Privacy Policy

Overview

OnTheField is a free, browser-based lineup builder for baseball and softball coaches. We respect your privacy. This policy explains what data we collect, how we use it, and your choices.

Who We Are

OnTheField is an independent project built and operated by a small team of coaches and developers (“we”). We are responsible for (and act as the controller of) the personal data described in this policy. For any questions or data requests, contact us at support@onthefield.app.

Data You Enter

All lineup data — player names, jersey numbers, positions, batting orders, and team information — is stored in your browser's local storage by default. This data does not leave your device unless you explicitly share it or enable cloud sync (see below).

Accounts & Cloud Sync

OnTheField offers optional accounts. You can sign in with your email address using a one-time password (OTP) or magic link. Account authentication is handled by Supabase, our backend provider.

When you are signed in, your teams sync to our cloud database (Supabase Postgres) so you can access them from other devices. Cloud sync is optional — the app works fully offline without an account, and signing out leaves your local data in place. Your synced lineup data is associated with your account and is only accessible to you.

We collect your email address and an authentication log (e.g., last sign-in time) when you create an account. We do not use account emails for marketing unless you separately join the waitlist or newsletter.

Email Collection

We collect email addresses when you voluntarily subscribe through our waitlist or newsletter forms. This includes:

• Pro waitlist — to notify you when OnTheField Pro launches
• Feature updates — to share news about new features and improvements

Your email address is stored by Loops, our email service provider. We do not sell, share, or rent your email address to third parties. We will only email you for the purpose you signed up for.

You can unsubscribe at any time by clicking the unsubscribe link in any email we send, or by contacting us at support@onthefield.app.

Analytics

We use PostHog to understand how coaches use the app. This includes:

• Page views and navigation
• Feature usage (e.g., printing, sharing, auto-assign)
• Session recordings to identify usability issues
• Device type (mobile vs. desktop), browser, and approximate location inferred from your IP address

Analytics data is processed through our own proxy server. We do not use third-party advertising trackers or sell analytics data.

Feedback

If you submit feedback through the in-app feedback button, your message, star rating, team size, and device type are sent to us via a Discord webhook. This data is used solely to improve the app. We do not collect personal identifiers through feedback unless you include them in your message.

Sharing Lineups

When you share a lineup, the data is either compressed directly into the share link, or stored on our servers as a short link (e.g., onthefield.app/s/abc123) that references the lineup. Anyone with the link can view the lineup. Short links are stored in our cloud database and are periodically deleted after a period of inactivity. We are not responsible for shared lineup data once the link leaves your control.

Cookies

We do not use advertising cookies. If you sign in, strictly necessary authentication cookies are set so you stay logged in. PostHog analytics may set a first-party cookie for session identification. You can opt out of analytics by using a browser extension that blocks tracking scripts, or by contacting us.

Third-Party Services

• Vercel — hosts the application. See vercel.com/privacy.
• Supabase — provides authentication and the cloud database for optional accounts, cloud sync, and short share links. See supabase.com/privacy.
• PostHog — analytics provider. See posthog.com/privacy.
• Loops — email service provider for waitlist and newsletter subscriptions. See loops.so/legal/privacy.

Security

Local data never leaves your device unless you share or sync it. Cloud-synced data and accounts are handled by Supabase, which secures data in transit and at rest and isolates each account with row-level access controls so only you can reach your own teams. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

International Transfers

Our providers (Vercel, Supabase, and PostHog) may process and store data — including account and synced lineup data — in regions outside your country of residence, such as the United States. By using the app or creating an account, you consent to these transfers as described in our providers' policies linked above.

Children's Privacy

OnTheField is intended for coaches and other adults who manage team lineups; the service is not directed at children and we do not knowingly collect personal information directly from children. Roster data you enter may include names and jersey numbers of players (including minors). This data is stored on your device by default and, if you turn on cloud sync, may be synced to our servers. You are responsible for ensuring you have the authority and any necessary consent to enter and sync data about your players. If you believe a child has provided us personal information directly, contact us and we will delete it.

Data Retention

Local lineup data persists in your browser until you clear your browser data or use the in-app reset function. If you use cloud sync, your teams are retained on our servers until you delete them in the app or request deletion. Short share links are periodically deleted after a period of inactivity. Analytics data is retained by PostHog according to their retention policy. Feedback submissions are retained at our discretion. Marketing email addresses are retained by Loops until you unsubscribe or request deletion.

Your Rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent at any time. These rights may be subject to limited exceptions. Where required by law (for example under the EU/UK GDPR), our legal bases for processing are your consent, the performance of our contract with you (providing your account and sync), and our legitimate interests in operating and improving the app.

You can clear your local data at any time using the in-app reset function (Settings → Reset all local data) or by clearing your browser's local storage. If you have an account, you can delete individual teams in the app, or request deletion of your account and synced data by contacting us at the email below. If we decline a request, we will explain why. You also have the right to lodge a complaint with your local data protection authority.

Contact

Questions about this policy? Reach us at support@onthefield.app.