TheStats appLive scores & stats · Free
Get

Privacy Policy

Last updated: November 7, 2026

1. Introduction

TheStats.ai LLC ("TheStats", "we", "our", or "us") runs TheStats.ai, a sports league management service, on our website and in our iPhone app ("the app"). The app is for fans: following leagues and teams and seeing scores. This Privacy Policy explains what information we collect, how we use it, who we share it with, how long we keep it, and the choices you have. It applies to the website and the app alike, except where a section says otherwise.

2. Information We Collect

Account Information

When you create an organizer account on our website, we collect your name and email address, and a password if you choose one (stored using industry-standard hashing). League organizers may also give us organization details such as the organization's name and contact information.

Phone Number

When you sign up as an organizer on the website we ask for your phone number. We use it to contact you about your account, to give you support, and to let our team know a new organizer has signed up. We do not send you marketing text messages.

Fan Accounts

You don't need an account to use our app or to follow leagues. If you want your followed leagues and teams on all your devices, you can create an optional fan account. In the app you sign in with Apple or Google; on our website you sign in with Google or Facebook. We never ask for or store a password for a fan account.

For a fan account we store:

  • your name, as your sign-in provider gives it to us;
  • your email address, if the provider shares it;
  • your profile picture link, if you sign in with Google or Facebook on our website;
  • an ID from your sign-in provider, which provider you used, and when you last signed in;
  • the leagues and teams you follow; and
  • a location, only if you type one to find nearby leagues. We store it rounded to about 1 km (0.6 miles).

We use this only to sign you in, keep your follows in sync, and show you nearby leagues. We don't share fan account information with league organizers, sponsors or advertisers.

Sign in with Apple

Apple sends us your name (the first time only) and an email address. If you chose "Hide My Email", the address is a private Apple relay address that forwards to you, and we never use it to join your sign-in to another account. Apple also gives us a sign-in token, which we store encrypted and use only to tell Apple to end our access when you delete your account.

Sign in with Google or Facebook

Google sends us your name, email address and profile picture. Facebook (website only) sends your name and profile picture, and your email address if you allow it. If you sign in with Apple or Google using a verified email address that already belongs to your fan account, we sign you in to that same account.

Remembering How You Signed In

So the app can remind you ("Last time you signed in with Apple"), it saves a small note on your device: the sign-in method, the date, and at most a partly hidden email such as "n•••@gmail.com". Never a password or sign-in token. In the iPhone app this note is kept in your iCloud Keychain, so it stays after you reinstall the app and moves to a new iPhone signed in to the same Apple Account; on the website it is kept in your browser's local storage. The note stays on your devices and Apple's iCloud Keychain; we don't receive it. It stays when you sign out and is erased when you delete your account in the app.

Sign-In Reminder Emails

If you forget how you signed in, you can enter an email address in the app. If a fan account uses that address, we email it which method you used (for example, "You signed in with Apple"). The screen looks the same whether or not an account was found, so nobody can use it to find out who has an account. We send this email through our email provider, Brevo. We don't keep the address you typed; to stop abuse we keep a scrambled (hashed) form of it for one hour to limit how many reminders it can receive. If you used "Hide My Email", enter the Apple relay address, since that is the address on your account.

League & Game Data

We collect and store league data including team names, player names, jersey numbers, game scores, player statistics, and scheduling information that you provide through the service.

League Venue

Organizers can add the place where their games are played: a venue name and street address, city, state and ZIP code. We convert it into map coordinates so people can find nearby leagues. On a public league, the venue name and address are shown publicly. The exact coordinates are not shown. Organizers should enter a public venue, not a private home.

Your Location (App)

When you first open the app, we ask whether you want to see public leagues near you. If you allow location access "while using the app", your phone's location is rounded to about 7 miles (one decimal place) on your phone before it is used. The rounded location is saved on your phone so the app can show nearby leagues next time, and sent to our servers only to look up nearby leagues. We do not store it on our servers. You can type a ZIP code instead; we use it the same way. If you have a fan account and type a place, the rounded location is stored with your account as described under "Fan Accounts". You can turn location off at any time in your phone's Settings.

YouTube (League Administrators Only)

See "Google and YouTube Data" below.

Notifications

On the website,if you turn on notifications we store your browser's push subscription address (a URL generated by your browser). It is not linked to any account and is used only to send game and league notifications.

Following a league in the app.In the app you can follow a public league, with or without an account, to get an alert when its games end. For this we store a random ID created by the app on your phone, your device's notification token, and the leagues you follow. This is not linked to a name, email or account. Unfollowing removes the league. If you delete the app, the token stops working and we delete it the next time Apple tells us so.

Live Activities

If you follow a live game on your Lock Screen, Apple gives us a token for that game. It is not linked to your account or name. We use it only to update that game's score. We delete it when the game ends, and in any case within two days.

AI Features

Some features send your content to an AI provider: reading a scoresheet or stats photo you import, extracting stats from game video, our help chat, and player development reports. Before you use these features for the first time, we ask your permission and record your answer. You can always enter stats by hand instead. Leagues can also have AI-written game recaps; these use scores, team names and the names of top performers, and are turned on for the league, not per person. Section 4 lists each provider and what it receives.

Content Reports

Anyone can report content on a public page. A report contains the page, the reason, any details you write, and your email address only if you choose to give it. If you are signed in, we link the report to your account. We store a scrambled (hashed) form of your IP address, never the address itself, to prevent abuse. We use reports only to review and act on them.

Automatically Collected Information

Our servers keep standard logs, including IP addresses, browser or app type, and access times, for security and to keep the service running. We also collect usage analytics; see "Analytics" below.

3. How We Use Your Information

  • To provide and maintain the league management service, on the website and in the app
  • To display game statistics, standings, and leaderboards
  • To show public leagues near you, when you ask
  • To send notifications and Live Activity updates you have turned on
  • To run AI features you have agreed to use
  • To facilitate YouTube livestreaming of games (when connected by an admin)
  • To authenticate users, protect accounts, and review content reports
  • To understand how the service is used so we can improve it, and to report overall usage to leagues and sponsors in aggregate form (see "Analytics")
  • To understand which pages and campaigns bring new organizers

4. Data Sharing

We do not sell your personal information. We do not use it to track you across other companies' apps or websites, and we do not work with advertising networks or data brokers. We share data only as follows:

  • Public League Pages: League names, team names, player names, game scores, statistics, and the league venue may be publicly visible if the league organizer makes the league public.
  • YouTube: When an admin connects a channel, we interact with the YouTube API only to create and manage that league's live broadcasts. See "Google and YouTube Data" below.
  • Service Providers: These companies run parts of the service for us and process data on our behalf:
    • Amazon Web Services (AWS): hosting and database, including our own analytics
    • Apple: Sign in with Apple, app notifications, Live Activities, and iCloud Keychain on your device (see "Remembering How You Signed In")
    • Google: Sign in with Google
    • Meta (Facebook Login): fan sign-in on our website only. Our iPhone app includes Meta's Facebook sign-in software because it comes bundled with the sign-in component we use. The app does not offer Facebook sign-in, and does not start or use that software.
    • OpenAI: reads scoresheet and stats photos you import (the photo may show players' names and numbers), with your permission
    • Google (Gemini): extracts stats from game video you choose to analyze, with your permission
    • Groq: writes game recaps (scores, team names and top performers' names) when a league uses recaps, and player development reports you request
    • Anthropic: our AI help chat receives what you type and attach, with your permission
    • Stripe: payment processing
    • Twilio: SMS messaging
    • Brevo: email delivery, including sign-in reminder emails
    • Meta (WhatsApp): messaging, where enabled
    • YouTube (Google): live streaming, when an admin connects a channel
    • Telegram: internal alerts to our own team, for example a new organizer's name, email and phone, or a content report
    • PostHog: product analytics on our website's marketing, demo, legal, sign-in, welcome and sign-up pages, and events about organizer accounts sent from our servers (US-hosted). PostHog does not run inside our app.
    • Cloudflare: content delivery, security and privacy-friendly page-view statistics
  • Legal Requirements: We may disclose information if required by law or to protect our rights.

5. Analytics and Local Storage

Our own usage analytics (app and website)

To learn how people use TheStats, we record a small set of events on our own servers. No outside analytics company receives them. Each event carries a random ID created by the app or your browser, and your account ID if you are signed in as an organizer. We record:

  • opening the app, and the steps of the first-open screens (for example, whether you allowed location or typed a ZIP code)
  • which public leagues, sports and tabs you view
  • following or unfollowing a league
  • turning alerts on, and opening an alert
  • searching: only how many results there were and whether you tapped one, never what you typed
  • tapping Share, and starting a Live Activity
  • seeing or tapping a sponsor

Each event also records the date and time, whether it came from the app or the website, the app version, and at most a rough area: the first three digits of a ZIP code or a city and state. We never record your exact location, and we do not store your IP address with these events. We never record events about individual youth or adult players: a visit to a player's page is recorded as a visit to that league.

We use these events to improve the service and to report totals to leagues and sponsors (see "Data Sharing"). We do not use them for advertising profiles or to track you across other companies' apps or websites. When an organizer deletes their account, we remove their account ID from these events. We delete these events after 13 months.

Where website marketing analytics runs (PostHog)

On our website only, we also use product analytics (PostHog) on our home page, sport landing pages, audience pages (such as "for parks and recreation"), blog, pricing page, demo, Terms and Privacy pages, and our sign-in, sign-up and welcome pages. We do not run it in the app, on Google sign-in pages, public league or game viewer pages, or inside the league management dashboard.

What we collect in your browser

On those pages we record which page you visited, how you arrived, and whether you opened and submitted the sign-up form (with the sport, plan or bundle you chose, and the sign-up method, password or Google). Our analytics provider also records standard browser details: browser, operating system, device type and screen size. Page addresses are stripped of everything except campaign tags (such as utm_source), and any page outside the list above is recorded only as "[excluded]". We do not automatically capture clicks or keystrokes, and we do not record sessions, heatmaps or page performance. Our analytics provider stores an anonymous ID in your browser's local storage and sets no cookies. Our analytics provider receives your IP address and uses it to estimate your approximate location (city, region and country); it is kept with analytics data for the retention period below.

Sign-up attribution

To learn which campaigns bring us new organizers, we store in your browser's local storage the campaign tags, referring site (without its query string) and landing page from your first visit and from your most recent visit that came from a campaign link or another website. On pages where we do not run PostHog, such as public league pages, we do this too, but we keep only a general label instead of the page address, and nothing leaves your browser unless you sign up. If you sign up, we save that information to your account in our database.

Account events

Our servers send our analytics provider events about how the service is used, grouped under your organization's account: account created, trial started, league created, team created, game created, game completed, and subscription activated or updated. These events contain internal IDs (including the ID of the user who took the action), sport, plan, bundle, status and sign-up method, and the account-created event also carries the sign-up attribution described above (campaign tags, referring site and landing page). They never contain names, email addresses, phone numbers, or team or player names. Account events are part of operating the service and are sent for all accounts; the choices below control analytics in your browser. When you sign up, the anonymous browser ID is linked to your account.

Page-view statistics

On all pages we use Cloudflare Web Analytics, a cookieless tool that collects aggregate page views, referring site, country and device type. It does not build personal profiles.

Where analytics data is kept

Our analytics provider, PostHog, hosts our analytics data in the United States.

Your choices

If your browser sends a Global Privacy Control signal, our website does not send our own usage analytics and does not load PostHog. We also do not load PostHog or store sign-up attribution for visitors in the European Economic Area, the United Kingdom or Switzerland, or if your browser sends a Do Not Track signal. You can turn website analytics off at any time with this control:

Your choice is saved in your browser's local storage. Clearing local storage removes the stored IDs and attribution data and resets this choice. The app has no separate analytics switch; the events above are limited to what is listed, carry no exact location, and are never used for advertising or tracking. We do not sell your personal information or share it for cross-context behavioral advertising.

Retention

Our own usage events are deleted after 13 months. PostHog analytics data is kept for 12 months. Sign-up attribution is kept with your account and deleted with it.

6. Google and YouTube Data

TheStats.ai lets league administrators livestream their games to their own YouTube channel. This section describes exactly what that involves.

Who grants access, and to what

Only a league administrator who clicks "Connect YouTube" in League Settings grants us access — nothing happens automatically. We request Google's https://www.googleapis.com/auth/youtubescope, and we use it solely to create, start, stop, list, and delete live broadcasts and live streams for that league's games, and to read the connected channel's ID and title so the admin can confirm the right channel is linked. We do not read, modify, or delete the channel's existing videos, comments, subscriptions, or playlists.

What we store

For a connected league, we store the channel ID, channel title, OAuth tokens (the refresh token and stream key are encrypted at rest), the token's expiry, and a reusable YouTube stream ID. This data is used only to manage that league's broadcasts.

Retention and deletion

This data is kept only while the league stays connected. Clicking "Disconnect" revokes the OAuth token with Google and permanently deletes the stored connection. You can also review or revoke TheStats.ai's access at any time at myaccount.google.com/permissions, or by contacting [email protected].

What we don't do with this data

We do not sell this data, do not share it except as needed to provide the livestreaming feature itself, do not use it for advertising, and do not use it to train AI or machine-learning models.

TheStats.ai's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

TheStats.ai uses YouTube API Services. By connecting a YouTube channel, you also agree to the YouTube Terms of Service and the Google Privacy Policy.

7. Data Security

We implement industry-standard security measures including encrypted data transmission (HTTPS), hashed passwords, encrypted OAuth tokens (AES-256-GCM), and secure cloud infrastructure (AWS).

8. Data Retention and Deleting Your Account

We keep your account information while your account is open. League and game data is kept as long as the league exists on the service.

Deleting your fan account

In the app: open the menu (☰), then Settings → Delete account. On the website: open the menu under your picture and choose Delete account. When you confirm, we:

  • ask Apple to end our access, if you used Sign in with Apple;
  • permanently delete your fan account (name, email, picture link, sign-in IDs, saved location) and the leagues and teams you followed;
  • sign you out, and erase the "how you signed in" note on that device.

Some copies remain for a short time: our encrypted database backups are overwritten within 7 days, and our email provider keeps a delivery log of any reminder email we sent you for a limited time. Follows you made without an account are kept on that device's install, not your account: unfollow in the app or delete the app. You can also email us to delete your account.

Deleting your organizer account

Organizers can delete their account on the website, in their account settings. When you confirm:

  • your name, email address, phone number, password and Google or Apple sign-in links are erased right away, and we ask Apple to revoke our access if you used Sign in with Apple;
  • your app notification tokens and your league memberships are deleted, your account ID is removed from our own usage analytics, and, if you are the only administrator, we ask PostHog to delete the account's analytics person and events (processed in the background). If you are not the only administrator, the organization's account and its events stay;
  • if you are the only administrator of an organization, the organization is deactivated, its leagues are made private, and any subscription is cancelled. The organization and its leagues are kept, not shown publicly, so the organizer can come back later. We do not delete them automatically. If you want them deleted permanently, email us at the address below and we will do it;
  • league records you entered stay with the league if other administrators remain.

9. Your Rights and Choices

You can:

  • Ask to see the personal data we hold about you
  • Ask us to correct inaccurate data
  • Delete your fan account yourself in the app or on the website, or your organizer account on the website (see section 8)
  • Turn off notifications and Live Activities, in the app or in your phone's Settings
  • Turn off location access in your phone's Settings, or use a ZIP code instead
  • Decline to use AI features
  • Disconnect third-party integrations (e.g., YouTube) at any time
  • Turn off website analytics (see "Analytics and Local Storage" above)

10. Children's Privacy and Youth Leagues

TheStats.ai is a tool for league organizers. It is not directed to children, and children should not create their own organizer accounts.

Youth leagues, schools and programs may add players who are minors, including children under 13 — for example a player's name, jersey number, team and statistics, and, if the organizer chooses, a photo or game video. The organizer decides what is added and whether the league is public or private. Our Terms of Service require the organizer to have permission from each player, and from a parent or legal guardian for any player under 18, before adding them. For children under 13, we handle this information on the organizer's behalf, as its service provider, to run that league. We do not sell children's information.

Our app is a general-audience app for league organizers, players, families and fans. It is not in Apple's Kids category. Our usage analytics never record events about individual players, and we do not share players' information with sponsors or advertisers.

Fan accounts are for people 13 and older. The app shows "Under 13? Ask a parent to sign in." under the sign-in buttons. If we learn that a fan account belongs to a child under 13, we delete it. Parents can ask us to do so at the address below. Children can use the app without an account.

Parents and guardians:you can ask your child's league to change or remove your child's profile, or contact us directly at [email protected] with the league name and your child's name. We will confirm the request, let the league know, and remove the profile.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes by posting the updated policy on this page with a revised date.

12. Contact Us

If you have questions about this Privacy Policy, please contact us at [email protected].

TheStats.ai LLC, 1904 East 26th St, Brooklyn, NY 11229. Help and contact options are also on our Support page.