PUBLIC PILOT

Privacy

EloCup stores club branding, league settings, player rosters, scores, ratings and scoped admin permissions in its independent database. Club and league administrators can see the contact information needed to run their competitions.

Player details and private links

Players do not need accounts or passwords. A private, expiring link permits only the named action for one player. Links can be revoked. Keep them private. Phone changes require verification of the new number. Player photos are optional and appear on public club and league pages. Uploaded photos are stored separately from score records.

Email and optional texts

Resend processes league emails. Telnyx processes texts and phone-verification messages when those services are enabled. We store delivery status, delivery failures, availability responses and notification preferences. We do not enable click or open tracking on emails containing private access links. Message content in the pending queue is encrypted; access tokens and verification codes are stored as hashes rather than plaintext.

Roster phone imports do not grant permission to text. SMS consent is a separate, unchecked choice. Consent records include the number, timestamp, source, disclosure version and exact disclosure. Text frequency varies with your league. Message and data rates may apply. Reply STOP to turn off texts or HELP for support. You can participate and receive essential league emails without consenting to texts.

Notification preferences in emails let you turn off optional introduction and welcome emails. Essential availability and schedule communications remain available by email. Email bounces and complaints suppress the affected address. Opt-outs suppress texts until the supported resubscription flow or a separately verified, newly consented number is used.

Administration and access

Administrator identity comes from ChatGPT sign-in. Imported WPRC passwords and session tokens are not reused. Contact details, consent receipts and message histories are restricted to assigned club or league administrators. Security rate limits and webhook event identifiers help protect private links and prevent duplicate processing.

Harbor Racquet Club and Tri-Cup League are fictional example hubs. Demo portraits are AI-generated. They do not depict actual club members. A commercial retention schedule will be established before paid services. To request correction, photo removal or deletion of personal details, contact jcolayco@gmail.com.