Script Week is football coaching software operated by Script Week LLC ("we", "us"). This policy explains what we collect, why, who else touches it, and what you can ask us to do with it. It is written to be read, not to be survived.
The short version: we collect what the app needs to work and nothing else. We do not sell your data, we do not run advertising, and we do not use your plays or your roster to train anything.
What we collect
- Your coach account — email address, a password (stored only as a salted hash; we never see it), and your display name.
- Your team's content — the plays you draw, how you tag them, call sheets, practice scripts, scouting reports, quizzes, any audio or video clips you record and attach to a play, the game and practice film you upload, and the snap-by-snap charting and call log for your games.
- Your roster — the player names you enter. For a player with a login: either a username the coach makes (no email address), or, if the player claims a login with their own email, that address; and a password hash either way. Quiz attempts, whether a player has opened a delivery, and the grades a coach gives a player on a snap are stored against that player.
- Billing — if you subscribe, Stripe processes the payment. We store your Stripe customer and subscription identifiers, your plan, and its status. We never receive or store your card number.
- Technical data — IP address (used to rate-limit sign-in and invite pages against abuse), diagnostic information when something errors, so we can fix it, and, if a player allows notifications on a device, that device's push address so we can tell them their coach sent something.
We do not ask for player dates of birth, addresses, phone numbers, school grades, health information, or photographs, and there is nowhere in the app to enter them. Game and practice film you upload will show your players on the field; it is your team's content like everything else — private to your team's coaches, and shown to a player only when a coach sends it to them.
Children and student athletes
Script Week is used by youth and high school programs, so some players are minors. We designed the player side to hold as little as possible: a name, and a login. By default the login is a username the coach makes, with no email address at all. A player can instead claim a login with their own email if their coach offers that.
Player accounts are created by invitation from a coach — nobody can sign themselves up as a player. If a player is under 13, the coach, school, or program inviting them is responsible for obtaining verifiable parental consent before sending that invitation, and for having the authority to share that player's name with us in the first place. A coach can give a player a new one-time sign-in code if they forget their password. The coach never sees the password the player picks, and the player is told the next time they sign in. If you are a parent or guardian and want your child's information removed, contact us and we will delete it.
We do not knowingly collect personal information directly from a child under 13 without that consent. If we learn we have, we delete it.
Players cannot see each other's quiz results or grades, and they cannot see your call sheets, practice scripts, scouting reports, game film library, or anything else on the coaching side. A player sees only the plays a coach has explicitly installed for players, the film clips a coach has sent them, their own quiz results, and their own grades once a coach shares them.
Why we process it
- To run the service you signed up for — storing your plays, showing them to the right people, and keeping teams separated from one another.
- To take payment and manage your subscription.
- To keep the service secure and available — rate limiting, abuse prevention, and fixing errors.
- To send you service email: confirming your address, invitations you asked us to send, and notices about your account or your plan.
We do not send marketing email to players, and we do not use your content for advertising.
Who else processes it
We use a small number of vendors to run the service. They act on our instructions and only for the purposes above.
- Supabase — database, authentication, and file storage for recorded clips.
- Vercel — application hosting and delivery, and page analytics that set no cookies.
- Bunny.net — storing, encoding, and streaming the game and practice film you upload.
- Stripe — payment processing and subscription management.
- Sentry — error diagnostics, so a crash can be found and fixed.
- Upstash — rate limiting on the sign-in and invite pages.
- Resend — sending service email.
We do not sell personal information, and we do not share it with advertisers or data brokers. We may disclose information if the law requires it, or to protect the rights and safety of our users.
How it is protected
- Every team's data is separated at the database level, not just in the app. The database itself refuses to return one team's plays to another team's coach.
- Traffic is encrypted in transit.
- Recorded clips live in a private storage bucket, and game film streams only through short-lived signed links, so a copied link stops working.
- Passwords are stored as salted hashes by our authentication provider. Nobody here can read them.
No system is perfect. If we become aware of a breach affecting your information, we will tell you.
How long we keep it
We keep your account and content while your account is open. Delete something in the app and it goes; delete your account and we remove your personal information and your team's content, except where we must keep records — billing history, for instance — to meet legal and tax obligations. Backups age out on their own schedule.
Your choices
- Access and correction — most of your data is editable in the app directly. Ask us for anything that isn't.
- Deletion — ask us to delete your account and we will.
- A copy of your data — ask and we will provide it.
- Removing a player — coaches can remove a roster entry at any time; parents and guardians can ask us directly.
Depending on where you live, you may have additional rights under laws such as the California Consumer Privacy Act or the GDPR. We honor those requests regardless of where you are. Write to privacy@scriptweek.com.
Cookies
We use cookies to keep you signed in, to remember which team you are currently working in, and one more that marks which days an account was active, so we can count our own active users. That is all. Our page analytics set no cookies. There are no advertising cookies, no third-party trackers, and no cross-site profiling.
Your browser also keeps a few things on your own device so the app works well there: an offline copy of your playbook and the call sheets you have opened, a play you drew on our home page before signing up, which film file an interrupted upload was reading from, your display settings and last-used filters, which first-time tips you have dismissed, and which one-time usage events this browser has already counted. It stays on your device. Videos in our help pages and on our home page play from YouTube's privacy-enhanced domain, and the home page video loads only when you press play.
Changes
If we change this policy in a way that matters, we will update the date at the top and tell account holders. Continuing to use Script Week after a change means you accept it.
Contact
Questions, requests, or concerns: privacy@scriptweek.com.