Privacy Policy
This explains what The Playbook Caller collects, why it collects it, who else sees it, and how to get it back or deleted. It describes what the software actually does — not a template.
Who we are
The Playbook Caller is operated by Jorge Marrero, doing business as MiaMetrix ("we", "us"), an individual based in Florida, United States. The service is the website and application at theplaybookcaller.com.
For anything in this policy — access, correction, deletion, or a complaint — write to [email protected].
The short version
- We collect your email, a display name, and a password so you can have an account.
- We store the formations and plays you create, so they follow you between devices.
- We never see your card details. Payments are handled entirely by Stripe.
- There are no third-party analytics, no advertising, no tracking pixels and no cookies — none at all.
- The one thing we measure is the Ask the rule book (beta) panel: if you open it or type a question into it, we keep that in our own database to decide whether to build the feature. It is never shared or sold, and it is deleted after the beta ends.
- We do not sell or share your personal information, and never have.
- You can export everything from inside the app, and ask us to delete your account.
What we collect, and why
| What | Why | Where it lives |
|---|---|---|
| Email address | To create your account, sign you in, send password resets and confirmations, and contact you about the service | Supabase; the emails themselves are sent by Resend |
| Password | To sign you in. It is hashed by our authentication provider; we never see or store the plain text | Supabase |
| Display name, and team name if you set one | To show who you are in the app and to label a shared team library | Supabase |
| Your custom formations and plays | The point of an account: your work syncs between your devices | Supabase, and a working copy in your browser |
| Shared team library, if you are on a team plan | So a coaching staff can share one set of formations and plays | Supabase |
| Email addresses you enter to invite a coach | To send that person an invitation to your team | Supabase; the invitation email is sent by Resend |
| Subscription status and plan | To know what your account is entitled to | Supabase and Stripe |
| Questions you type into Ask the rule book (beta), and when you open or close that panel, together with the rule book, language, plan and formation on screen at the time | To measure whether coaches want a rules explainer and to learn what they would ask it. See Ask the rule book (beta) below | Supabase; held in your browser until it can be sent |
| Preferences: theme, rule book, ball spot, and whether you have seen the help | So the board opens the way you left it | Your browser. The rule book and language are also sent with the beta events in the row above, and only then |
That is the complete list. We do not collect your location, your contacts or your device identifiers, and we do not build a behavioural profile of you: the beta events above are read only in aggregate, to decide whether to build one feature.
What we deliberately do not do
These are worth stating plainly, because most services cannot:
- No cookies. The app sets none. Your sign-in is kept in your browser's local storage, not in a cookie.
- No third-party analytics or telemetry. There is no Google Analytics, no Plausible, no Segment, no error-reporting service. The only usage we record is the Ask the rule book (beta) events described above, kept in our own database and never shared.
- No advertising, no ad networks, no tracking pixels, no fingerprinting.
- No third-party fonts or CDNs. Every page loads only from our own domain, so no other company sees your IP address by loading a page here.
- No sale or sharing of personal information as those terms are used in US state privacy laws.
Who else processes your data
We use five service providers. Each one only receives what it needs to do its job.
| Provider | What it does | What it receives |
|---|---|---|
| Supabase | Accounts, database and sync | Your email, hashed password, display name, team name, your formations and plays, and the questions and panel events from Ask the rule book (beta) |
| Resend | Sends the account emails (confirming your address, password resets and team invitations) from [email protected], and records whether each one was delivered | Your email address, the content of those emails (including the one-time link in them), and delivery events such as bounces |
| Stripe | Subscription payments and the billing portal | Your email and payment details, which you give directly to Stripe. Card numbers never reach us |
| Cloudflare | Hosting and delivery of the site | The usual request data a web server sees, including your IP address, to serve the page and block abuse |
| Google (Google Workspace) | Hosts our email at miametrix.io, including the [email protected] mailbox, where we receive the emails you send us and your replies to our emails | The emails you send us, including your address and anything you write in them |
We do not use any other processor. If that changes, this page changes with it.
Ask the rule book (beta)
We are testing whether coaches want the board to explain, with the rule cited, why a formation is legal or illegal under each rule book. The Ask the rule book (beta) link opens a panel where you can tell us what you would ask. It does not answer yet, and no artificial intelligence is involved.
- What is recorded: that you opened the panel (and from where), anything you type and send (up to 500 characters), that you closed it, and, with each of those, the rule book, language, plan and formation on screen. It is linked to your account's internal id. Your name and email are not added to it.
- It is optional. Nothing is recorded unless you open the panel, and nothing you type is sent unless you press Send. Please don't include personal information in a question.
- Signed out or offline: the events wait in your browser and are sent the next time you are signed in. Signing out deletes any that have not been sent.
- How it is used: read in aggregate to decide whether to build the feature, and to learn which questions it would need to answer. It is not used for advertising and is never shared or sold.
- How long: deleted within 90 days after the beta closes, and always when your account is deleted.
- Legal basis (for users in the EEA or UK): our legitimate interest in improving the service, limited to what you choose to send.
Where your data is held
All five of our providers (Supabase, Resend, Stripe, Cloudflare and Google) are United States companies. Supabase, Resend, Stripe and Cloudflare process your data in the United States. Google, which hosts our mailbox, keeps email in its own data centres, which are in the United States and in other countries, so emails you send us may be stored outside the United States. If you use the service from outside the US, you are sending your information to the US, where privacy law differs from your own country's.
How long we keep it
- While your account exists: your account details and your saved work are kept so the service can function.
- After you ask us to delete: we delete your account and your saved work within 30 days.
- Billing records are kept by Stripe and by us for as long as tax and accounting law requires, typically seven years. These are records of payment, not of your playbook.
- Ask the rule book (beta) questions and events are deleted within 90 days after the beta closes, and always with your account.
- Your browser's local copy stays on your device until you sign out, clear site data, or uninstall the app. That copy is under your control, not ours. If your session ends and someone else signs in on the same browser, your copy is set aside on that device, never added to their account, and comes back when you sign in there again.
Your rights over your data
Wherever you live, we offer all of the following. We do not charge for them and we do not require an account-closure to exercise them.
- See it. Everything you have created can be exported from inside the app at any time, without asking us. The questions you sent through Ask the rule book (beta) are not in that export; email [email protected] and we will send you a copy.
- Correct it. Your name, team name and playbook are editable in the app.
- Delete it. Email [email protected] and we will delete your account and saved work within 30 days.
- Take it elsewhere. The export is a plain JSON file you own.
- Object or complain. Write to us. If you are in the EEA or UK you may also complain to your national data protection authority.
If you are a California resident: we do not sell or share personal information, and we will not discriminate against you for exercising any right above.
Children
The service is for adults. You must be 18 or over to hold an account, and we ask you to confirm that when you sign up. We do not knowingly collect personal information from anyone under 18.
If you believe a child has given us information, write to [email protected] and we will delete it promptly. A parent or guardian may use the same address to ask what we hold about their child and to have it removed.
Security
The site is served only over HTTPS and enforces it. Every page carries a Content Security Policy that blocks any script or connection we have not explicitly allowed, which is why there are no third-party requests. Passwords are hashed by our authentication provider. Access to your saved work is restricted to your account by database policies. No system is perfect, and we do not claim otherwise.
Changes
If this policy changes in a way that matters, we will change the date at the top and, for a significant change, tell account holders by email. Continuing to use the service after a change means you accept it.
Contact
Jorge Marrero, doing business as MiaMetrix
[email protected]