Privacy Policy
Effective October 17, 2026
The short version: LeagueSeek counts visits without knowing who you are. If you sign in or turn on alerts, we keep only what we need to send them. We never sell your information or share your phone number for marketing, and you can delete everything at any time.
Browsing the site
You can use LeagueSeek without an account. To learn which listings and searches are useful, the site records:
- a random visitor id and a random id for each visit, kept in your browser's local storage;
- pages you arrive from, and any campaign tag on the link you followed;
- the filters and search words you use, which sign-up or source links you click, and whether you open the sign-in window;
- whether you are on a phone or a computer, and your country and state, as reported by our hosting provider.
We do not store IP addresses, and we use no advertising or third-party tracking scripts. If your browser sends Global Privacy Control or Do Not Track, none of this is recorded. You can also clear the ids at any time by clearing this site's data in your browser.
When you open leagueseek.com, we use the approximate location our hosting provider reports for your connection to send you to the nearest area we cover. We don't store it. If you pick an area yourself, the picker remembers your choice in a cookie on your device, so you go straight there next time. If you tap Use my location on the area picker, your browser's location is used on your device to find the nearest area and is never sent to us.
If a page breaks in your browser, it sends us the error message, where in our code it happened, and the page's address without anything after it. No visitor id or other information about you goes with it. We keep error reports for 90 days, to find and fix what broke.
Accounts
You can create an account to follow programs and get alerts. Accounts are for adults 18 and older.
- Signing in with Google: we receive your email address, whether Google has verified it, and an id Google assigns you, plus your name if Google shares it. We do not receive your Google password or post anything to your Google account.
- Signing in with email and password: we store your email address and a one-way hash of your password (PBKDF2 with a random salt per account), never the password itself. To make an account, or to set or reset a password, we email you a 6-digit code first to make sure the address is yours. Changing your password signs you out everywhere else.
- Wrong passwords: to stop guessing, we count wrong passwords for each email address typed, whether or not it has an account, and pause password sign-in for that address for 15 minutes after ten. The count is kept under a one-way hash of the address, not the address itself, and deleted once the 15 minutes are up.
- Home area: we store a home area for your account, so alerts cover the programs near you. It starts as the area you were looking at when you made the account. You can change it in your account settings.
- Linked sign-ins: if you sign in different ways with the same verified email address, we link them to one account.
- Sign-in log: to see where signing in goes wrong, we log each step (a code sent, a wrong or expired code, a wrong password, a password set or reset, a Google sign-in that failed, a successful sign-in) and each unsubscribe from alert emails, with the time. The log never holds your email address, a code, or a password; a successful sign-in, a password set or reset, or an unsubscribe is tied to your account. We delete each entry after 13 months.
Follows and ages
When you follow a program, sport, or organizer, we store what you followed and any ages you enter so that alerts match the right programs. If a program or organizer you follow has had no listing on the site for two years, we delete that follow.
Interested and Going
When you mark a listing Interested or Going, we store which one and who in your household it's for. Everyone sees only the totals: a listing shows how many are going once three or more are. Nobody else can see who marked it. We delete your marks on a listing one year after it comes off the site.
Posts and replies
Posts and replies on a listing are public: anyone can read them, under the display name you pick the first time you post. We never show your email address or your household. Posts come from the adult who owns the account; please don't share a child's name, age, school, or contact details, and the site turns away phone numbers, email addresses, and birth dates. When someone who runs the organization posts, it shows as verified. If you report a post, we keep who reported it and why, so we can review it; the author isn't told who. Posts that several people report are hidden until we review them. You can delete your own posts at any time.
Posts don't stay forever. A listing's discussion closes when its season or event is over and is deleted 30 days later. On listings that run year-round, a conversation is deleted 90 days after its last reply. When a reported post is deleted, we keep a copy of it, who wrote it, and what we decided for one year, then delete that too. We don't keep who reported it.
Pickup games
When you post a pickup game, we keep what you entered (the sport, game, time, place, and any note) and that you host it. When you say you're in, maybe, or on the waitlist, we keep that and how many guests you're bringing. Signed-in visitors see the first name or display name of who's coming; signed-out visitors see only the counts. A private game can be found only by its link.
If you pin a spot, like your driveway, only you and the people who have answered your game (or everyone, if you choose) see the exact spot. Everyone else sees the neighborhood and a spot moved a few hundred meters away. Your browser's location is used only when you ask: to show distances, which happens on your device and is never sent to us, or to pin a spot when you tap “I'm there”. Games' chats work like posts and replies, below, and close 12 hours after the game; a private game's chat is seen only by its host and players.
Games don't stay forever either. A one-time game ends the day after it's played. Each date of a game, with who was in, maybe, or waiting, who asked to be notified or muted it, and which notifications went out, is deleted 90 days after it's played. Once an ended game has no dates left, the game itself is deleted too, pinned spot and all. A weekly game nobody but its host has joined for 6 weeks pauses: it stops adding dates and we email the host, who can resume it; a game paused for a year ends. A report about a game is kept until we decide on it and for one year after, then deleted.
If you turn on notifications, we keep the address your browser's push service gave us for it, so we can send pushes about games you're in or asked to hear about. The push service (Apple, Google, or Mozilla, depending on your browser) delivers them encrypted and can't read them. Mute a game, or turn notifications off in your browser, to stop them. If nothing has been delivered to that address for a year, we delete it.
Your household
You can add the people you sign up (yourself, a partner, your kids) so the site can show the listings that fit each of them and alerts can say who they are for. Only the adult who owns the account adds them. For each person we keep only:
- a first name or nickname, so you can tell them apart (no last names);
- an age, and if you add them, a birthday (month and day) or a kid's school grade, to match age and grade limits, including leagues that count age on a set day such as December 31;
- a gender, only if you give one, to match boys', girls', men's, and women's programs;
- the sports they play or want to try, to narrow their listings.
We don't ask for a school, photo, address, or anything else about them, and we never share this with organizers or anyone else. It isn't sent with the site's visit counts: when you show listings for someone, the link holds only a random id. Removing a person deletes their details and anything followed, marked, or asked for them right away, and deleting your account deletes everyone in it.
Text and email alerts
Alerts are off until you turn them on. If you turn on text alerts, we store your mobile number, when you agreed, and the wording you agreed to. We send at most one alert message a day. Message and data rates may apply. Reply STOP to any text to stop them, or HELP for help. Every email has a link to turn alerts off. We keep a record of which alerts we have sent you, and when, so you never get the same one twice, and delete it one year after the listing it was about comes off the site.
Mobile information will not be shared with third parties or affiliates for marketing or promotional purposes. Text message opt-in data and consent will not be shared with any third parties.
Feedback
If you send feedback, we keep your message, the page you sent it from, and your email if you gave one or are signed in, so we can read it and reply. It is emailed to us and stays in our database until you ask us to delete it. Asking to hear when LeagueSeek comes to your town ("Not in your area yet?") is sent the same way, with your town and email, and we use them only to tell you.
How we use information
We use it only to run LeagueSeek: to show and improve listings, to keep you signed in, to send the alerts you asked for, to answer you when you contact us, and to keep the site safe from abuse. We do not sell or rent personal information, and we do not use it for advertising.
Who else handles it
A few service providers process information for us, only to run the site:
- Cloudflare hosts the site and its database.
- Google handles sign-in if you choose it.
- An email delivery service sends sign-in codes and email alerts.
- A text messaging service sends text alerts.
- Your browser's push service delivers pickup game notifications, encrypted, if you turn them on.
- OpenStreetMap serves the map tiles on pickup games' maps.
Organizers never receive your name, email, phone number, or ages. When we show organizers interest in their programs, it is as counts only: how many follow, are interested, or are going, and once three or more people have marked their listings, how many fall in each age group and gender. Never who. The one exception is your own claim to run an organization: if you ask us to email a code to its contact address, that email names your sign-in email so they know who is asking. Once you help run an organization, its other members see your sign-in email on its team page, and an invite you send names it. We may disclose information if the law requires it.
Seeing and correcting your information
You can see and change most of what we keep on your account pages: your household, follows, alerts, and posts. To get a copy of everything tied to your account, or to correct something you can't change yourself, email support@leagueseek.com from the email address on your account. We answer within 30 days. These choices are the same wherever you live, and using them never changes how the site works for you. If we turn down a request, you can ask us to reconsider by replying to our answer.
Deleting your information
To delete your account and everything tied to it (your sign-ins, follows, ages, household, Interested and Going marks, pickup games and answers, posts and reports, notification subscriptions, alert settings, and contact details), email support@leagueseek.com from the email address on your account, or tell us the phone number you used. We will delete it within 30 days and confirm when it is done. If you signed in with Google, you can also remove LeagueSeek from that account's app settings, and we will delete the sign-in it shared with us.
Browsing records are not tied to your name or contact details. To remove them from future visits, clear this site's data in your browser.
How long we keep it
We keep account information while your account is open. When you turn alerts off, we keep the record that you agreed and later stopped, because messaging rules require it. Browsing records (each visit, search, filter, and click) are kept for 13 months to measure how the site is used, then deleted; after that we keep only daily totals, such as how many visitors came each day and how many clicked each listing. So a browser counts once over time, we keep its random visitor id with the first and last day it visited until it has gone 13 months without a visit.
Security
The site uses HTTPS everywhere. Passwords, sign-in sessions, and codes are stored only as one-way hashes. Sessions are deleted once they expire, and codes once they and their hourly limit run out. Access to the database is limited to LeagueSeek. LeagueSeek's administrators can see account email addresses, how each account signs in, when it joined and was last seen, what it follows, and whether alerts are on, to run the site and understand how it is used. They are not shown to anyone else.
Changes
If we change this policy, we will update the date above. If a change affects how we use information you already gave us, we will tell you before it takes effect.
Contact
Questions about privacy: support@leagueseek.com.