Privacy Policy & Cookie Statement

This website serves as the official digital league management, fixture scheduling, and live scoring platform for Mossley & District Pool League ("we", "us", or "our").

We are committed to maintaining the trust of our registered players, team officials, venue hosts, and public visitors. This policy outlines what personal information we collect, why we collect it, how it is used to administer pool league competitions, and the choices you have regarding your data and cookies under the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018.

Depending on how you interact with the platform, we may collect and process the following categories of information:

• Public Sporting & Competition Records: Player names, team rosters, match appearances, frame-by-frame scores, player ratings (FargoRate progression), performance milestones (e.g. Break & Dish clearance accolades), match results, and division standings.
• Account & Authentication Credentials: Usernames, encrypted password hashes (using salted one-way bcrypt), roles (Administrator, Team Captain, Registered Player), and optional contact email addresses provided for account recovery or league notices.
• Team Captain & Official Contact Details: Contact phone numbers or email addresses provided voluntarily by captains and venue representatives to facilitate match coordination and fixture logistics.
• Technical & Diagnostic Information: IP addresses, browser types, device viewports, and timestamp records. This information is utilized for scorecard tamper prevention, security auditing, rate limiting, and Progressive Web App (PWA) offline service worker caching.

We process personal information strictly for legitimate sporting and league administration purposes, including:

• Publishing official fixtures, weekly results, knockout tournament brackets, and league tables.
• Authenticating team captains and officials to submit and verify match scorecards in real time.
• Calculating transparent skill ratings and historical statistics across seasons.
• Preventing duplicate player registrations and maintaining roster integrity.
• Delivering fast, installable Progressive Web App (PWA) functionality for live match nights.

We never sell, rent, or trade your personal data to commercial advertisers or data brokers.

Under Article 6 of the UK GDPR, we rely on the following lawful bases:

• Legitimate Interests: To organize, schedule, and publish results for community pool leagues. Publishing scores and sporting statistics is an inherent, public aspect of organized league competitions.
• Performance of a Contract / Participation: To administer team registrations, enforce league constitution rules, and communicate match logistics with nominated captains.
• Consent: Where required for optional non-essential analytics cookies, which you can grant or revoke at any time using our Cookie Preferences tool.

Cookies are small text files stored on your device by your browser. We also use browser localStorage to remember your display preferences. Below is a full breakdown of the technologies used:

We work with select service providers to deliver platform features:

• Interactive Maps: Leaflet & OpenStreetMap are utilized on the Venues directory to show pub and pool hall locations. No personal identification is transmitted.
• Content Delivery & Fonts: Google Fonts and standard CDNs (FontAwesome, Chart.js) may receive standard HTTP request headers (such as IP address) to serve modern typography and icons.
• Analytics (Optional): If enabled by league administrators, Google Analytics provides anonymized visitor metrics. This is governed by Google Consent Mode v2 and only activated with your consent.

We implement modern technical and organizational measures to safeguard your information:

• All web traffic is transmitted across encrypted HTTPS connections.
• User passwords are never stored in plain text and are salted and hashed using bcrypt.
• Role-based permission barriers isolate administrative controls, captain scorecards, and public areas.
• Database transactions use parameterized ORM queries to protect against SQL injection.

Retention: Sporting competition records (matches, frame scores, and archived division tables) are maintained indefinitely as official historical league records, consistent with sporting tradition and community recordkeeping.

Under UK data protection laws, you possess legal rights regarding your personal data:

• Right of Access: You can request a copy of personal information we hold about you.
• Right to Rectification: You can request correction of inaccurate player names or contact information.
• Right to Erasure / Pseudonymization: You may request the removal of non-essential personal information or request that your competitor name in public tables be pseudonymized, subject to league recordkeeping requirements.
• Right to Withdraw Consent: You can withdraw consent for optional analytics cookies at any time via the Cookie Preferences tool.

To exercise any of these rights, please reach out to the nominated league administrator or committee officials through the contact details provided in your league communications.