1. Scope
This Privacy Policy explains how NextClub handles personal information when players, parents or guardians, clubs, coaches, and other users access the website, create accounts, publish listings, communicate, request support, or use privacy and safety features.
2. Information we collect
Depending on account type and use of the service, NextClub may collect a name, email address, password credential, date of birth or age information, account role, organization or club information, parent/guardian email and linkage, verification status, listing information, messages, reports, blocks, support communications, login/session information, email-verification and password-reset records, administrative records, and safety/security events.
Passwords are not stored in readable form. NextClub stores password hashes and other security records needed to authenticate and protect accounts.
3. Youth accounts and guardian information
- Under 13: a parent or legal guardian must manage the player's presence and communication through an adult account. Children under 13 are not intended to operate their own NextClub account.
- Ages 13–17: a player account requires the platform's parent/guardian consent process and a linked adult guardian before full posting or messaging participation.
- 18+: adult account rules apply.
NextClub may use age and guardian information to apply these safeguards and to prevent users from bypassing youth protections.
4. Email verification, password recovery, and account security
New accounts may be required to verify control of their email address before full use. NextClub may send time-limited verification, password-reset, MFA, security, consent, and service emails. Security tokens are intended to be single-use or time-limited where appropriate.
5. How information is used
- Operate accounts, listings, search/filter features, messaging, guardian links, and support.
- Verify email addresses and review club/coach accounts.
- Apply age, guardian, youth-privacy, and club-contact controls.
- Prevent spam, abuse, fraud, automated attacks, and unauthorized access.
- Screen communications for safety indicators, investigate reports, and conduct human safeguarding review.
- Send account, consent, security, password-reset, verification, safety, and service notifications.
- Respond to access, correction, restriction, export, and deletion requests.
- Maintain audit, security, and safeguarding records where reasonably necessary.
6. Public and private information
Roster-board listings may be publicly or broadly browseable. Youth listings are designed to display limited soccer-related information such as initials, general city/state, age group, position, level, and soccer notes rather than full contact details. NextClub applies server-side checks intended to prevent youth listing notes from publishing phone numbers, email addresses, social-media handles, exact addresses, school-identifying information, dates of birth, or similar personal contact information.
Account email, exact date of birth, guardian details, password/security information, and private administrative fields are not intended for public display.
7. Messaging, guardian visibility, and NextClub Support
Messages are private from the public roster board but are not end-to-end encrypted communications that only the sender and recipient can access. Conversation participants, linked guardians where applicable, and authorized NextClub administrators may access messages for disclosed support, moderation, safeguarding, legal, or security purposes.
Authorized administrators may contact users or participate in a conversation using a clearly labeled NextClub Support identity. Administrative support activity may be logged.
8. Automated safety screening
NextClub may process current and recent message context using automated rules intended to detect safety indicators such as sexual content, grooming or secrecy language, inappropriate image requests, gifts or money, private-meeting requests, personal home/school location requests, or pressure to move a minor off-platform. Automated alerts are risk indicators, not automatic findings of wrongdoing. Flagged content may be reviewed by authorized administrators, and critical concerns involving a minor may cause a conversation to be paused.
9. Reports, blocks, and safeguarding records
Users can report concerns and block accounts. Reports, relevant messages, verification information, and related safety records may be retained and reviewed as needed to investigate a concern, enforce platform rules, protect users, comply with law, or preserve evidence in an active safeguarding matter.
10. Service providers and disclosures
NextClub may disclose information to service providers that help host and secure the service, deliver email, process payments when enabled, maintain infrastructure, or provide other operational services. Providers receive information only as reasonably necessary for the service they perform and are subject to their own legal and contractual obligations.
Information may also be disclosed to professional advisers, law enforcement, courts, child-safety or reporting organizations, or other authorities when required by law or when permitted and reasonably necessary to protect users, prevent fraud, respond to legal process, or protect rights and safety.
11. Sale, targeted advertising, and payments
NextClub is not designed to sell children's personal information or use youth profiles for behavioral or targeted advertising. If voluntary support or paid services are enabled, payment processing is handled by an external provider and NextClub is designed not to store full payment-card numbers.
12. Retention
NextClub retains information only for as long as reasonably necessary for the purposes described in this policy, including account operation, security, safeguarding, fraud prevention, legal obligations, dispute resolution, and documented retention needs. Security-event records are generally kept for a limited operational period. Information connected to an active safety investigation, legal hold, fraud matter, or other required record may be kept longer.
When a deletion request is approved, NextClub is designed to deactivate and anonymize the account, remove login sessions and active security tokens, remove ordinary listings and conversations associated with the account, and remove or unlink other account data where appropriate. Some information may be retained when reasonably necessary for active safety, legal, fraud-prevention, or audit obligations.
13. Security
NextClub uses safeguards that include password hashing, email verification, password-reset controls, secure session cookies, CSRF protections, administrator multi-factor authentication, session expiration, rate limiting, role-based access, audit/security logging, restricted static-file serving, and encrypted hosting infrastructure. No online service can guarantee absolute security.
14. Your privacy choices and requests
Account holders can access certain account information and may use available tools to request access/export, correction, restriction, or deletion of personal information. NextClub may need to verify the requester's identity before acting. A request may be limited or denied where retention or processing is reasonably necessary for safety, legal obligations, fraud prevention, security, or other lawful reasons.
Where applicable law provides additional privacy rights, users may exercise those rights through the in-platform privacy-request feature or by contacting NextClub. If a privacy request is denied and applicable law provides a right to appeal, the user may request review by contacting NextClub at the address below.
15. Cookies
NextClub uses essential cookies and similar session mechanisms needed to authenticate users, protect requests, and operate account features. The current service is not designed around third-party behavioral advertising cookies.
16. Children's privacy
NextClub's youth design is intended to keep parents and guardians involved in accounts for minors and to limit public youth information. U.S. children's privacy laws, including the Children's Online Privacy Protection Act and Rule, may impose additional requirements depending on how a service is directed, what information is collected, and the ages of users. NextClub should continue to maintain documented parental-consent, retention/deletion, security, and safeguarding procedures and obtain qualified legal review as the service grows.
17. Changes to this policy
NextClub may update this policy as the service, safety controls, providers, or legal requirements change. Material changes will be communicated in an appropriate manner, and the effective date above will be updated.
18. Contact
Privacy questions, requests, or appeals may be submitted through the in-platform privacy-request feature or sent to nextclubsoccer@gmail.com.