Who this covers
The Bulldogs Baseball Booster Club website and The Pen support Bulldogs Donovan Baseball, its invited players, families, coaches and other authorized team members. This notice describes the current website and private member service.
The public Pen preview uses fictional player records. Feedback you choose to submit from that preview is saved. Real player records require an authorized account.
Information used by the service
- Account access: email, account identifiers, invitation status, sign-in information, and security-factor settings.
- Team development: player and guardian relationships, birth dates where supplied, team roles, schedules, goals, measurements, statistics, assigned work, journals, feedback, conversations, equipment and uploaded files.
- Permissions and administration: consent choices, agreement acknowledgments, publication decisions, change history and notification preferences.
- Public inquiries: details you submit in a tryout interest form, preview feedback or email to the club.
- Service operation: request and security logs, such as network addresses, browser information, errors and access events handled by our hosting and service providers.
This information supports account security, coaching, team administration, requested communications and the features you use. Only submit information appropriate for that purpose.
Private records and public sharing
Account roles and player relationships control access to private records. Authorized team staff and linked family members can access the records their role permits. Your account may have access to more than one workspace.
The managed public gallery and public player highlights require applicable guardian permission and a publication decision. Guardians can review or withdraw publicity choices in The Pen’s Permissions area. Withdrawal affects future access through those features; it cannot recall screenshots, downloads or copies already made elsewhere. Shared recruiting links can be viewed by anyone who has the link while it remains active.
For a child’s account or records, a parent or legal guardian should handle privacy requests. Contact the club about information that should not have been collected or published.
Services that process information
Vercel hosts the website and server functions. Supabase handles authentication, the database and private file storage. Resend handles configured team emails; authentication emails are sent through the authentication service’s configured mail delivery. These providers process information needed to operate their part of the service.
When you ask The Pen assistant a question, the question, up to four recent question-and-answer turns, relevant authorized handbook excerpts and selected development context are processed through Vercel AI Gateway and OpenAI. Selected context can include age, equipment, goals, assigned work and progress summaries. The automatic player-context loader excludes names, exact birth dates, journal text, private messages, uploaded files and private notes. Text you put in a question or a goal can still contain personal information, so avoid adding unnecessary identifying or sensitive details. Provider processing and retention also depend on their service terms and account settings.
GameChanger provides the scoreboard on the schedule page. Donation and social-media links lead to outside services, including Givebutter, Facebook and Instagram. Their own privacy practices apply when you use them. The team store currently has no products or checkout.
Your browser and device
The website can cache approved public pages and assets for offline use. Private Pen records are not stored in that offline page cache. Sign-in uses a temporary verification value in session storage; the current app keeps authentication sessions in memory rather than persistent browser storage. Provider websites may use their own cookies for sign-in.
Video capture features identify whether processing happens on your device or requires a private upload. The temporary capture pilot requires guardian authorization and provides deletion controls. Its uploads expire after one hour; cleanup retries every five minutes, and outages can delay physical deletion. Consent and deletion-audit records are separate from the uploaded video.
Choices, retention and requests
Use notification preferences to manage optional email categories. Publicity permission and private video authorization have their own controls. Signing out ends access on the current device; it does not delete the account.
There is currently no automatic deletion schedule for ordinary account, team-development, consent and audit records. Account closure, copies, corrections and deletion requests are handled by the club after verifying the requester’s authority. Shared team history and backup copies require separate review. We do not promise instant removal of every record or provider backup.
How to request access, correction or deletion →
Email bulldogsdonovan@gmail.com with a privacy question. Do not include passwords, verification codes, authentication secrets or detailed child records in the initial email. Material changes to this notice will be reflected on this page.
Google and Facebook sign-in
When a sign-in option is offered and you choose it, the identity provider shares basic account information with our authentication service: a provider account identifier, email and available profile information such as name and picture. That information is used to authenticate your existing invited account and maintain the linked sign-in identity.
Google sign-in requests basic identity scopes only: openid, email and profile. It does not request access to Gmail messages, Drive files or contacts. Facebook sign-in, when available, uses basic profile and email permissions. A provider connection does not grant a team role or create a player profile. Provider identity information is not added to AI coaching context by the sign-in integration.
Your provider password is entered with the provider. You can remove the connection through your provider’s account settings. Removing that connection does not by itself delete Pen records; see data requests and deletion.