Privacy policy
Effective date: October 1, 2026 Last updated: October 1, 2026
1. Who we are
DiamondTraq is an app for baseball and softball families. A parent logs training sessions, films short video clips of their athlete, reviews those clips in slow motion, records measurements such as exit velocity and sprint times, keeps a schedule, and tracks contact with college programs.
The service is operated by DiamondTraq LLC of 707 Merlot Lane, Cambridge, Wisconsin 53523, and is reachable at jordan@diamondtraq.com.
2. Who this policy is about
Account Owner
An adult parent. Creates the account, owns billing. Has a login.
Athlete aged 14 or over
May be given their own login by the Owner.
Athlete under 14
Has no login. A profile the parent operates on their behalf.
College coaches
Adults whose contact details a family types in. No account, no involvement.
Anyone holding a share link
Can view a published profile. No account needed.
Only adults reach the sign-up screen. A login for an athlete aged 14 or over is created by the parent from inside the account, so a child never registers and never accepts terms directly.
3. Children's information
We collect personal information about children, including children under 13. Because DiamondTraq does not allow children under 13 to create accounts or log in, we comply with COPPA by ensuring all data for children under 13 is collected strictly from the parent or legal guardian with their explicit consent. The app is built for athletes from roughly age six upward. For each athlete a parent may provide:
first and last name
full date of birth (not just a year)
sport, and optionally graduating class, positions, bats/throws, and team name
video of the child, along with any drawings made over it
measurements, training notes, tags, pitch counts and schedule entries
This information is provided by the parent, not by the child.
A parent's rights over their child's information. A parent may at any time:
see everything held, in the app and by exporting it
correct any of it
delete a single video, a whole session, or the entire account
stop any further collection by deleting the account
To exercise any of these, use the app or write to jordan@diamondtraq.com.
4. What we collect
Information a parent gives us
Account: email address and password (the password is stored only as a hash, by our authentication provider, and is never visible to us).
Athlete profile: as listed in section 3.
Training content: session dates, types, free-text notes, tags, pitch counts and strikes.
Measurements: values and dates, entered by hand.
Schedule: events, locations and notes, and optionally the web address of a team calendar the family chooses to connect.
Recruiting: college program names and websites; coaches' names, roles, phone numbers and email addresses; and dated notes of calls, emails, visits and camps.
Video and drawings.
Free-text notes are not read, scanned, filtered or analysed by us or by any automated system. Whatever a family types stays as typed.
Information about coaches. The recruiting section holds contact details for adults who are not our users and have not interacted with us. A family enters them. These records are private to that household, are never published on a share link, and are not used to contact anyone.
Information collected automatically
Time zone, and the moment of last activity on the account (used to decide when unused video is removed — see section 8).
If someone arrives from a marketing link, the source tag on that link.
Ordinary server records kept by our hosting and storage providers.
Fault reports when a screen breaks. These are stripped of email addresses, record identifiers, access tokens and video links before they are stored, and identify a screen rather than a person.
We do not use analytics, advertising, tracking pixels or third-party scripts of any kind.
Payment information. Card details are entered on Stripe's own payment page. We never receive, process or store a card number, security code, expiry date or billing address. We keep only Stripe's identifiers for the customer and subscription, the subscription's status, and its renewal date.
5. How we use it
To provide the app: to store and show a family their own training history, video and records.
To publish a profile, only when a parent chooses to (section 6).
To take payment for a subscription, through Stripe.
To send the few emails the service needs: confirming an address, resetting a password, confirming an account deletion, and warning before unused video is removed.
To keep the service working and secure, including fault reports.
We do not sell personal information. We do not share it for advertising. We do not profile anyone, and nothing is used to train machine-learning models.
We do not send marketing email, push notifications or reminders, and the app contains no behavioural nudges of any kind. Every email we send is transactional.
6. What a parent can publish, and what that means
A parent may create a share link: a read-only web page showing their athlete's profile, selected clips and measurements, meant for college coaches.
Honest facts about that page, because they matter more than the reassurance:
Anyone holding the address can open it. There is no password, no sign-in and no check on who is viewing. If a coach forwards the link, the recipient has the same access.
The parent chooses what goes on it — which clips, which fields, and whether the athlete's name is shown in full, as a first name only, or as a first name and initial.
The page asks search engines not to index it, and our robots file excludes the whole share path. This is a request, which well-behaved search engines honour and nothing else is bound by.
Links expire after 90 days and can be revoked instantly by the parent, which takes effect immediately.
An account may have up to ten live links at once.
Recruiting records — school names, coach names, phone numbers and notes — never appear on a published page.
The parent sees how many times the page was opened and when it was last opened. Not by whom.
7. Who else handles this data
All of the following are located in the United States.
Supabase
The database, sign-in records, and all video
Hosting and storage (AWS, Ohio)
Vercel
Runs the website; sees request traffic
Application hosting
Fly.io
Processes video; runs the nightly cleanup job
Video encoding (Chicago)
Stripe
All payment data, card details, billing identity
Payments
Resend
Delivers our emails
Transactional email
We use no other processors.
We may disclose information if the law requires it, or to protect someone's safety.
8. How long we keep things
While a subscription is active, everything is kept.
If a subscription ends or a free account goes unused, video — and only video — is removed on a timetable measured from the end of the paid period, or from the last use of a free account:
Day 60 — we email the parent: download the clips, or resubscribe.
Day 76 — a final email, stating that 14 days remain.
Day 90 — video files and their thumbnails are deleted.
The written record is not deleted at day 90. Sessions, notes, tags, measurements, the schedule, seasons and the recruiting hub all remain, so a family returning a year later still has their history.
Deleting one video, or one session, removes it immediately and permanently, including the file itself, any drawings on it, and its place on any share link. There is no undo.
Deleting the account removes everything: video, records, and the sign-in credentials themselves, across every system listed in section 7. There is a 7-day window before that happens, during which the account is inaccessible and can be restored only by writing to us. The subscription is cancelled at the moment the deletion is requested, not at the end of the window. Stripe keeps its own record of the customer and past invoices.
Downloadable highlight reels are deleted 24 hours after they are made.
Exporting your data works whether or not you subscribe, including after cancelling.
9. Security
Video is held in private storage. There are no public links and no guessable addresses; every view is served by a short-lived signed link.
Every video is re-encoded when uploaded, and location and device information is removed from the file in the process. This is verified, not assumed.
Access rules are enforced by the database itself, not only by the app, and every table is covered by a test proving one household cannot reach another's data.
Passwords are stored only as hashes, by our authentication provider.
Payment card data never touches our systems.
No system is perfectly secure, and we do not claim otherwise.
10. Your choices
See and export everything — from the app's settings, at any time, as spreadsheet files.
Correct anything — every field a family enters can be edited.
Delete — a clip, a session, a share link, an athlete, or the whole account.
Stop publishing — revoke any share link, immediately.
11. Changes to this policy
If there are changes to this policy, users will be notified via email.
12. Contact
Questions, requests, or anything about a child's information:
jordan@diamondtraq.com
707 Merlot Lane, Cambridge, Wisconsin 53523