Privacy Policy
Effective May 20, 2026
UPlay Indoor Soccer ("UPlay") takes your privacy seriously. This policy explains what we collect, why, who we share it with, and what choices you have. If you don't want any of this to apply to you, the simplest thing is to not create an account.
1. Information we collect
You give us
- Account info — name, email, optional phone number, password (stored only as a salted bcrypt hash).
- Booking info — the field, date, time, duration, purpose, and any notes you add.
- Payment info — handled by our payment processor (Stripe). We store only the brand, last four digits, and expiration month/year of saved cards; the full card number never touches our servers.
- Communications — messages you send our support team or the in-app chatbot.
We collect automatically
- Standard server logs (IP, user agent, request path, timestamp), retained for security and debugging.
- Session cookies to keep you logged in (`uplay_session`, HTTP-only, 30-day TTL).
- Service-worker cache so the site keeps working when your connection drops.
We do not knowingly collect
- Information from children under 13;
- Precise geolocation;
- Biometric data;
- Health information beyond what you voluntarily disclose in a booking note.
2. How we use it
- To create and operate your account, take bookings, and process payments;
- To send transactional email — booking confirmations, cancellations, 24-hour reminders, and password resets;
- To send marketing email (e.g., new leagues, pickup-game digests) — you can opt out at any time from your account settings;
- To answer questions through the customer chatbot (powered by Anthropic's Claude);
- To monitor and improve performance, prevent abuse, and comply with the law.
3. Who we share with
We don't sell your data. We share it only with the service providers we need to run UPlay:
- Stripe — payment processing. See stripe.com/privacy.
- Neon / Vercel — database and application hosting.
- Email provider (e.g., Resend, Postmark, or SMTP) — delivery of transactional and marketing email.
- Anthropic — the chatbot sends your typed messages to Anthropic's Claude API to generate replies. See anthropic.com/legal/privacy.
- Law enforcement or courts — only when legally compelled, and only the minimum needed.
4. Cookies & tracking
We use a single first-party session cookie to keep you logged in. We do not use third-party advertising cookies or cross-site tracking pixels. If we add product analytics later (e.g., Plausible or PostHog) we'll list it here.
5. Retention
- Account, booking, and payment-method records are retained while your account is open and for up to 7 years afterwards for tax and accounting purposes.
- Sessions expire after 30 days of inactivity.
- Password-reset tokens expire 30 minutes after they're issued.
- Server logs are rotated within 30 days.
6. Your rights
Depending on where you live you may have the right to:
- Access a copy of the personal information we hold about you;
- Correct inaccurate information;
- Delete your account and associated personal information (we may retain anonymised booking statistics);
- Object to marketing email at any time — unsubscribe links are in every marketing message.
To exercise any of these, email uplayindoorsoccer@gmail.com from the address on your account. We'll respond within 30 days.
7. Security
Passwords are stored as bcrypt hashes. Sessions are HTTP-only, SameSite=Lax cookies served over HTTPS in production. Payment card numbers are tokenised by Stripe and never touch our servers. No system is 100% secure — if you discover a vulnerability, please report it to uplayindoorsoccer@gmail.com.
8. International transfers
UPlay operates in the United States. If you access the Service from outside the U.S., your information will be transferred to, stored, and processed here. By using the Service you consent to this transfer.
9. Changes
If we make material changes to this policy we'll update the "Effective" date and notify active account holders by email at least 7 days in advance.
10. Contact
Questions or requests? Email uplayindoorsoccer@gmail.com or write to UPlay Indoor Soccer, 7501 Ranco Rd, Richmond, VA 23228.