Stumps

Privacy Policy

Last updated: 20 July 2026

1. Who we are

Stumps (“we”, “us”, “our”) is a player-development platform for grassroots cricket coaching. We help coaches, parents, and players manage training plans, sessions, availability, bookings, and coaching notes. We are not a scoring, fixtures, or social networking app.

For privacy questions, contact us at privacy@usestumps.com.

2. Scope

This policy explains how we handle personal data when you use the Stumps website and related services (the “Service”). It applies to coaches, parents/guardians, adult players (16+), and club administrators.

Where we process data about children under 16, we do so because a parent/guardian or coach has created or linked that player profile as part of providing coaching services.

3. Data we collect

Depending on your role, we may process:

  • Account data — email address, password (stored by our auth provider), display name, and account type (coach, parent, or player).
  • Player profiles — name, date of birth, cricket details (e.g. role, batting/bowling style), and optional profile notes.
  • Relationship & access data — coach–player links, parent–child links, club memberships, and invite tokens/emails used to connect accounts.
  • Coaching content — training plans, sessions, availability slots, bookings, pinned drills, and notes (including coaching, session, and match notes).
  • Media — photos or videos you choose to upload about a player, where that feature is used.
  • Technical data — basic logs needed to run and secure the Service (e.g. IP address, device/browser information, authentication events), processed by our hosting and database providers.

We do not currently process payments inside Stumps. Bookings are scheduling only.

4. How we use data

We use personal data to:

  • create and manage accounts and role-based access;
  • enable coaches to plan, book, and record development work;
  • let parents and players view relevant plans, sessions, and notes;
  • send transactional messages related to the Service (e.g. account confirmation, invites);
  • maintain security, prevent abuse, and improve reliability;
  • comply with legal obligations.

We do not sell personal data. We do not run public player social feeds or public child profiles.

5. Legal bases (UK GDPR)

Where UK GDPR applies, we typically rely on:

  • Contract — to provide the Service you signed up for;
  • Legitimate interests — to secure and improve the Service in ways that do not override your rights;
  • Consent — where we ask for it (for example certain optional communications);
  • Legal obligation — where the law requires us to retain or disclose information.

6. Children and safeguarding

Stumps is designed for junior sport with privacy controls: access is limited to linked coaches, parents/guardians, and (where applicable) the player. There is no public social feed of children.

Coaches and clubs remain responsible for their own safeguarding policies, parental consent practices, and how they use notes or media in real-world coaching.

7. Sharing and processors

We share data only as needed to run the Service. That includes trusted infrastructure providers such as:

  • authentication and database hosting (e.g. Supabase);
  • application hosting (e.g. Vercel);

These providers process data on our instructions. We may also disclose information if required by law, or to protect the rights, safety, or security of users and the Service.

When coaches pin or open third-party drill media (for example YouTube embeds), those platforms may process data under their own policies.

8. International transfers

Our providers may process data in the UK, EEA, United States, or other countries. Where transfers occur, we rely on appropriate safeguards offered by those providers (such as standard contractual clauses) where required.

9. Retention

We keep personal data while your account is active and as needed to provide the Service. We may retain limited records after account closure for security, dispute resolution, or legal compliance, then delete or anonymise them when no longer required.

10. Your rights

Depending on where you live, you may have rights to access, correct, delete, or restrict processing of your personal data, and to object to certain processing or request portability. Parents/guardians may exercise rights on behalf of a child they manage in Stumps.

To make a request, email privacy@usestumps.com. You may also complain to your local data protection authority (in the UK, the ICO).

11. Security

We use industry-standard measures such as encrypted transport (HTTPS), authentication controls, and role-based access in the product. No method of transmission or storage is perfectly secure; please use a strong unique password and keep invite links private.

12. Cookies and similar technologies

We use essential cookies/storage required for sign-in sessions and basic operation of the Service. We do not use advertising trackers as part of the core product experience described here.

13. Changes

We may update this policy as Stumps evolves. We will post the revised version on this page and update the “Last updated” date. Continued use of the Service after changes means you accept the updated policy, except where local law requires additional notice or consent.