Privacy Policy

We collect what we need to run a sports league: who you are, how to reach you, who to call in an emergency, and what you’ve signed up for. We take payments through Stripe and never see your card number. We don’t sell your information, and we don’t share it with advertisers.

The one genuinely optional thing we collect is how you found us, which we use to decide where to spend our time. You can turn that off — see Your choices.

Austin Crew of Everything Social, LLC (“ACES”, “we”) runs adult social sports leagues in Austin, TX. We are the controller of the information described here. You can reach us at support@acesintexas.com.

Your account and profile

First and last name, email address, phone number, date of birth, gender, skill level and shirt size. Every one of these is required to complete a profile — date of birth because our leagues are 18 and over, shirt size because leagues include one.

Your emergency contact

The name and phone number of someone we can call if something happens to you at a game. Please tell that person you’ve listed them.

Waivers you sign

The waiver you agreed to, when you signed it, and either your typed name or an image of your drawn signature. We also record your IP address and browser user agent at the moment of signing. That is deliberate and narrow: a waiver is a legal document, and those details are what evidence that a particular person signed it at a particular time. We use them for nothing else.

Playing and payment

The leagues, teams and matches you’re part of, your registrations, and a record of payments — amounts, dates and status. Card details are handled entirely by Stripe; we store only the identifiers Stripe gives us so we can show you your saved payment methods and issue refunds. We never see or store your full card number.

How you found us

When you complete your profile we ask how you heard about us, and we record the answer. Separately, if you arrived through a tagged link or another website, we record the campaign details (utm_source and similar), the website you came from, and which page you landed on.

We record the referring site — “google.com” — never the full address you came from, and the page path, never the query string. Those two carry things like search terms and email addresses, and we’d rather not hold them.

Abuse prevention

When a discount code is entered we keep a one-way hashed form of the IP address to rate-limit guessing. It cannot be turned back into an address and is not used to identify anyone.

What we don’t collect

No advertising or cross-site tracking cookies. No analytics product following you around the internet. No location tracking. We do not buy information about you from anyone.

We use five, all first-party. Four are strictly necessary — sign-in stops working without them. Exactly one is optional: aces_first_touch.

Declining removes aces_first_touch and stops us recording it. Everything else on the site works exactly the same.

We use a small number of service providers. They process information on our instructions and are not permitted to use it for their own purposes.

• Supabase — Our database, login and file storage. Holds your profile, waiver records and signature images.
• Stripe — Payments. Handles your card details directly — we never receive them.
• Vercel — Hosts the website and serves every request.
• Resend — Sends transactional email — confirmations, password resets, team invitations.
• Google Maps — Displays venue locations. Loading a map page contacts Google.
• Cloudflare — Serves photographs and other images used on the site.

We do not sell personal information, and we do not share it for cross-context behavioural advertising.

We may disclose information if the law requires it, or where we genuinely need to in order to protect someone’s safety.

• Marketing email. Off unless you turn it on. Manage it per address under your account, or use the unsubscribe link in any marketing email. Transactional email — registration confirmations, password resets — isn’t marketing and continues either way.
• How you found us. Decline in the cookie notice to stop the automatic part. The question on your profile is one you answer yourself, and staff can clear it on request.
• Access, correction and deletion. Most of your profile is editable under your account. For anything else — a copy of your information, or deletion of your account — email support@acesintexas.com. Texas residents, and residents of states with comparable laws, have these rights by statute; we extend them to everyone.

One limit worth stating plainly: we can’t delete a signed waiver or a payment record on request. Those are the documents that protect both of us, and we keep them as described below.

• Profile: while your account exists, and until you ask us to delete it.
• Waivers and signatures: kept after your account closes, for as long as a claim could still be brought.
• Payment records: kept as long as tax and accounting rules require.
• How you found us: kept with your profile and deleted with it.

Traffic is encrypted in transit. Access to member records is restricted at the database level, so one member cannot read another’s. Signature images are held in private storage, not on the public web. Passwords are stored hashed by our login provider — nobody at ACES, including staff, can see them.

No system is perfectly secure, and we won’t pretend otherwise. If we ever discover a breach affecting your information, we will tell you.

Our leagues are for adults. You must be 18 or older to hold an account, and we don’t knowingly collect information from children. If you believe a child has given us information, email us and we’ll remove it.

If we change this policy in a way that matters, we’ll update the date at the top and — for anything significant — tell account holders by email rather than quietly editing the page.

Questions, requests, or something here that doesn’t match your experience of the site: support@acesintexas.com.