Privacy

Last updated 7 October 2026

CricketAuction runs live player auctions and drafts for cricket leagues. It is operated by KTech Software Solutions. This page says what we collect, why, who sees it, how long we keep it, and how to have it deleted. Questions go to info@cricketauction.com.

What we collect

• Organizers: your email address, to send you sign-in links.
• Team owners: the name and email address your organizer enters when inviting you, to send your invite and sign-in codes.
• Players who register: your name, your email address, the role you pick (optional), and, if you claim one, your record in your league's directory.
• People who use our contact form: your name, your email address, and what you choose to tell us (your league or club, your role, how many teams, your message), to reply to you.
• League directory: player names and match statistics from your league's own scorecards, uploaded by the organizer. Ratings are calculated from these.
• Technical data: a sign-in cookie that keeps you signed in (it does nothing else). Your IP address is used briefly to limit repeated requests; we store only a one-way hash of it, in short-lived counters that are cleared out as they expire. Cloudflare Turnstile checks that sign-in, registration and contact forms are used by people, not bots.

We do not use advertising or analytics cookies, we do not track you across other sites, and we do not sell or rent personal data.

Why we use it

Only to run the draft: to sign people in, to send invites and codes, and to show the player pool to the people taking part. If you write to us through the contact form, we use what you send only to reply to you. When you register as a player, you agree that your name, role and rating appear in that draft.

Who can see it

• Your league's organizer sees the registrations, invites and the player pool for their drafts.
• Team owners and viewers of a draft see players' names, roles and ratings, and the auction results. They do not see email addresses.
• Service providers who process data for us: Cloudflare (hosting, database, bot checks), Resend (sending email) and Microsoft (our email inbox, where contact form messages arrive). They act on our instructions and may process data in the United States.

How long we keep it

• Accounts, invites, registrations and drafts: until the organizer deletes them, or until you ask us to delete your data.
• Contact form messages: they arrive as email in our inbox and are not stored in the app. We keep them as long as we need them to deal with your enquiry, and delete them if you ask.
• Sign-in links and codes: deleted within a day after they expire (links last 15 minutes, codes 10).
• Sign-in sessions: 30 days, or until you sign out.
• Database backups: deleted data can remain in our database's point-in-time backups for up to 30 days before it ages out.

Deleting your data

Email info@cricketauction.com from the address you used and we will delete what we hold about you. If your name is in a league directory but you never registered, email us with your name and league and we will remove it. If you were a player in a draft that has already been finalized, the results keep an anonymous "Removed player" in your place, without your name or email, so the other teams' results still add up. An organizer who removes you from a pool deletes your registration straight away. You can also ask us for a copy of what we hold, or to correct it.

Children

CricketAuction is not directed at children under 13, and we do not knowingly collect their data. If a junior league uses it, the organizer is responsible for having the necessary consent.

Changes

If this policy changes, we will update this page and the date at the top.