Privacy Policy
Privacy Policy — Version 1.1 — Effective July 30, 2026
1. Introduction
Diamond Core ("we", "us", "our") operates a baseball and softball scoring and statistics platform. This Privacy Policy explains how we collect, use, store, and protect your personal data, in compliance with the General Data Protection Regulation (GDPR) and applicable local data-protection legislation.
2. Data Controller
The data controller responsible for this site is Antonio Pérez, who operates Diamond Core as an individual. For any data-protection question or request, contact [email protected]. A postal address is available on request.
3. What Data We Collect
We process the following categories of personal data:
3.1 Account Data
- Username and email address (provided at registration)
- First name and last name
- Password (stored as a salted hash — we never store plain-text passwords)
3.2 Player, Coach and Official Data
- Name
- Year of birth
- Nationality / country of origin
- Club and competition history, licence/registration references
- Playing position, batting/throwing preferences, on-field statistics
- Photograph (where available — subject to the children's rule below)
3.3 Game and Scoring Data
- Game events, lineups, scoring records, and box-score statistics
- These records are linked to player and team identifiers
3.4 Technical Data
- IP address (logged for security and consent audit purposes)
- Browser user-agent string (logged with consent records)
- Session identifiers
- Cookie preferences
4. Where Player and Competition Data Comes From
Most player, team and competition information is not collected from the individuals directly. It is compiled from the public and official records of national, regional and international sports federations and their competitions, and published so that the public can follow those competitions. Individuals may contact us at any time to access, correct or request removal of their information (see Your Rights below).
5. Why We Process Data (Legal Basis)
| Purpose | Legal Basis (GDPR Art. 6) |
|---|---|
| Recording and publishing competition results, standings and statistics | Legitimate interest (Art. 6(1)(f)) |
| User authentication and access control | Contract performance (Art. 6(1)(b)) |
| Cookie consent and preference tracking | Consent (Art. 6(1)(a)) |
| Security logging (IP addresses) | Legitimate interest (Art. 6(1)(f)) |
6. How We Store and Protect Data
- All data is stored in a PostgreSQL database hosted within the European Union, on Hetzner infrastructure in Nuremberg, Germany.
- Data in transit is encrypted using TLS/HTTPS.
- Access to production systems is restricted to the operator.
- Passwords are stored using industry-standard salted hashing — we never store plain-text passwords.
7. Data Retention
- Account data: retained while the account is active. Deleted upon request or account closure.
- Player and game data: retained for as long as it is relevant to the sporting record. May be anonymised upon request.
- Consent records: retained for 3 years as required for GDPR compliance proof.
- Session data: automatically expires and is purged after session timeout.
8. Your Rights Under GDPR
As a data subject within the EU/EEA, you have the following rights:
- Right of access (Art. 15) — request a copy of your personal data.
- Right to rectification (Art. 16) — correct inaccurate data.
- Right to erasure (Art. 17) — request deletion of your data, including a photograph ("right to be forgotten").
- Right to restrict processing (Art. 18).
- Right to data portability (Art. 20).
- Right to object (Art. 21) — object to processing based on legitimate interest.
- Right to withdraw consent (Art. 7(3)) at any time, without affecting prior processing.
To exercise any of these rights, contact [email protected]. You also have the right to lodge a complaint with your national data-protection authority.
9. International Transfers
Your data is stored and processed within the European Economic Area (EEA). We do not transfer personal data outside the EEA.
10. Children's Data and Photographs
We do not publish photographs of players aged 14 or younger. Where such an image is identified, it is removed from that player's record and the underlying file is deleted. Other data of younger players is compiled from official competition records managed by the relevant federations, not collected directly from the children themselves.
11. Changes to This Policy
We may update this Privacy Policy from time to time. The effective date at the top of this page indicates when the latest version took effect.
12. Contact
For any privacy-related question or request, contact [email protected].