Privacy Policy

1. Information We Collect

Account Information: When you create an account, we collect your email address, name, and a password (stored only as a secure hash). This is used for authentication and to deliver the Service.

Payment Information: Payments are processed by Stripe. We do not store your credit card number, expiration date, or CVV on our servers. Stripe may share transaction-level data (e.g., payment confirmation, billing name) with us to fulfill your order.

Wristband Data: When you use the Service, we store your wristband configurations including play names, column labels, colors, and layout settings. This data is necessary to provide the Service.

Generated PDFs: PDFs you generate are stored on our servers for up to 10 years to enable re-downloads, after which they are automatically deleted.

Technical Data: We collect standard server logs including IP addresses, browser type, and access timestamps. A session cookie (a signed JWT) is used to maintain your login session.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process your purchase and payment
• Authenticate your identity and manage your account
• Communicate with you about your account or the Service
• Send service-related notices (e.g., maintenance, policy updates)

We do not sell your personal data. We do not use your data for advertising purposes. We do not share your data with third parties for their marketing.

3. Storage & Security

Your data is stored using Amazon Web Services (AWS) in United States data centers:

• Wristband configurations: Stored in DynamoDB for as long as your account is active
• Generated PDFs: Stored in S3 with a 10-year lifecycle policy (auto-deleted after 10 years)
• All data transmitted over HTTPS/TLS encryption
• Authentication via JWT tokens

While we implement industry-standard security measures, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

4. Third-Party Sharing

We share data only with the following service providers, who are necessary to operate the Service:

• Stripe — Payment processing. Subject to Stripe's Privacy Policy.
• Amazon Web Services (AWS) — Cloud hosting and data storage.
• Google Analytics — Aggregate site-usage analytics. Subject to Google's Privacy Policy.

We do not share your data with any other third parties except when required by law, such as in response to a valid legal process or to protect our rights.

5. Cookies & Local Storage

We use the following cookies:

• Session cookie: A signed JWT with a 7-day expiration, required for login. This is an essential cookie — the Service cannot function without it.
• Google Analytics cookies: Used to understand aggregate site usage (pages visited, general location, device type). These do not identify you personally to us.

We do not use advertising cookies. We do not sell your data or share it with third parties for their marketing.

6. Your Rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate personal data
• Delete your data — we will process deletion requests within 30 days
• Export your data — we can provide your data via email upon request

To exercise any of these rights, email support@armbandcreator.com.

7. Children's Privacy

Armband Creator is designed for adult coaches and is not directed at children under 18. We do not knowingly collect personal information from children.

Play names and column labels entered into the Service are user-defined content (e.g., "Fastball," "Bunt") — they are not personally identifiable information of players. The Service does not collect player names, ages, or other personal data about minors.

If you believe we have inadvertently collected data from a child, please contact us at support@armbandcreator.com and we will promptly delete it.

8. Data Retention

• Account data: Retained for the life of your account
• Wristband configurations: Retained for 10 years or until you request deletion
• Generated PDFs: Automatically deleted after 10 years
• Payment records: Retained as required by tax law (approximately 7 years)
• Server logs: Retained for up to 90 days

You may request deletion of your data at any time by emailing support@armbandcreator.com. Deletion requests are processed within 30 days, except for records we are legally required to retain.

9. Changes to This Policy

We may update this Privacy Policy from time to time. For material changes, we will notify you via email. The "Effective Date" at the top of this page indicates when the policy was last updated.

If you have questions about this Privacy Policy, contact us at support@armbandcreator.com.