| Information | Head coach | Assistant | Player |
|---|---|---|---|
| Team names and numbersReadable by members of that team only. | Yes | Yes | Yes |
| Player contact details (email)Moved off the public roster by a server function into a coach-only area. | Yes | Yes | No |
| Parent, guardian and emergency contactplayerPrivate is denied to players by the rule itself, not by a hidden button. | Yes | Yes | No |
| Other players’ statisticsA player sees their own line. Everybody else’s is stripped before the page renders. | Yes | Yes | No |
| Fees and paymentsEach player’s own paidBy record is private to them. | Yes | Yes | Own only |
| AttendanceVisible to the team, the way a sheet on the gym wall is. | Yes | Yes | Yes |
| EvaluationsA player can never read another player’s evaluation. | Yes | Yes | Own only |
| Availability and class scheduleYour coaches and you. Never other players, never other parents. | Yes | Yes | Own only |
| Team chatA message can only be posted under the account that actually wrote it. | Yes | Yes | Yes |
| Any other team or programEvery read is gated on membership of that team. A modified client changes nothing. | No | No | No |
What we do not have
- —No SOC 2 and no external audit. TheCrib is built by one person, and we are not going to pretend otherwise.
- —Hosting is in the United States (Google Firebase, nam5 multi-region). If Canadian hosting is a requirement where you are, tell us before you sign up.
- —No online service is completely secure. Our commitment is to tell you if there is a breach, not to claim one is impossible.
What we do not do
- —No analytics in the iPhone app, and no Meta pixel. On the website we count visits (Firebase Analytics and Vercel Analytics) only if you accept analytics cookies.
- —No selling, renting or sharing of data for advertising.
- —No advertising shown to a player or a parent.
- —No reading of your team data by us for anything other than support you have asked for.