Privacy Policy

Last Updated: April 23, 2026

At Slo-Pitch Central ("we," "us," or "our"), we are committed to protecting your privacy and complying with applicable data protection laws, including the General Data Protection Regulation (GDPR) and other relevant privacy legislation. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, slopitchcentral.com (the "Site").

Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the Site.

Controller Information

The data controller responsible for your personal information is:

Slo-Pitch Central
1001-18 Mohawk Road East
Hamilton, Ontario, L9A 2G6
Canada
Email: [email protected]
Phone: 647-787-4216

1. Information We Collect

We collect different types of information depending on how you interact with our Site:

1.1 Personal Information You Provide

When you voluntarily provide it to us, we may collect:

• Account Information: Name, email address, password, and profile information when you create an account
• Contact Information: Name, email address, phone number, and message content when you contact us
• Newsletter Information: Name and email address when you subscribe to our newsletter
• Payment Information: Billing information processed through our payment processor (Stripe). We do not store complete credit card information
• Event Management Data: League/tournament information, team details, and game schedules when you use our event management features

1.2 Information Collected Automatically

When you visit our Site, we automatically collect:

• Usage Data: Pages viewed, time spent on pages, links clicked, and interaction with features
• Device Information: IP address, browser type, operating system, device identifiers
• Location Data: Approximate location based on IP address
• Cookies and Similar Technologies: See our Cookie Policy for details

1.3 Information from Third Parties

We may receive information from:

• Analytics Providers: Google Analytics provides aggregated usage statistics
• Advertising Partners: Raptive/AdThrive for advertising analytics
• Social Media: If you interact with us on social media platforms

1.4 Crew & Event Chat

Our umpire and event management products include in-app chat for crews and events. When you use chat, we collect and process:

• Message content: The text and any image attachments you send.
• Sender identifiers: Your user account id and a denormalized display name attached to each message so it remains attributable when displayed to other room members.
• Room identifiers: The crew or event the message belongs to, plus the timestamp.
• Read receipts and presence: When you last opened a chat room, who is currently socket-connected to a room, and ephemeral typing indicators while you are composing.
• Push notification tokens: Device tokens we receive from Apple/Google so we can deliver new-message notifications to your device.
• Network metadata at sign-in: The IP address used at login is recorded as part of normal authentication telemetry; we do not store the IP address used for each individual chat message.

Image moderation. Image attachments uploaded to chat are scanned by an automated safety classifier (Cloudflare Workers AI) before they are made visible to other users. Uploads classified as containing child sexual abuse material (CSAM), explicit sexual content, or graphic violence are blocked, are not stored on our content delivery network, and are referred to our trust & safety team for human review. CSAM-related incidents may, where applicable, be reported to the U.S. National Center for Missing & Exploited Children (NCMEC) CyberTipline as required by 18 U.S.C. § 2258A.

Reporting. Any room member can report a chat message in-app. Reports are stored alongside a frozen snapshot of the reported message (so the report stays reviewable even after the message is removed) and are visible to Slo Pitch Central staff acting on the report. We rate-limit reports to prevent abuse of the report channel.

Who can see chat content: the other members of the same crew or event chat room; crew administrators and event administrators for that room; Slo Pitch Central staff handling a moderation report or a security incident.

Retention. Chat messages are retained while your account is active. When a chat message is deleted (by you or by an administrator), it is soft-deleted: the content is retained for up to 90 days for moderation, audit, and legal hold purposes, after which it is hard-deleted from our database. When you delete your account, your read receipts and your outgoing reports are removed; your messages are anonymized in place (your display name is replaced with "Deleted user" and the link back to your account is severed) so that other participants’ transcripts of the same conversation remain coherent.

Notification previews on the lock screen. By default, push notifications include a preview of the message text. You can disable previews from the in-app notification settings, in which case push notifications will display only that a new message arrived.

2. Legal Basis for Processing (GDPR)

If you are from the European Economic Area (EEA), our legal basis for collecting and using your personal information depends on the data concerned and the context:

• Contract Performance: To provide services you requested (e.g., account creation, event management)
• Consent: When you explicitly agree (e.g., newsletter subscriptions, cookies)
• Legitimate Interests: To improve our services, prevent fraud, and ensure security
• Legal Obligation: To comply with laws and regulations

3. How We Use Your Information

We use your information for the following purposes:

3.1 Service Provision

• Create and manage your account
• Provide league and tournament management tools
• Process payments for premium features
• Respond to your inquiries and support requests
• Send transactional emails (account notifications, password resets)

3.2 Marketing (with your consent)

• Send newsletters and promotional content
• Notify you about new features, events, and offers
• Contest and giveaway entries

3.3 Analytics and Improvement

• Analyze usage patterns to improve our Site
• Monitor Site performance and troubleshoot issues
• Conduct research and development

3.4 Advertising

• Display relevant advertisements through our partner Raptive
• Measure advertising effectiveness

4. Data Sharing and Third-Party Processors

We share your information with the following categories of third parties:

4.1 Service Providers

• PayloadCMS: Content management and database hosting
• Stripe: Payment processing
• Google Analytics: Website analytics (with your consent)
• Raptive (AdThrive): Advertising services (with your consent). See Raptive's Privacy Policy
• Email Service Providers: To send transactional and marketing emails

All service providers are bound by data processing agreements and are only permitted to process your data for specified purposes.

4.2 Legal Requirements

We may disclose your information if required by law or in response to valid requests by public authorities (e.g., court orders, subpoenas).

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred. We will notify you before your information becomes subject to a different privacy policy.

4.4 With Your Consent

We may share your information for any other purpose with your explicit consent.

5. International Data Transfers

We are based in Canada, and your information may be transferred to and processed in Canada and other countries where our service providers operate. These countries may have data protection laws different from your country.

For EEA residents: Canada has been recognized by the European Commission as providing adequate data protection. When we transfer data to other countries, we ensure appropriate safeguards are in place through:

• Standard Contractual Clauses approved by the European Commission
• Data Processing Agreements with all processors
• Privacy Shield (where applicable)

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law:

• Account Data: Retained while your account is active and for 3 years after account closure
• Transaction Records: Retained for 7 years for accounting and legal purposes
• Marketing Data: Retained until you unsubscribe or withdraw consent
• Analytics Data: Aggregated data retained for 26 months (Google Analytics default)
• Cookies: See our Cookie Policy for specific retention periods

7. Your Data Protection Rights

Under GDPR and other data protection laws, you have the following rights:

7.1 Right to Access

You can request copies of your personal data. We may charge a reasonable fee for multiple copies.

7.2 Right to Rectification

You can request correction of inaccurate or incomplete personal data.

7.3 Right to Erasure ("Right to be Forgotten")

You can request deletion of your personal data in certain circumstances, such as when the data is no longer necessary or if you withdraw consent.

7.4 Right to Restrict Processing

You can request that we limit how we use your data in certain situations.

7.5 Right to Data Portability

You can request transfer of your data to another organization or directly to you in a structured, commonly used, machine-readable format.

7.6 Right to Object

You can object to processing based on legitimate interests or for direct marketing purposes.

7.7 Right to Withdraw Consent

Where processing is based on consent, you can withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

7.8 Right to Lodge a Complaint

You have the right to complain to a data protection authority about our collection and use of your personal data. For EEA residents, contact your local data protection authority or:

• Office of the Privacy Commissioner of Canada: www.priv.gc.ca

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our Site and store certain information. For detailed information about the cookies we use and how to manage them, please see our Cookie Policy.

9. Security of Your Information

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit (SSL/TLS)
• Secure password storage with hashing
• Regular security assessments
• Access controls and authentication
• Employee training on data protection

However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

10. Children's Privacy

Our Site is not intended for children under 13 years of age (or 16 in the EEA). We do not knowingly collect personal information from children. If we learn we have collected information from a child under these ages without parental consent, we will delete it. If you believe a child has provided us with personal information, please contact us at [email protected].

11. Do Not Track Signals

Some browsers have "Do Not Track" features. We currently do not respond to Do Not Track signals. You can manage cookies through your browser settings and our cookie consent banner.

12. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected, the right to delete personal information, and the right to opt-out of the sale of personal information. We do not sell your personal information.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last Updated" date
• Sending an email notification for material changes (if you have subscribed)

You are advised to review this Privacy Policy periodically. Changes are effective when posted.

14. Contact Us

If you have questions, concerns, or wish to exercise your data protection rights, please contact us:

For data protection inquiries from the EEA, please include "GDPR Request" in your subject line. We will respond within 30 days.