Privacy Policy

DMV Muslim League runs recreational and competitive league seasons and one-day tournaments in the DC, Maryland and Virginia region. For the purposes of privacy law, DMV ML is responsible for the personal information described in this policy.

You can reach us about anything in this policy at dmvmuslimleague@gmail.com.

When you create an account: your name, email address, a password (stored only as a secure hash by our authentication provider — we never see it), and the league region you play in. If you choose to sign in with Google, we receive your name, email address and, if you have one, your Google profile picture.

When you register for a league season: the season and sport, whether you are joining a team with an invite code, creating a team as captain, or entering as a free agent; your preferred position, jersey size and (where applicable) jersey number; and, if you are a captain, your team’s name and any description, logo or banner you upload.

When you pay: league registration fees are processed by Stripe. Your card details go directly to Stripe and are never sent to or stored on our servers. We receive a record of the payment — the amount, including sales tax, its status, and a Stripe reference — so we can confirm your place and handle any problems.

When you enter a tournament: tournament registration currently uses a Google Form, which collects your name, contact details and an emergency contact. Google processes that form on our behalf. We then enter the details needed to run the event — your name, your team and your place on its roster — into our own system.

When you play: game results and the statistics recorded against your name (for example goals, assists, saves, clean sheets, points, cards and awards such as Man of the Match), along with the teams and seasons you have played in.

Photos and video: we photograph and film games and events. You may appear in that media — see “Photos, video and your likeness” below.

When you contact us: whatever you choose to include in an email or message to us.

Technical information: like every website, our hosting provider receives your IP address and basic request information (such as browser type) when you load a page. We use IP addresses briefly to rate-limit sign-in requests and protect against abuse. We do not use analytics, advertising or tracking tools.

We use your information to:

• create and secure your account, and let you sign in;
• register you for a season or tournament, place you on a team, assign jersey numbers and order kit in the right sizes;
• take payment, apply the correct price and sales tax, and resolve payment problems;
• publish schedules, results, standings, rosters, statistics and leaderboards on the site;
• contact you about your registration, your games, schedule changes, cancellations and rule or policy updates;
• tell you about future DMV ML seasons and events — you can ask us to stop at any time;
• enforce our rules and Code of Conduct, and keep events safe;
• meet our legal, tax and accounting obligations.

The league is a public competition, so some information is visible to anyone who visits the site: your name as it appears on a roster, your team, your jersey number and position, your profile picture if you add one, and your game statistics and awards. Team names, crests, schedules and results are public too.

Your email address, region, jersey size, payment details and account settings are never shown publicly. A team’s invite code is visible only to its captain and to league administrators.

If you would prefer to appear under a shortened name or without a photo, contact us and we will do our best to accommodate you.

As set out in our Terms and Conditions, by taking part in a DMV ML game or event you allow us to photograph, film and record your participation and to use that media on this website, on our social media channels (including Instagram, TikTok and YouTube) and in promotional material, without payment.

If a specific photo or clip of you concerns you, email us and we will review it. We will remove media from our own website and channels where we reasonably can, though we cannot recall material that others have already shared or downloaded.

We do not sell or rent your personal information, and we do not share it for targeted advertising. We share it only with service providers who help us run the league, under their own privacy and security commitments:

• Supabase — our database, file storage and account authentication.
• Stripe — payment processing and fraud prevention for league registration.
• Vercel — hosting for this website.
• Google — optional Google sign-in, and the Google Forms used for tournament registration.
• YouTube — game highlights are hosted on YouTube and only load from it when you choose to play one.

We may also disclose information when the law requires it, to protect the safety of participants or the public, or in connection with a legal claim. League organisers, referees and venue staff see the information they need to run a game, such as rosters.

• Account information is kept while your account is open. If you ask us to delete your account, we delete it and your profile within 30 days.
• Payment and registration records are kept for as long as we need them for tax, accounting and dispute purposes — normally up to seven years — even after an account is deleted. These records are what tie a payment to a person, so we cannot erase them early.
• Results and statistics form part of the league’s historical record. If you delete your account we may keep your name against past games and standings, or replace it with an anonymised label on request.
• Photos and video may be kept and used indefinitely as part of the league’s archive, subject to the section above.
• Tournament form responses are kept until the event and any follow-up are complete, then deleted from the form.

Data is encrypted in transit, stored with a reputable database provider, and protected by access rules so that each person can only read and change what they are entitled to. Administrator access is limited to a small number of league organisers. Card details never touch our systems.

No system is perfectly secure. If we become aware of a breach that affects your personal information, we will notify you and any authorities as the law requires.

Wherever you live, you can ask us to:

• tell you what personal information we hold about you and give you a copy;
• correct information that is wrong or incomplete;
• delete your account and personal information, subject to the retention above;
• stop sending you news about future events.

California, Virginia and other US state residents. Laws such as the California Consumer Privacy Act (CCPA, as amended by the CPRA) and the Virginia Consumer Data Protection Act (VCDPA) give residents rights to know, access, correct, delete and obtain a portable copy of their personal data, to opt out of its sale, targeted advertising and certain profiling, and to not be discriminated against for using these rights. We do not sell personal data or use it for targeted advertising or profiling, so there is nothing to opt out of — but we honour the other rights for everyone, whether or not a particular law applies to an organisation of our size.

To make a request, email dmvmuslimleague@gmail.com from the address on your account. We may need to confirm your identity before acting. We will respond within 45 days. If we decline a request, we will explain why, and Virginia residents may appeal by replying to that decision; if the appeal is denied, you may contact the Virginia Attorney General.

This website is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has given us information, contact us and we will delete it.

Players under 18 may take part only where an event’s age requirements allow it and a parent or legal guardian has reviewed and agreed to our terms on their behalf. In that case the parent or guardian is responsible for the registration and may exercise the rights in this policy for the minor.

We use only the cookies needed to keep you signed in and to take payments securely. Our Cookies Policy lists them.

We may update this policy as the league and the website change. We will change the “Last updated” date at the top, and if a change is significant we will tell account holders by email or with a notice on the site before it takes effect.

For any question, request or complaint about your personal information, email dmvmuslimleague@gmail.com.