Security
Your league's data, kept safe.
Here is exactly how Beleeg protects your league: what we use and what it does.
Database
Row-level security
Postgres checks who can see each row.
Connection
HTTPS only
With HSTS, so browsers never fall back.
Backups
Every night
Each copy kept for 30 days.
Payments
Stripe
We never see card numbers.
How it works
What protects your league.
All of this is on for every league, on every plan.
Each league's data is walled off
Beleeg runs on a Supabase Postgres database with row-level security turned on. The database itself checks who is asking before it hands back a row, so one league can't see another league's players.
Every change is checked on the server
Scores, rosters, schedules and settings are saved through functions that run on our server. Each one checks that you belong to that league and have the right role before anything changes.
Encrypted connection, every time
Every page is sent over HTTPS. Browsers are also told (with a setting called HSTS) never to load Beleeg over an unencrypted connection.
Sign in without a password
Players can sign in with a link sent to their email, or with Google or Apple. No password to forget, reuse or have stolen.
Stripe handles the money
Card payments go straight to Stripe. Beleeg never sees or stores card numbers, and league dues land in your own Stripe account.
Nightly backups
A full copy of the database is saved every night and kept for 30 days. Each copy is checked after it is made, and we get an alert if a night is missed.
Your data
You stay in control.
What you and your players can do with your own information.
A record of who changed what
OnChanges to league settings, members, teams, lineups and the schedule are logged with who made them and when.
Delete your account
AnytimePlayers can delete their own account from the app, and their personal details are removed.
Card details
Stripe handlesRegistration money is paid through Stripe. Card numbers never touch Beleeg.
Privacy questions
Email usWant a copy of your data, or something corrected or removed? Write to privacy@beleeg.com and a real person answers.
Responsible disclosure
Reporting a vulnerability.
Found something? Email security@beleeg.com. A real person reads every report and writes back.
Ready when you are
Questions about your data?
Ask us anything about how Beleeg handles your league's information. A real person answers.