Privacy
Last updated November 3, 2026. Questions: coachbrett@regioninabox.com.
The short version
Region in a Box holds the information a youth soccer region needs to form teams, schedule games, staff referees, run a game from the sideline and keep families informed. We use it to make the children's soccer season a good one, and for nothing else. We do not sell it, rent it, share it with advertisers or data brokers, use it for marketing, or use it to train anything. It belongs to your region, and your region can take it out at any time.
Region in a Box is run by Brett Gentry, a coach, referee and board member in an AYSO region. It is not affiliated with or endorsed by AYSO National. Your region decides to use it and stays the owner of its data; we run the software on the region's behalf.
Almost everything comes from your region: its registration export, its rosters and its schedule. In plain terms:
We do not hold payment or card details, or anything about your household beyond what is listed above.
To run the season: form balanced teams, build and publish the schedule, fill referee crews, let a coach record a game, show families their week, send the emails those things need, and give the region's volunteers the overview they need to run it. Every use is one of those. There is no advertising, no profiling, no analytics service watching what you do, and no use of your data to build or train anything.
Each role sees only what its job needs, and the server checks that on every request. A family sees its own team. A coach sees their team's roster and the families on it. Referees see the games they work. The region's administrators see the region. A child's details are shown only to their guardians and to the coaches and administrators responsible for that child's team; a home address, only to the people who run team formation. Your contact details are shown to the other families on your team only if you turn that on yourself, and it is off until you do.
You sign in with a six-digit code sent to your address; the code works for ten minutes. The Team Hub emails a family only after a guardian says yes, and every message says how to stop. You can change that choice any time on My page. Our emails are delivered by a mail delivery service (currently Brevo), which receives your address and the message and nothing else about you. We never share your address with anyone for any other purpose.
We set a sign-in cookie that keeps you signed in for the season, a small marker that tells the public schedule page you are signed in, and a short-lived cookie that holds the address you typed while you wait for your code. That is all. There are no advertising or tracking cookies. This public page loads its typeface from Google Fonts; the pages you use after signing in use your phone's own fonts and load nothing from anyone else.
Our server keeps one log line per request (the page asked for, the result, how long it took, which signed-in person asked, and a short description of the device) so that we can find and fix problems. A feedback report you send goes to our support inbox and into your region's console with whatever you chose to attach.
The data is stored on Google Cloud in the United States, encrypted in transit and at rest, and backed up. Each region's data is kept apart from every other region's in the database. A region can export all of its data at any time, and it can leave with it. A sign-in lasts until about a month after the season ends. Game and season records stay as the region's history unless the region asks us to remove them. If you ask us to forget you, we remove your name and contact details and keep only what the region's records need to stay true, such as a game's score.
You can see what we hold about you and your children, ask us to correct it, or ask us to delete it. Email coachbrett@regioninabox.com or ask your region's commissioner. We answer within 45 days and usually much sooner. If we learn that your data was exposed, we tell your region and the people affected as soon as we can and within 30 days of discovering it.
If this statement changes, the date at the top changes with it, and anything that would use your data in a new way needs your region's agreement first.