Security Policy

1. Where information is stored

We store information on Amazon Web Services (AWS) servers in the United States (US East, Northern Virginia). Card payments are processed by Stripe, and Clubucket never stores full card numbers.

2. Encryption

All traffic between your device and Clubucket is encrypted using HTTPS.

Information stored on AWS is encrypted.

3. Passwords

Passwords are stored in a scrambled form (hashed), so no one at Clubucket can read them. If you forget your password, you reset it through a link sent to your email.

4. Who can see what

In Clubucket, each person sees only what their role allows. A league admin sees their league, a team admin sees their team, and a player sees their own team and details.

Within our own team, only Clubucket's lead developers can access production data, and only when their work needs it.

5. Backups

We back up information every day and keep backups for 30 days, so we can restore it if something goes wrong.

6. If something goes wrong

If we confirm a security breach that affects personal information, we will tell the affected leagues and clubs within 72 hours of confirming it. We will explain what happened, what information was involved and what we are doing about it, and we will help them tell the people affected where the law requires.

7. Reporting a security problem

If you think you have found a security problem in Clubucket, email info@clubucket.com. We look into every report. Please do not access other people's information or disrupt the Services while checking.

8. What you can do

• Keep your password private and do not reuse it on other sites.
• League and team admins should remove access for people who leave.
• Tell us straight away if you think someone has used your account.

9. Contact

Clubucket LLC, 1981 N Shaffer St, Orange, CA 92865, United States. Email: info@clubucket.com.