Privacy Policy

1. Who we are

SportzFest is a Philippine local sports hub operated from the Philippines. This policy explains what personal data we collect through sportzfest.com, why we collect it, who we share it with, and the choices you have. It is written to comply with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173).

Questions or requests? Email us at [email protected].

2. What we collect

• Browsing data. Like most websites, our hosting and security layer (Cloudflare and our server) keeps short-lived technical logs such as IP addresses and request times. We use them to keep the site secure — for example, to rate-limit and temporarily block repeated failed sign-in attempts — and to troubleshoot problems.
• Lead form data. If you request early access for your league, we store the details you submit: your name, league name, email address, phone number, and preferred city or sport. We use them only to contact you and set up your league.
• Account data. Sign-in is by invitation and uses Google Sign-In. We store your email address (it is your username) and the name on your Google account. We do not store your Google password, and we cannot post or act on your Google account.
• League content. Organizers create league, team, schedule, and player information on SportzFest, and enter scores during games. Published league pages — including team names, schedules, results, standings, and player names and statistics — are public by design, so fans can follow the games.
• Payment records. Organizer payments are processed by PayMongo's hosted checkout. PayMongo handles your card or wallet details; SportzFest never sees or stores them. We store the payment amount, currency, status, and PayMongo's reference number so we can deliver what you paid for and keep correct records.
• Cookies. We use only essential cookies: a sign-in session cookie and a cross-site-request-forgery (CSRF) protection cookie. We do not use advertising or third-party tracking cookies.

3. Why we process your data

• To provide the service you asked for — running your league, publishing its pages, and processing payments (performance of a contract).
• To contact you about your early-access request or account (your consent, given when you submit the form).
• To keep the site secure and available, such as blocking repeated failed sign-ins (our legitimate interest in site security).

We do not sell your personal data, and we do not use it for advertising.

4. Who receives your data

We share personal data only with service providers needed to run SportzFest:

• PayMongo — payment processing for organizer fees (only when you check out).
• Google — Google Sign-In for invited accounts, and web fonts served from Google's CDN (your device's standard networking details, including IP address, reach Google when the fonts load).
• Cloudflare — content delivery and protection against abusive traffic.

Apart from these providers and legal or law-enforcement requests where required by Philippine law, your data stays with SportzFest.

5. Public content — please read this

League pages are public. Team names, game schedules, results, standings, and player names and statistics are visible to anyone once a season is published. Organizers are responsible for having their players' and teams' consent before adding their names, photos, and statistics to SportzFest. If you are a player or fan and want something corrected or removed, email us and we will work with the league organizer to fix it.

6. How long we keep data

Browsing/security logs are kept only as long as needed for security and troubleshooting. Lead-form details are kept while your request is open and for a reasonable period afterwards, then deleted. Account, league, and payment records are kept for as long as your account is active and for the period needed for accounting and record-keeping under Philippine law.

7. How we protect data

The whole site is served over HTTPS. Access to accounts is invitation-only, staff access is restricted and audited, and payment card data never touches our servers. We apply least-privilege access to production systems. No system is perfectly secure, but we design so that a single failure cannot expose payment credentials, because we never hold them.

8. Your rights

Under the Data Privacy Act you may ask us to: access the personal data we hold about you; correct it; block, remove, or destroy it; or be informed about how it has been used. Email [email protected] from the address we can verify, and we will respond within a reasonable period. Removing account data may include deleting your account; published league records (schedules, results) may be retained as community sports records where you are not the account owner.

9. Children

SportzFest is intended for adult organizers and fans of community leagues. We do not knowingly collect data from children under 13 except as league content (for example, youth-league player names) submitted by their league's organizer, who is responsible for parental consent. If you believe a child's data was submitted without consent, email us and we will remove it.

10. Changes to this policy

If we change this policy we will update the date above and, for significant changes, notify active organizers by email or on the site. Continued use after changes take effect means you accept the updated policy.