WesternMassSoccer.com
Privacy Policy
Last updated: September 5, 2026
On This Page
1. The short version
- The public soccer directory requires no account. Advertisers can unlock their own password-protected aggregate performance reports.
- Public visitors do not need an account. Privacy and display preferences stay in your browser. Advertiser sign-ins use a secure session cookie.
- Google Analytics, Google AdSense and the Reddit pixel load only after you allow optional analytics. Global Privacy Control keeps them off. Advertiser report pages do not load those scripts.
- Advertisers receive totals for their placements, not visitor identities or browsing profiles.
- You can export or wipe the site's local preferences with the two buttons in Section 10. Those buttons do not erase information held by third-party providers.
2. Who we are
WesternMassSoccer.com ("we", "us", "the Site") is operated by an independent web publisher based in Massachusetts. The Site is a free public directory of soccer in Western Massachusetts, youth clubs, leagues, high school and college programs, fields, camps, tryouts and jobs across Western Mass.
This policy covers westernmasssoccer.com and any subdomain we operate. It does not cover the club, league, school and news sites we link out to; those run under their own policies.
3. What we store in your browser
Certain privacy preferences use your browser's localStorage, which stays on your device. Clearing your browser data, or using the Delete button in Section 10, removes all of it. These are the complete keys we write:
| Key | What it holds |
|---|---|
| wms_consent | Your cookie/analytics choice, the date you made it, the policy version, and whether you confirmed you are 13 or older. |
| wms_device_id | A random string used to keep your own submissions apart from a fresh visit. Not linked to a name, email or IP address. |
None of this is transmitted to us.
Advertiser dashboards also use an essential, HttpOnly session cookie for up to eight hours. It lets our server check access to that advertiser's report. Signing out removes the cookie and revokes the session. Passwords and report contents are not saved in localStorage.
4. Contact and advertising forms
Two forms on the Site send data to us: the contact form and the advertising enquiry form. What you type is delivered to us as an email through Resend, our email provider, and is not written to any database. We keep those emails for as long as we need them to answer you and to keep a record of advertising arrangements.
Only send us what you are comfortable having in an email. Please do not include anything sensitive.
5. Analytics and advertising scripts
On public pages, the following optional scripts load after you choose Allow analytics. They do not load on advertiser report pages:
- Google Analytics 4 (property G-F9EJJJ6JJL), measures page views and on-site events so we know which parts of the directory get used. Google receives your IP address and a cookie-based identifier. Google's practices are described in its own privacy policy.
- Google AdSense (publisher ca-pub-4399568212022715), supports display advertising. We keep Google's advertising storage, ad user data, and ad personalization consent settings denied.
- Reddit Pixel, measures whether visitors who arrive from Reddit ads go on to use the Site. Reddit receives an event and a cookie-based identifier.
After analytics consent, sponsor measurement is sent directly to our server with the placement ID and page pathname. Loaded impressions require loaded artwork or rendered sponsor text. Viewable impressions require at least half of the creative to be on screen for one continuous second in an active tab. Each placement records at most one loaded impression, one viewable impression and one outbound click per page visit. We do not attach the local device ID from Section 3.
Our advertiser reports contain aggregate counts from these events and refresh every 15 seconds while open. We store these counts in Upstash Redis, with monthly records expiring 120 days after their last update. Random page-visit IDs expire within eight hours and are used to prevent duplicate events. A daily, keyed digest of the request IP address limits automated requests; raw IP addresses and user agents are not stored in the reporting database. Advertiser passwords are sent over HTTPS to our sign-in endpoint and checked against a slow salted password hash. Reports do not establish unique people, inquiries, or sales.
You can change your choice through Privacy Choices in the footer. Essential only, a withdrawn choice, or Global Privacy Control disables our optional analytics collection. Browser blocking and withheld consent mean sponsor reports are a measured subset of traffic, not a census.
6. Maps, weather and news
- Maps, field and directory maps use Leaflet with map tiles from OpenStreetMap. Loading a map means your browser requests tiles from OpenStreetMap's servers, which see your IP address. Some pages also embed a Google Maps frame; those are subject to Google's policy.
- Weather, field pages fetch a forecast for the field's coordinates from Open-Meteo. We send the field's location, never yours; we never ask your browser for your GPS position.
- News, the news page pulls a public soccer-news feed on our server, not in your browser, so the publisher does not see your visit.
7. Hosting and server logs
The Site is hosted on Vercel. Like any web host, Vercel records standard request logs, IP address, timestamp, requested URL, user agent, for security and reliability. We do not use those logs to build profiles of visitors, and we do not combine them with anything else on this page.
8. Children's privacy
The Site is a directory written for parents, coaches and players, and is not directed at children under 13. We do not knowingly collect personal information from children. Contact forms send what a visitor types to us by email; children should not submit personal information through them.
If you believe a child has sent us personal information through the contact form, contact us and we will delete the message.
9. Your rights
Massachusetts and California residents, and visitors elsewhere, all have rights to access, correct and delete personal information held about them. Those rights apply to the limited information we hold, including messages you email us through a form and the standard hosting logs described in Section 7. Optional analytics providers process the information described in Section 5.
- Access and portability, use the Download button below for browser data, or ask us for a copy of any message you sent.
- Deletion, use the Delete button below, or ask us to delete a message you sent.
- Optional tracking, choose Essential only through Privacy Choices in the footer to stop optional analytics. Global Privacy Control also disables it.
- Non-discrimination, the Site is free and works identically whichever choices you make.
10. Download or delete your data
These buttons act on this browser, right now. Nothing is sent to us when you use them.
Download exports every key from Section 3 as a JSON file. Delete removes them and clears your device identifier and consent choice, so the banner will ask again on your next visit.
11. Changes to this policy
We update this page when what the Site does changes. The "Last updated" date at the top always reflects the current version. Because there are no accounts, we cannot notify you directly, the current policy always lives at westernmasssoccer.com/privacy.
12. Contact us
For anything privacy-related, use our contact form and put "Privacy" in your message. We aim to reply within a week, and within 45 days for a formal legal request.