Legal
Privacy policy
The Uttar Pradesh American Football Association (UPAFA) runs upafa.in. This policy covers the public site, accounts, registration, and certificate verification. The constitution and bye-laws remain the governing documents of the association.
Who to contact
Privacy and data requests: grievance@upafa.in. Registration questions: registrar@upafa.in. General office: secretary@upafa.in.
What we collect
- Account details you submit: name, email, password, and any phone number or date of birth you choose to add.
- Registration details for a player, referee, coach, or district affiliation, including district, category, and the photo and identity document you upload.
- Certificate records issued after a registration is approved, so anyone can verify them on the public verification page.
- Messages you send to an UPAFA email address listed on the contact page.
We do not run advertising, and we do not sell this information. The site does not use a third-party analytics or marketing cookie.
Why we use it
To create your account, review a registration, issue or revoke a certificate, show verification results, and reply when you contact the association. Confirmation and decision emails are sent to the address on the account.
Where it is stored
Account, registration, and certificate data is stored with our database provider (Supabase). The website is served over HTTPS by Cloudflare. Registration uploads are kept in private storage tied to the applicant’s account, not on the public website. A signed-in session is stored in your browser so you stay logged in.
Who can see it
UPAFA administrators who review registrations and manage the association. District administrators see applications for their district. A certificate that has been issued can be checked on the public verification page, which shows the status needed to confirm it is valid. We do not publish identity documents.
Youth registrations
A player registration may include a minor. Submit that information only if you are the player, or a parent, guardian, or authorised club official acting for them. It is used for registration and certification, not for marketing.
How long we keep it
Account and registration records are kept for as long as the membership or certificate matter requires, including the certificate validity period and any appeal. You can ask for a copy or a correction of your own record. Write to grievance@upafa.in. The bye-laws allow 30 days for a response.
Security
The public site is served only over HTTPS. Access to registrations and admin tools is limited to signed-in roles. No website can promise that every attack will fail. If you believe an account has been misused, email grievance@upafa.in and change your password.