing (Authorize.Net Privacy Policy)
- Clover: For payment processing (Clover Privacy Policy)
- Google Analytics: For service analytics and improvement (Google Privacy Policy)
These third-party services have their own privacy policies, and we encourage you to review them. We do not control and are not responsible for the privacy practices of these third parties.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically for any changes.
Contact Us
If you have questions about this Privacy Policy, your personal data, or wish to exercise your privacy rights, please contact us at privacy@hattricklocal.com.