Privacy Policy

This policy explains how WR Midnight Runs (https://wrmidnightruns.com) collects, uses, shares, and deletes personal data on the website and in the WR Midnight Runs iOS app. The iOS app uses the same accounts and servers as the website.

Who we are

WR Midnight Runs is a pickup basketball community in Metro Manila. We run game nights, open practice, court listings, live scores, and player profiles. For privacy questions, email hello@wrmidnightruns.com.

Information we collect

We collect data you give us and data created when you use the service:

• Account. Name, email, and a hashed password. Skill level at signup. Optional later details: nickname, phone, height, weight, positions, availability, jersey, bio, injury notes, teammate wishlist, and emergency contact.
• Photos. Profile photos, practice photos, and photos you add to game-night cards, if you upload them.
• Play and community activity. RSVPs, comments, messages, friend connections, groups, hosted nights, box scores, practices, and reactions.
• Email preferences. Digest and reminder choices, plus bounce or complaint flags from our email provider so we stop mailing a dead address.
• Technical. An httpOnly session cookie after you log in. Server logs needed to run and secure the site. We do not run advertising SDKs or a third-party analytics pixel on the site today.

We do not ask the website for GPS. Court maps open in an external maps app when you tap a link. Venue coordinates in the court directory are court listings, not your live location.

How we use it

• Create and sign you into your account.
• Run RSVP, scoring, profiles, groups, messages, and practice logs.
• Email you about your account (confirm address, reset password) and, if you leave them on, game reminders and activity digests.
• Keep the product working, fix bugs, and prevent abuse.

We do not sell your personal data. We do not use it for third-party advertising.

How we share it

Public profiles, public game nights, live scores, and the court list can be seen by other players and visitors. If you set your profile to private, people who are not friends (and not you or a moderator) see first name only, with no photo.

We use processors who help us run the service:

• Vercel hosts the app.
• Supabase stores the database, file uploads, and password-recovery email.
• Resend sends product email.

Those providers only get what they need to do that work. We expect them to protect that data at least as carefully as this policy describes. They may store data outside the Philippines.

We may disclose information if the law requires it, or to protect players and the service.

Cookies and sessions

After you log in we set a session cookie so the site knows it is you. It is httpOnly, not readable by JavaScript. There is a separate admin cookie if a league admin unlocks the staff tools on that device. You can end a player session with Log out.

Emails

We email you to confirm your address and to reset a password. RSVP and night reminders go to people who said they are in. Activity digests are on by default and can be turned off in Edit profile. Every digest also has an unsubscribe link.

How long we keep data

We keep your account while it is open. If you delete it, we remove the account record and personal data from the live database right away, as described below. Operational backups may hold a copy until they rotate. Emails already delivered to other people stay in their inboxes.

Your choices and account deletion

You can edit profile details, privacy, photos, and email preferences while signed in. You can delete your account in the app or on the website: open Edit profile, then Delete account. You will confirm with your password. Deletion is immediate.

When you delete your account we remove:

• Your login, profile, photos you uploaded, and emergency contact.
• Messages, friend connections, groups you created, RSVPs, and comments.
• Practice sessions and your personal box-score lines.

We keep, without your account attached:

• Completed team scores on nights you played, so the game result stays correct.
• Community nights and courts you added to the shared list. Your name as creator is cleared.

If you cannot sign in, email hello@wrmidnightruns.com from the address on the account and we will help complete deletion.

Children

WR Midnight Runs is for people who can join pickup basketball on their own. We do not knowingly collect personal data from children under 13. If you believe we have, email hello@wrmidnightruns.com and we will delete it.

Changes

If we change this policy in a material way, we will update the date above and post the new version at https://wrmidnightruns.com/privacy.

Contact

Privacy questions: hello@wrmidnightruns.com. Delete your data anytime at https://wrmidnightruns.com/account/delete.