What we collect.
How we use it.

Garage Built Baseball is a private youth baseball training service in Bonney Lake, WA. We operate this website at garagebuiltbaseball.com and reach families by email. Throughout this policy, "we," "us," and "our" refer to Garage Built Baseball.

We only collect information you give us directly:

• Booking form: parent name, parent email, parent phone, player first name, player age, and any notes you add.
• Waiver + media release: whatever you fill into the Adobe Sign waiver we email you after booking — typically the guardian's signature, contact info, and an emergency contact. Adobe stores the signed PDF and emails you a copy.
• Email signup: your email address (and whatever page you signed up from).
• Members area sign-in: if you sign in to the drill library, your email plus (optionally) your Google account name.
• Email replies + contact: whatever you send to hello@garagebuiltbaseball.com.
• Anonymous usage: Google Analytics records pageviews and aggregate engagement (button clicks, form submissions). It sets first-party cookies (_ga, _ga_*) for session deduplication. We don't use advertising trackers or the Facebook Pixel.

Each piece has one job:

• Parent name + email + phone: confirm your booking, send reminders, reach you if something changes.
• Player name + age: prepare for the session and match the right coach.
• Email subscribers: send what you signed up for (free PDF, blog posts, the occasional update). One click to unsubscribe.

We don't sell your information. We use a small set of trusted processors to run the business:

• Notion — stores bookings, email subscribers, and members.
• Resend — sends confirmation, reminder, follow-up, and subscriber emails.
• Adobe Sign (Acrobat Sign) — collects and stores the parent waiver + media release. Adobe acts as the processor for the signed PDF and emails you a copy.
• Cloudflare Turnstile — bot check on the booking form. Doesn't track you across sites.
• Vercel — hosts the site and collects anonymous performance metrics (Core Web Vitals).
• Google Analytics — anonymous, aggregated usage reporting (pageviews, key events). IP addresses are anonymized.
• Google (sign-in) — if you choose to sign in with Google, Google verifies your identity. We receive your email and name only.

We may disclose information if required by law (a valid subpoena, court order, or similar). We'd tell you first unless legally prohibited.

Most of our players are under 13. Parents and guardians provide all information on their kid's behalf — we don't collect data directly from children, run accounts for them, or market to them. The website itself is intended for parents.

If you believe we've inadvertently collected information from a child without parental consent, email hello@garagebuiltbaseball.com and we'll delete it.

Booking records stay in our system as long as you're an active family. If you ask us to delete them, we will, except where we need to keep limited records for accounting or legal reasons.

Subscriber emails are kept until you unsubscribe (one click in any email) or ask us to delete them.

You can ask us to show you, correct, or delete any personal information we have about you and your kid. Email hello@garagebuiltbaseball.com and we'll handle it within 30 days.

If you're a Washington resident, the My Health My Data Act gives you additional rights around health-related information. We don't collect health information beyond what a parent volunteers in the booking notes (e.g., "kid is recovering from a wrist injury"). You can request deletion of that info anytime.

We don't use advertising cookies or tracking pixels. The cookies we do set:

• _ga, _ga_* — first-party Google Analytics cookies for session deduplication. Expire in 2 years.
• gbb_cookie_notice — remembers that you've dismissed the cookie banner so it doesn't reappear. Expires in 1 year.
• gbb_signin_code — short-lived cookie holding your sign-in code while you type it in. Expires in 10 minutes or as soon as you sign in, whichever's first. Only set on the members area.
• Cloudflare Turnstile sets a couple of bot-protection cookies on the booking form. Required for the bot check to work.
• Next-Auth sets a session cookie after you sign in to the members area.

You can clear cookies any time in your browser settings or block them site-wide; the site will still mostly work, you just won't stay signed in to the members area.

If we change anything material, we'll update the date at the top and, for big changes, post a note on the site or email subscribers. No surprise updates.

Questions, requests, or anything else: hello@garagebuiltbaseball.com. We respond within a day or two.