Privacy Policy — prior versions

The current document is at /privacy. Versions it replaced are below, newest first.

Version 2026-08-23

Published 2026-08-23. Superseded by version 0.4 on 2026-10-06.

Shotcaller is a playbook and team-management tool for flag-football coaches. Using it means storing information about a team — including, in many cases, information about children. We keep the amount of that as small as the product allows.

What we store

• Your account. Your email address, and the first and last name you give us. Sign-in is passwordless, so we never store a password.
• Your teams. Team name, format, colors, time zone, and any division or organization you type in.
• Your roster. Player names, jersey numbers, positions, and the guardian contacts you add so guardians can be invited.
• Your football work. Playbooks, formations, plays, routes, game plans, call sheets, and wristbands.
• Team communication. Schedules, announcements, chat messages, and roll-call responses.

What we don't do

• We don't sell personal information, and we don't share it with data brokers.
• We don't serve third-party advertising, and there are no ad trackers in the app.
• We don't use player or roster data to train machine-learning models.

Who can see a team's data

Team data is visible to the people on that team, and what each person can see depends on their role. Coaches see the playbook and the roster; guardians see their own children. A coach on one team cannot reach another team's data — the API authorizes every single request against the team that owns the record, and it never accepts a team identifier from the browser.

Services we rely on

• Supabase — database, authentication, and file storage.
• Vercel — hosting for this site, the app, and the API.
• Google Maps — only when you attach a location to an event. Address lookups are proxied through our own API so your searches aren't tied to you by a third party.
• Stripe — subscription billing. Card details go straight to Stripe; they never touch our servers, and we never see or store them.
• Email delivery — for invites, announcements, and sign-in links.

Children's information

Rosters describe minors. That information is entered by a coach or a guardian for the purpose of running the team, is visible only to that team, and is deleted when the team is deleted. We do not build profiles of players, and we never contact a player directly — invitations for a minor go to their guardian.

Keeping and deleting data

You can delete a team, and doing so deletes its roster, playbooks, schedule, and messages. Ask us to delete your account and we'll remove it along with anything only you own. Backups roll off on their own schedule after that.

Reaching us

Questions about any of this, or a request to see or delete your data, go through our contact form.