Who runs this site
La Crescent Youth Ball (LYB) is a volunteer-run Minnesota nonprofit corporation and IRS 501(c)(3) recognized organization. This website (lacrescentyouthball.org) is operated by the LYB board.
Questions about your data? Email info@lacrescentyouthball.org or write to us at P.O. Box 128, La Crescent, MN 55947.
What we collect, and why
If you register a child to play
- About the parent/guardian: name, email, phone number, mailing address, emergency contacts. We use this to reach you about games, practices, weather cancellations, and payments.
- About the child: first & last name, date of birth, division. Date of birth is used to place the child in the correct age division and nothing else.
- Medical / allergy notes you choose to share: only shown to that child's head coach and the LYB board. Never displayed publicly.
- Payment: credit-card payments are processed by Stripe. LYB never sees your full card number — only the last 4 digits and a confirmation from Stripe that the charge succeeded.
If you coach or umpire
- Name, email, phone number, and (for umpires) date of birth, so we can pay you correctly and track age-based division eligibility.
- Payment ledger records (games worked, amounts owed, amounts paid).
If you just visit the site
- Cloudflare (our hosting provider) logs the standard information any web server receives: your IP address, browser type, and the pages you visited. See Cloudflare's privacy policy.
- We do not use Google Analytics, Facebook Pixel, or any third-party ad tracking.
- We use one cookie (
lyb_user_session) to keep you signed in if you have a family or coach account. It's HTTP-only and site-only — it can't be read by other websites.
What we show publicly
On team pages and the public game center, we display:
- A player's first name and last initial only (e.g. "Sam T.") — never the full last name.
- Team roster count, division, and coach's first name + last initial.
- Game schedules, scores, and standings.
We never display a child's date of birth, address, phone number, emergency contacts, or medical notes publicly. Full last names are visible only to that child's own family (in their portal) and to that team's coach and the LYB board.
Children's data (COPPA)
Accounts on this site are created and managed by the parent or legal guardian — not by the child. If you are under 13, do not create an account or submit any information here. Your parent or guardian handles registration.
Parents can request a copy of everything we hold about their child, or ask us to delete it, at any time by emailing info@lacrescentyouthball.org. We will respond within 30 days.
Who we share data with
We share the minimum necessary with these vendors, and only to run the league:
- Cloudflare — website hosting and database (data stored in the U.S.)
- Stripe — payment processing for registration and Applesmash tournament fees
- Resend — transactional email delivery (registration confirmations, password resets, umpire pay notices)
We do not sell, rent, or trade your information. We do not use it for advertising. We do not share it with other leagues, schools, or third parties, except when compelled by a valid legal request (e.g. subpoena).
How long we keep it
- Player rosters & game records: retained indefinitely as historical league records (this is a 60-year-old league; we do keep history).
- Payment records: retained 7 years to satisfy IRS nonprofit recordkeeping.
- Medical / allergy notes: deleted at the end of each season unless renewed.
- Deactivated accounts: login credentials disabled immediately; other data retained per the rules above.
Your rights
You can, at any time:
- See what we have about you and your family (log into your portal, or email us for a full export).
- Correct anything that's wrong.
- Ask us to delete your account and data (subject to the retention rules above — we can't delete a paid registration from the year the child actually played, but we can remove contact info).
- Withdraw consent for future emails (your player-related transactional emails will still be sent while your child is active in the program — that's how you find out about rainouts).
Security — what we do, honestly
We're a volunteer nonprofit, not a bank. Here's what we actually do:
- Passwords are hashed (never stored in plain text). We're upgrading the hash algorithm this season.
- Payments go straight to Stripe; we never store card numbers.
- Session cookies are HTTP-only, site-scoped, and expire after 7 days of inactivity.
- The site runs on Cloudflare, which handles TLS/HTTPS and edge security.
If we discover a breach that affects your personal information, we'll notify affected families by email within 30 days and post a notice on this page.
Changes to this policy
If we make a material change (e.g. adding a new vendor, or changing what we collect), we'll update the "Last updated" date at the top and, for anything substantial, email active families.
Contact
La Crescent Youth Ball
P.O. Box 128
La Crescent, MN 55947
info@lacrescentyouthball.org
