Last updated: August 6, 2026
This Privacy Policy explains how Diamond Commander ("Diamond Commander," "we," "us," or "our") handles information in connection with the Diamond Commander application, website, and services (the "Service"). By using the Service, you agree to this Policy and to our Terms of Service.
Our promise: we never sell your data, and we never share it for advertising. We do not sell your personal information or User Content, and we never share, rent, or trade it with third parties for their own marketing, advertising, or profit. The only parties who ever receive your information are the service providers who operate the Service for us under strict data-processing terms, and authorities where the law requires it. This is explained in full in Sections 4 and 10.
You are responsible for the information you input, upload, and share through the Service, including team rosters, player names, jersey numbers, skill ratings, attendance, notes, photos, game results, and staff details ("User Content"). You represent and warrant that you have the authority, rights, and all necessary permissions and consents to provide this information, including any personal information about players, their parents or guardians, coaches, or other individuals, and to allow us to process it in order to provide the Service.
Because coaches and team staff input information about players, some of whom may be minors, you are responsible for obtaining any consent required by your league, association, or applicable law before entering another person's information. You should not enter more personal information than is needed for lineup planning.
We use information to provide, maintain, secure, and improve the Service; to authenticate accounts and process subscriptions; to communicate with you (for example, account and support messages from info@diamondcommander.com); to diagnose and fix problems; and to comply with law. We do not sell your personal information, and we do not use it for third-party advertising. Optional product news and coaching tips are sent only to coaches who have affirmatively opted in; service, security, billing, password-reset, and team-invitation messages are separate from marketing.
Legal bases (EEA/UK). Where the GDPR or UK GDPR applies, we rely on: performance of a contract, to provide the Service, authenticate your account, and process subscriptions; legitimate interests, to secure, maintain, debug, and improve the Service and to understand feature use in a privacy-first way; consent, for optional marketing email and for any optional analytics where consent is required, which you may withdraw at any time; and compliance with a legal obligation, where the law requires us to process or retain information. For personal information about players and other individuals that a coach enters, the coach is the controller and determines the legal basis, and we process it as the coach's processor on their instructions (see Section 12, Data Processing Terms).
We do not sell your personal information. We share information only with:
Team access and sharing. Every staff member added to a team can view and edit that team's information. Only the team head owner can invite, resend an invitation to, or remove staff. A public lineup-share link is read-only, expires after 30 days, does not grant team access, and does not include skills, notes, or staff information.
Support access. A super-admin may open a coach account only through a short-lived support session for troubleshooting or a coach-requested export. Support access is restricted to one account at a time, is audited separately from the coach's Team activity, and does not add the super-admin to the team's staff or normal team list.
We use cookies and similar technologies that are strictly necessary to operate the Service, such as keeping you signed in and keeping your session secure. We do not use advertising cookies and we do not sell your information. If privacy-first product analytics are enabled, they are cookieless, do not record your screen, honor your browser's Do Not Track or Global Privacy Control signal, and are never sent the names of players or coaches shown in the Service. For team head owners, product-use events may be associated with a one-way pseudonymous account code so we can understand feature use and stopping points. Super-admin and support-session activity is excluded. Most browsers let you control cookies and local storage in their settings, but disabling strictly necessary storage may prevent the Service from working.
We use reasonable technical and organizational measures intended to protect information, including encryption in transit. However, no method of transmission or storage is completely secure, and we do not and cannot guarantee the security of any information. You are responsible for maintaining the confidentiality of your password and account, as described in our Terms of Service, and password sharing is prohibited. If a data breach affects your personal information, we will notify affected users and any authorities as and within the timeframes required by applicable law.
We retain information for as long as your account is active or as needed to provide the Service, and afterward only as required for legitimate business or legal purposes. When you request account deletion, we immediately lock the account and schedule its account data for permanent deletion 30 days after the request. During that 30-day window, you may contact us from your account email to ask a primary super-admin to restore the account. After the window, the account, its teams, rosters, players, games, photos, and associated account data are permanently deleted or de-identified, except for limited backups and information we must retain by law. Diagnostic and error logs are kept only as long as needed to operate and secure the Service and are then cleared.
Depending on where you live, you may have rights over your personal information, including the right to access it, correct it, delete it, receive a copy of it (portability), object to or restrict certain processing, and withdraw consent. Residents of the European Economic Area and the United Kingdom have these rights under the GDPR and UK GDPR. Residents of California and certain other US states have rights under the CCPA and similar laws, including the right to know, delete, and correct their information, and the right not to be discriminated against for exercising those rights; as noted above, we do not sell or share your personal information as those terms are defined under those laws.
Canada (PIPEDA). Residents of Canada have rights under the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws, including the right to access and correct their personal information and to withdraw consent, subject to legal or contractual restrictions and reasonable notice. Our Privacy Officer (Section 15) is responsible for our handling of personal information. If you have a concern we have not resolved to your satisfaction, you may contact the Office of the Privacy Commissioner of Canada. For personal information about players and other individuals that a coach enters, the coach (and, where applicable, the league, association, or purchaser) is the controller responsible for having a lawful basis and any required consent, as described in Sections 1, 9, and 12; Diamond Commander acts only as the processor and, to the maximum extent permitted by law, is not responsible for that person's compliance.
Opt-out preference signals (California). Because we do not sell or share personal information (as those terms are defined by California law) and do not use it for cross-context behavioral advertising, there is nothing to opt out of; where our privacy-first analytics can detect one, we honor a browser's Global Privacy Control (GPC) or Do Not Track signal.
Marketing email (CASL / CAN-SPAM). We send optional product news and coaching tips only to coaches who have affirmatively opted in, consistent with Canada's Anti-Spam Legislation (CASL) and the US CAN-SPAM Act. Every marketing email identifies the sender, includes a physical mailing address where required, and includes a working unsubscribe link, and we honor unsubscribe requests promptly. You can also turn marketing email on or off at any time in Account settings. Service messages (account, security, billing, password reset, and team invitations) are not marketing and are necessary to operate the Service.
To request deletion of your account or data, or to exercise any other privacy right (access, correction, a copy of your data, or objection), email info@diamondcommander.com. We will verify your request and respond within the time required by law. You can also access and update much of your account information directly within the Service, download a CSV copy before requesting account deletion, and turn optional marketing email on or off in Account settings or through an unsubscribe link.
Parents and guardians: if you believe a player's information has been entered into the Service and you want to review, correct, or delete it, contact info@diamondcommander.com. We will work with you and the responsible coach to address the request.
The Service is intended for adults (coaches and team staff) and is not directed to children. We do not knowingly collect personal information directly from children under 13, and we do not require players to create accounts. Information about players, some of whom may be minors, is entered by the coach or team staff who uses the Service. That person is responsible for having the authority and any parental or guardian consent required by law, including the Children's Online Privacy Protection Act (COPPA) in the United States and similar laws in other places, before entering another person's information, and for entering only the information needed for lineup planning.
Strongly recommended: keep minors' information to a minimum. If you use the Service to plan lineups for players who are minors, we strongly recommend that you (1) obtain verifiable consent from each player's parent or legal guardian before entering that player's information, and (2) reduce personal information to what is strictly necessary by identifying players using only first names, initials, or abbreviations rather than full names, and by leaving out any detail not needed for lineup planning. You alone choose what to enter. As between you and Diamond Commander, you and, where applicable, the purchaser of the subscription assume full and sole responsibility for meeting the consent and data-minimization requirements of your league, association, and applicable law, including COPPA. Diamond Commander does not verify consent, does not obtain consent on your behalf, and is not responsible for any violation of consent, COPPA, or any other privacy or children's-data law that results from the information you choose to enter, and you agree to indemnify and hold Diamond Commander harmless for any such claim as set out in our Terms of Service.
If you choose to enter a minor's full name or any identifying detail beyond what is strictly necessary, you do so entirely at your own discretion and risk. The Service does not require full names, and we recommend against them for minors. By choosing to enter a minor's full name or any such detail, you represent that you have obtained the specific verifiable parental or guardian consent required for that collection and use, and you and, where applicable, the purchaser of the subscription accept full and sole responsibility for that choice. Diamond Commander is not responsible or liable for your decision to enter full names or other identifying details, and you agree to indemnify and hold Diamond Commander harmless for any claim arising from that decision, as set out in our Terms of Service.
If you are a parent or guardian and believe information about your child has been provided to the Service without proper authority, contact info@diamondcommander.com and we will delete it or obtain any required consent. We will not knowingly retain personal information about a child under 13 without verifiable parental consent.
The Service relies on third-party providers to function, including cloud database and authentication services, payment processing, email delivery, hosting, and optional privacy-first analytics. Their handling of information is governed by their own terms and privacy policies, and we are not responsible for the practices of third parties. The main subprocessors we currently use are:
Each subprocessor processes information only to provide its service to us and under data-processing terms. We may add, remove, or change subprocessors as the Service evolves, and where required we will update this list.
The Service may be operated, and information may be processed and stored, in the United States, Canada, and other locations used by our service providers. If you access the Service from outside that region, you understand your information may be transferred to and processed there. Where required, such transfers are made under appropriate safeguards (for example, standard contractual clauses). By using the Service, you consent to that processing and storage as described in this Policy.
For personal information about players, parents or guardians, and other individuals that you enter, you (and, where applicable, your league, association, or the purchaser of the subscription) are the data controller and Diamond Commander is your processor. These Data Processing Terms form part of this Policy and apply to that processing:
Because you determine what personal information to enter and are the controller, you are solely responsible for having a lawful basis and any required consent (including verifiable parental consent for minors) and for data minimization, as described above and in our Terms.
The Service is provided "as is," as described in our Terms of Service. To the maximum extent permitted by law, we disclaim all liability arising from the collection, use, sharing, loss, or disclosure of information, including any User Content you provide. You and, where applicable, the purchaser of the subscription agree to indemnify and hold us harmless as set out in our Terms of Service, including for any claim arising from the information you input or share.
We may update this Policy from time to time. If we make a material change to how we handle personal information, we will provide explicit notice (for example, by email or an in-Service notice) before the change takes effect, except where an immediate change is required by law. Non-material changes are effective when posted with a new "Last updated" date. Your continued use of the Service after a change takes effect constitutes acceptance of the updated Policy.
Our Privacy Officer is responsible for questions about this Policy and how we handle personal information. To exercise a privacy right, ask a data-protection question, or raise a complaint, contact the Privacy Officer at info@diamondcommander.com.
Questions about this Policy, or to make a privacy request? Contact us at info@diamondcommander.com.