Alley Admin

Privacy Policy

Last updated: August 2026

Alley Admin is a product of Toastbyte Studios. This page covers the website at alleyadmin.app. The league management application itself is still in development — when it launches with accounts and league data, this policy will be replaced with one that covers it properly.

For now the site does two things: it counts how the page is used, and it stores an email address if you choose to give us one. That is the whole of it, and the rest of this page is the detail.

Analytics

We use Google Analytics 4 to understand how the site is used. It is loaded through Cloudflare Zaraz, which serves the analytics script from alleyadmin.app rather than from a third-party domain and sends the data on from Cloudflare's edge.

We send a page view, plus these five events and nothing else:

  • waitlist_signup_started — you submitted the waitlist form.
  • waitlist_signup_succeeded — the address was accepted.
  • waitlist_signup_failed — it was not, along with a reason such as "invalid_email" or "server_error".
  • outbound_link_clicked — you followed a link away from the site, along with where it pointed.
  • theme_toggled — you switched between the light and dark themes.

Your email address is never sent to Google Analytics, in any form, hashed or otherwise. The signup events record that a signup happened and whether it worked, never who it was for.

Cookies

Zaraz sets two first-party cookies on alleyadmin.app:

  • cfz_google-analytics_v4 — the identifier and engagement state kept for Google Analytics. Up to one year.
  • cfzs_google-analytics_v4 — state for your current visit, such as a page view count. Deleted when you close your browser.

Both are set for alleyadmin.app alone and do not follow you to other sites. We also use Cloudflare Web Analytics, which counts page loads, sets no cookies, and keeps no client-side state.

Your light/dark preference is stored in your browser under aa-theme, and is only written once you click the toggle. It never leaves your device.

When analytics does not load

If Zaraz fails to load in your browser — a blocked script, a slow connection — the site falls back to sending the same events from our own server instead. Because there is no cookie to read in that case, the server derives a temporary identifier by hashing your IP address, browser user agent, and language setting together. It is not stored, and it is not linked to anything else.

This is a fallback and should be rare. We would rather tell you it exists than leave it undocumented.

Opting out

There is no in-product opt-out yet. A consent banner is planned and the underlying machinery is already in place, but it is not switched on, so analytics currently runs for everyone who visits.

Until it ships, you can block analytics with a browser extension or your browser's tracking protection, and clearing the cookies listed above resets the identifier Google Analytics uses for you.

The waitlist

If you enter your email address, we store it in a Cloudflare D1 database. We keep the address and the time you submitted it, and nothing else — no name, no IP address, no browser details.

Submitting the same address twice is silently ignored rather than stored again. We use the address only to tell you when Alley Admin launches. We do not sell it, share it, or add it to any other list.

Hosting

Like any website, this one is delivered by a host — Cloudflare — which processes the IP address and request details of every request in order to serve the site and to block abuse. That happens for every visitor and is separate from the analytics above.

Who else sees this

We do not sell, trade, or rent your information. Cloudflare provides our hosting, our database, Web Analytics, and Zaraz. Google receives the analytics events described above; how Google uses data from sites like ours is explained at policies.google.com/technologies/partner-sites.

How long we keep it

Your email address stays until you ask us to remove it, or until Alley Admin has launched and we no longer need it. Analytics data is kept by Google according to the retention setting on our property, and Cloudflare keeps its own logs according to its policies. Neither is linked to your email address.

Getting your data removed

There is no account to delete. If you gave us an email address, email info@toastbyte.studio and we will remove it. You can also ask what we hold or ask us to correct it.

One honest limitation: analytics data is not linked to your email address or to any account, so we cannot look up which analytics events were yours in order to delete them.

Children

This site is not directed at children under 13 and we do not knowingly collect their information. If you believe a child has given us an email address, contact us and we will delete it.

Changes

We will update this page when what we collect changes, and update the date at the top when we do.

Contact

Questions about any of this go to info@toastbyte.studio.