Privacy

What is collected, why, where it lives, and how to remove it.

If you are on a league roster and have never used this site

Your name is probably on it, and you did not agree to that here. Lunch League publishes every team’s roster — and the games, goals and assists beside each name — at lunchleague.net. This site re-presents what the league already publishes, so a team can be read on a phone. That is the whole of it: a name, a team, a season, and the statistics the league prints next to it.

What is not done with it, and will not be:

No photograph is found for you. A photograph appears only when the person in it uploads it. Searching for pictures of people by name was considered and rejected: that is a face database of people who never asked to be in one.
No email address and no phone number is looked up, guessed or bought. The league publishes none, so there is nothing to seed from — and nothing is taken from anywhere else.
Your skill rating, your draft round and your jersey size are not shown here, even though the league prints them.
Nothing is inferred, scored or profiled beyond the statistics the league itself prints.
No page that names a person is offered to search engines. This site does not become a result for your name.
Nothing is sold, shared, or sent anywhere.

Asking to be left out entirely

You can. Write to luke@sweettech.ai with your name and a team you have played on, and your name stops appearing anywhere on this site. There is no form and no account to make. It is done by hand by one person, so it can take a few days; you get a reply saying it is done.

Asking means telling me your email address. It is used to answer you and to record that you asked, and for nothing else. Say so and it is deleted once the request is done.
This does not reach lunchleague.net. That is the league’s site, not mine, and only the league can change what it publishes.
It cannot reach what someone else typed. If a team-mate has written your name in a post, tell me and I will take the post down; no automatic rule can find it.

There is deliberately no self-service “remove me” button. Anyone could press it about anyone else, and a team-mate quietly deleted from a roster as a joke is a worse outcome than a request that takes a day.

If you use this site

This is a personal project, not a business. It collects the minimum needed to send you your own team’s calendar invitations, and nothing else. There is no advertising, no analytics, no tracking pixels, and nothing is sold or shared.

What is collected

Your email address — you type it in, and it is used only to send you calendar invitations for the team you chose.
Which team you asked to watch — the division and team you picked, so that the right schedule is followed.
Your display preferences — buffer lengths, whether events are marked private, the window to hold on undated playoff dates, and a custom event title if you set one.
A record of which games have already been sent to you, so the same game is not emailed twice.
Your mobile number, only if you type it in — used only for the texts set out in the messaging terms. It is optional; everything works without it. See the messaging terms.
Your automatic renewal choices, only if you make any — which divisions and seasons, an optional note for the league, the sentence you agreed to and when, each season sign-up opened for one of them, and any cancellation or refund request you make. Nothing is sent to the league, and no payment details are held: the rink takes payment. Deleting your account removes all of it.
A message you send without signing in, only if you send one — the name, email address, subject and message you type, kept with the message for the league admin or the web admin you wrote to so they can read it and answer you; and a one-way code made from your network’s address (never the address itself), used only to count messages against the sending limits. That form is checked by Cloudflare Turnstile, which runs only once you press “Write a message”.

The directory. If you open the directory from a link in one of your invitations, this site stores the name you pick off your own team’s roster, and — only if you add them — a photograph and posts you write. It still sets no cookies. What identifies you is remembered in your own browser’s local storage; clearing your browser data removes it. (The one exception is the league administrators’ admin pages, which keep an administrator’s twelve-hour admin sign-in in a cookie.)

There is now a sign-in, and there did not use to be. Opening the site on a second device — a phone, a different browser — left you unrecognised, with no way to say otherwise except to find the original email. So you can now ask for a fresh link by giving your address, and you may optionally set a password to skip that step. If you set one it is stored hashed (PBKDF2-SHA256, salted), never in a readable form, and it is never used for anything but signing you in here. You do not have to set one; a link works exactly as it always did, and it is also how you reset a password you have forgotten.

Separately, and since long before any of this, the calendar tool remembers your settings in your own browser — the address you typed, your buffer times, your custom title. That never leaves your device. It is written down because this page used to say “this site sets no cookies”, which was true and could still have misled you.

No payment details, no location and no browsing history, and this site sets no cookies.

Text messages

If you give a mobile number, this site may text you about games in your league, and nothing else. The messaging terms set out every kind of text this programme sends; that page is the whole list and is kept in step with the code that sends them.

You opt in by typing your number in yourself. No number is bought, guessed, or taken from the league — the league publishes none.
Reply STOP to any message to stop them. Reply HELP for help. Message and data rates may apply. Frequency varies with your team’s season and is typically a few messages a week at most.
Your number is never sold, rented, or shared for anyone else’s marketing. It is shared only with the messaging carrier that delivers the text, which is what makes delivery possible.
Nothing here is marketing. There is nothing to sell you.
Removing yourself from the directory removes the number with everything else.

Where it lives

In Cloudflare Workers KV, on a Cloudflare account belonging to the person named on the About page. Email is delivered by Resend, which necessarily sees your address and the message in order to deliver it. Team schedules are read from lunchleague.net, which is not operated by this tool.

How long it is kept

Until you unsubscribe, or until the watch retires itself. Team numbers change every season, so a watch ends when its team stops being listed, and the record is removed after that.

A photograph and a claim stay until you take them down, and they go the moment you press the button. No period is invented for them. A post comes down on the date shown when it was written — three weeks by default, ninety days at the most.

How to remove it

Use the unsubscribe link at the foot of any invitation email. One click, no sign-in, and it removes the whole record.
Or reply to any invitation and ask — the address at the foot of this page reaches a person.
Or write to luke@sweettech.ai and ask.
In the directory: Remove photo takes the picture down, and Remove me from the directory takes down all of it and your claim on the name. Your name stays on the roster either way — that is the league’s list, not this one’s.

Backups. When an account is deleted it is removed from the site at once, and from backups as they age out (within 12 months).

One thing worth knowing. Unsubscribing also removes the calendar link that goes with that watch, so a calendar app subscribed to it stops updating from that moment. That follows from unsubscribing meaning everything stops — but it is easy to be caught out by, so it is written down here rather than left to be discovered.

Changes

If this ever changes materially, the change will be described here and the date below updated.

2026-09-04 — the directory. Photographs, contact details and posts were added, and this page was rewritten to match. Nothing about the calendar tool or what it stores changed. The previous version said “No name”; that is now wrong for anyone who uses the directory, and it has been replaced above rather than quietly edited.

2026-09-06 — a sign-in, and text messages. A password and a send-me-a-link sign-in were added, so this page’s previous claim that neither existed became untrue and has been replaced rather than quietly deleted. Mobile numbers and what is done with them are described above for the first time.

2026-10-08 — writing without signing in. The directory’s contact form can now be sent by somebody who is not signed in, behind Cloudflare Turnstile and sending limits. What that keeps is described above.

2026-10-10 — no more contact details for your team. The directory no longer asks for a phone number, email address or note to show the people on your team, and what had been entered there is deleted from the site — and, like a deleted account, from backups as they age out (within 12 months). Your sign-in addresses, where notices go and your mobile number for texts are unchanged.