Back to Crest

Privacy

Last updated 14 September 2026.

Crest is the administrative system of record for youth soccer clubs. This page describes what it holds, who can see it, and how to get it changed or removed. It is written to be read, not to be survived.

Who is responsible

Each club is the controller of its own members' records. Crest is operated by Nipomo Soccer Club, which processes those records on each club's behalf. For anything about your own or your child's record, contact your club first; for anything about the platform, write to info@nipomosc.org.

What Crest holds

Date of birth is held because age decides what the system permits, not for marketing. There is no advertising in Crest, no advertising identifier, and nothing here is sold or rented to anybody.

Children

Most people in a club are minors, and the system is built around that rather than around it.

Photographs, and a limit worth stating plainly

Photo consent is two separate grants: appearing in posts inside the club, and appearing in material that can be shared publicly. Both default to off.

Images are published according to the permissions in force at the moment of publication, and a change applies from then on. Turning a grant off stops future publication and does not reach back into what has already been shared onward. Any promise to the contrary would be unkeepable. What Crest records instead is which consent was in force when something was published, which is provable.

Who can see what

Personal records are visible to club staff whose role includes them, and to the person themselves and their guardians. Other apps in the stack (referee, video, fitness and game tools) receive a first name, a last initial and an opaque identifier, and are structurally incapable of receiving more: the token they hold cannot reach personal data through any endpoint, parameter or role.

Photographs are stored privately and reach a browser through short-lived links rather than from a public bucket.

Signing in

Signing in with Google tells Crest your Google account identifier, your name and your email address. Crest does not receive your password and asks for no access to your Google account beyond identifying you. A Google account that matches nobody in a club's records is refused; signing in does not create a person.

Where it is held, and for how long

Data is held in Google Cloud in the United States. Records are kept while a person is a member of a club and for as long afterwards as the club needs them for its own records, after which they are deleted.

Your choices

Write to your club, or to info@nipomosc.org.

Changes to this page

If this page changes in a way that affects what is collected or who can see it, clubs are told before the change takes effect.