This policy explains what Statlex collects, why, and what you can do about it. Statlex is operated by Joseph Fernandez. Questions go to support@statlexsports.com.
Statlex is a baseball scorekeeping and statistics app for coaches and players in amateur, adult, and school leagues. You must be 18 or older to create an account.
We do not knowingly collect personal information from children under 13. If you believe a child under 13 has an account, email us and we will delete it.
Everything below is entered by you or by your coach. We do not buy data about you, and we collect nothing from you outside the app.
| What | Details | Why |
|---|---|---|
| Account | Email, display name, password (stored only as an Argon2 hash — we never see the password itself), role. | To sign you in and control what you can see and edit. |
| Seasons | Team name, season period, year, play level, optional league name. | To organise your games and statistics. |
| Roster | Player first and last name, jersey number, positions, and a linked account where one exists. | To record who played and attribute statistics. |
| Games | Date and time, opponent name, scores, and an optional venue name, address, and coordinates you enter. | To record the schedule and show the venue on a map. |
| Scoring | Every plate appearance: batter, pitcher, count, result, runs, and runs batted in. | This is the product. Every statistic comes from these records. |
| Sessions | A session token in a cookie and its expiry time. | To keep you signed in. |
| Weather | The dashboard weather card is placeholder text. Tapping "Use my location" does not request your coordinates. We do not store them. | The control is not connected. Nothing is sent for a forecast. |
Inside Statlex, access follows your role:
Outside Statlex, we share data only with the providers in section 6, and where the law requires it.
Statlex runs on Microsoft Azure in the Central United States region, with data in an Azure Database for PostgreSQL instance in that region. Connections between the app and the database are encrypted, and the site is served over HTTPS.
If you use Statlex from outside the United States, your data will be transferred to and stored there.
| Provider | What they do | What they receive |
|---|---|---|
| Microsoft Azure | Hosting and database | All app data, stored in Central US |
| Resend | Sends password-reset emails | Your email address and the reset link |
| OpenStreetMap (Nominatim) | Venue address search | The venue text you type to search. Searches are sent from Statlex's server, so Nominatim does not receive your IP address. |
| None | No weather API is connected | Nothing. The dashboard forecast is not fetched, and location coordinates are not sent. |
We keep your account and its data for as long as your account is open. To delete your account, email support@statlexsports.com. We will delete the account and everything attached to it — your seasons, rosters, games, and scoring records.
Password-reset links expire one hour after they are created and work only once. Sign-in sessions expire after 30 days.
Depending on where you live you may have further rights under the Texas Data Privacy and Security Act, the California Consumer Privacy Act, or the GDPR. Email us and we will honour any request those laws give you.
Passwords are hashed with Argon2 and never stored in readable form. The site is served over HTTPS, database connections require TLS, and sessions are stored server-side rather than in your browser.
No service is perfectly secure. If we discover a breach affecting your personal information, we will notify you without undue delay.
Statlex uses one cookie: a session cookie that keeps you signed in. It is HttpOnly and Secure, and expires after 30 days or when you sign out. There are no advertising, tracking, or analytics cookies.
If we change this policy we update the date at the top, and for a change that materially affects your rights we will tell you by email first.
Joseph Fernandez, Houston, TX. Email support@statlexsports.com.