Privacy Policy

1. Introduction

Baloch Warriors League ("BWL", "we", "us", or "our") operates the website bwlleague.com and the BWL League mobile application (collectively, the "Service"). This Privacy Policy explains how we collect, use, and protect your information when you use our Service.

2. Information We Collect

2.1 Information You Provide

• Admin account information (email, name, password) when you register as a tournament administrator
• Player profiles (name, nickname, nationality, position, date of birth, bio) created by administrators
• Team information (name, logo, roster) created by administrators
• Tournament data (match results, standings, awards) entered by administrators

2.2 Information Collected Automatically

• Push notification tokens (Firebase Cloud Messaging) when you enable notifications
• Web Push subscription endpoints when you subscribe to browser notifications
• Basic analytics data (page views, device type) via Vercel Analytics
• Performance metrics via Vercel Speed Insights

2.3 Information We Do NOT Collect

• We do not collect personal information from public visitors (no login required to browse)
• We do not track your location
• We do not sell or share your data with third parties for advertising
• We do not use cookies for tracking (only session cookies for admin authentication)

3. How We Use Your Information

• To operate and maintain the tournament management platform
• To display player profiles, match results, and standings publicly
• To send push notifications about match results, tournament updates, and news (only if you opt in)
• To authenticate administrators and manage access control
• To improve the Service through anonymous analytics

4. Push Notifications

We use Firebase Cloud Messaging (FCM) for the mobile app and the Web Push API for browsers to send notifications. You can opt in or out of notifications at any time by tapping the bell icon in the app or browser. We store your device token solely for the purpose of delivering notifications. Tokens are automatically deleted when they expire or when you unsubscribe.

5. Data Storage and Security

Your data is stored on secure servers hosted by Railway (PostgreSQL database) and served via Vercel (web hosting). Admin passwords are hashed using bcrypt and are never stored in plain text. We use HTTPS encryption for all data in transit. Access to the admin panel is protected by role-based access control (RBAC).

6. Third-Party Services

We use the following third-party services:

• Vercel — web hosting and analytics
• Railway — database hosting
• Firebase Cloud Messaging — push notifications for the Android app
• Cloudinary — image storage (optional, for player/team photos)

Each of these services has their own privacy policy. We encourage you to review them.

7. Data Retention

Tournament data (match results, standings, player stats) is retained indefinitely as part of the league's historical record. Admin activity logs are retained for 90 days. Push notification tokens are deleted when they expire or when you unsubscribe. You may request deletion of your data by contacting us.

8. Children's Privacy

Our Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

9. Your Rights

• You can opt out of push notifications at any time
• You can request access to your personal data
• You can request deletion of your personal data
• You can request correction of inaccurate data

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

Email: admin@bwlleague.com
Website: bwlleague.com