Privacy Policy

Last updated: April 30, 2026

Squad 9 Baseball (squad9baseball.com) is a product of Atkin Enterprises, LLC, doing business as Squad 9 Baseball. This Privacy Policy describes how Atkin Enterprises, LLC ("we," "us," or "our") collects, uses, and protects your information when you use the Squad 9 Baseball application ("the App").

1. Information We Collect

Account information (13 and older): Email address, display name, self-attested age bracket (13+, and 15+ for coach roles), and playing position. We do not collect a date of birth.
Account information (under 13): A username chosen by the child (no email address is collected from the child) and the parent or legal guardian's email address. A self-attested age bracket of "under 13" is recorded; we do not collect a date of birth.
Usage data: Game scores, rounds played, badges earned, session history, and pregame prep assignment completion status.
Team data: Team name, team membership, player position, and coach-assigned pregame prep scenarios. If you join a team, your coach can view your assignment progress and game performance within the App.
Device information: Device type (mobile/desktop/tablet), operating system, and browser type.
Payment information: Subscription payments are processed securely by Stripe. We do not store your credit card number, CVV, or full card details. Stripe may retain payment data in accordance with their own privacy policy. Children under 13 cannot subscribe; only the parent or legal guardian who provided consent may add a paid plan.
Parental consent data (under-13 users): Parent or guardian's email address, consent verification status, and timestamp.

2. How We Use Your Information

To provide and improve the App experience.
To track your progress and display leaderboard rankings.
To send verification emails, account notifications, and pregame prep assignment notifications.
To facilitate coach-to-player communications through automated assignment emails. When a coach assigns pregame prep scenarios to players on their team, the App sends an automated email notification from squad9baseball.com to each assigned player's registered email address. These emails contain a link to the assigned scenarios within the App. Coaches cannot send free-form messages; all communications are system-generated from the App's existing content library.
To respond to feedback and support requests.
To analyze usage patterns and improve our training content.
To verify parental consent for users under 13 as required by law.

3. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, our legal basis for processing your personal data includes:

Contractual necessity: Processing required to provide you with the App and its features (account management, score tracking, leaderboard).
Legitimate interests: Analyzing usage patterns to improve the App, provided these interests are not overridden by your data protection rights.
Consent: Where we rely on your consent (e.g., sending non-essential communications), you may withdraw consent at any time by contacting privacy@squad9baseball.com.
Legal obligation: Processing required to comply with applicable laws.

For users under 13, we require verifiable parental consent before collecting or processing their data. We limit the information collected from minors to what is necessary to provide the App's educational features.

4. Data Storage

Your data is stored securely using Google Firebase (Authentication and Firestore database). Data is hosted in the United States and protected by industry-standard security measures.

5. Third-Party Services

We use the following third-party services:

Google Firebase — Authentication and data storage.
Google OAuth — Optional sign-in with Google.
Stripe — Payment processing.
Resend — Transactional email delivery (verification codes, account notifications, pregame prep assignment emails). Resend processes recipient email addresses to deliver messages on our behalf. See Resend's Privacy Policy.
Railway — Application hosting.

We do not sell your personal data to any third party. Data shared with third-party services is limited to what is necessary for them to provide their services (e.g., Stripe receives payment details to process transactions; Firebase stores account and game data). Each service processes data under its own privacy policy and applicable data processing agreements.

6. Cookies and Local Storage

The App uses session cookies to maintain your login state. We do not use tracking cookies or third-party advertising cookies.

7. Children's Privacy

The App is designed as an educational tool for youth baseball players and is intended for users of all ages, including children under 13. We comply with the U.S. Children's Online Privacy Protection Act ("COPPA").

Username, not email, for children. Children under 13 sign up with a username chosen by the child and a password. We do not collect an email address from any user under 13. We also do not collect the child's date of birth — only a self-attested age bracket of "under 13."
Parent or guardian's email is required. At signup, the child must provide a parent or legal guardian's email address. We immediately send the parent a notice describing what we collect, who we share with, how we protect the data, and the parent's rights — along with a 10-minute verification code.
Demo Mode until parent verifies. Until the parent enters the verification code in the App, the child's account is restricted to a limited Demo Mode. In Demo Mode the child can browse and play against scenarios but cannot join a team, receive coach assignments, appear on a leaderboard, or receive any email communication from the App.
Verifiable parental consent. Verifying the code grants consent for ongoing use of the App. The parent may revoke consent at any time, which closes the account.
Data minimization. For child users we collect only what is necessary to provide the educational experience — no location data, photos, contacts, open-text chat, or social features. Display names of under-13 users are partially masked on leaderboards and team rosters when viewed by peer players.
No payment from children. Children under 13 cannot enter a payment method. Only the parent or legal guardian who provided consent may add a paid plan to the account.
Parental rights. Parents or guardians may, at any time:
- Review the personal information we have collected from their child;
- Request corrections to that information;
- Request deletion of the child's account and all associated data;
- Revoke consent (which will close the account).
Email privacy@squad9baseball.com from the same email address that provided consent, including the child's username; we will respond within 7 business days.
No behavioral advertising. We do not serve targeted advertising to any users, including children. No data collected from child users is shared with third parties for marketing purposes.

8. Data Retention

Active accounts: We retain your data for as long as your account is active.
Inactive accounts: Accounts with no login activity for 24 consecutive months will be flagged for deletion. We will send a notification email 30 days before deletion.
Deleted accounts: Upon account deletion (whether by your request or inactivity), all personal data is permanently removed within 30 days, except where retention is required by law.
Verification codes: Temporary verification and consent codes are automatically deleted after 10 minutes.
To request immediate deletion, contact privacy@squad9baseball.com.

9. Your Rights

All users:

Access the personal data we hold about you.
Request correction of inaccurate data.
Request deletion of your account and data.
Opt out of non-essential communications.

California residents (CCPA/CPRA):

Right to know what personal information we collect, use, and disclose.
Right to request deletion of your personal information.
Right to opt out of the sale of personal information. (We do not sell personal information.)
Right to non-discrimination for exercising your privacy rights.
To exercise these rights, contact privacy@squad9baseball.com. We will respond within 45 days.

EEA/UK residents (GDPR):

Right of access (Article 15) — request a copy of your data.
Right to rectification (Article 16) — correct inaccurate data.
Right to erasure (Article 17) — request deletion ("right to be forgotten").
Right to restrict processing (Article 18).
Right to data portability (Article 20) — receive your data in a structured, machine-readable format.
Right to object (Article 21) — object to processing based on legitimate interests.
To exercise these rights, contact privacy@squad9baseball.com. We will respond within 30 days.

Parents/Guardians of users under 13:

Review all personal information collected from your child.
Request correction or deletion of your child's data.
Revoke consent and have the account terminated.
Contact privacy@squad9baseball.com to exercise any of these rights.

10. Data Security

We implement appropriate technical and organizational measures to protect your data, including encryption in transit (HTTPS/TLS) and secure authentication.

11. Data Breach Notification

In the event of a data breach that affects your personal information, we will:

Notify affected users via email within 72 hours of becoming aware of the breach.
Notify relevant supervisory authorities as required by applicable law (e.g., GDPR, state breach notification laws).
Provide details about the nature of the breach, the data affected, and the steps we are taking to address it.
For accounts of users under 13, notification will be sent to the parent or guardian's email address on file.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes through the App.

13. Contact

Privacy requests (data access, correction, deletion, parental rights): privacy@squad9baseball.com
General support (account issues, billing, app questions): support@atkin.tech
Mailing address: Atkin Enterprises, LLC, ATT: Privacy Team, 830 W. IL Rt 22 PMB# 67, Lake Zurich, IL, 60047