Privacy policy

Last updated: 16 October 2026

Who we are

ballgames.app is an independent baseball-game website run by the ballgames.app team, a UK-based group of friends. The team operates this website and is responsible for the personal information described in this policy. For privacy questions or requests, email admin@ballgames.app. For game or account help, email support@ballgames.app.

Information we collect

• Guest sessions. Playing a server-backed game can create a guest identity with a unique account identifier and sign-in session. This lets us save and resume your games without asking for an email address. Visiting the homepage or playing a local sample does not itself create a cloud account.
• Google sign-in. If you choose Google sign-in, our authentication provider receives your email address, Google account identifier and basic profile information Google supplies, which may include your name and profile-picture URL. We do not receive your Google password. We do not ask for access to your emails, contacts or files.
• Profile settings. We store your chosen username, your public-profile and leaderboard preferences, and account creation and activity timestamps.
• Games and results. We store the games and dates you play, round identifiers, guesses and actions, saved progress, timing, scores, outcomes and result-verification information. This supports resume, scoring, statistics, history and duplicate-request protection. If you choose to import local sample results, those imported results are stored separately from server-verified results.
• Messages. If you email us or use the contact form when available, we receive your email address, any name you provide, the enquiry category, your message and our correspondence. The contact form does not require an account and does not automatically attach your game history.
• Technical and security data. Our hosting, sign-in and anti-bot providers may process IP addresses, browser and device information, request times, authentication events and diagnostic or security logs. These help deliver the website, investigate failures and prevent abuse.

How and why we use information

We use your information to provide games, authenticate sessions, save progress, calculate results, maintain your history and statistics, handle account linking or guest-history transfers you request, respond to messages, and protect the service.

Where the EU or UK GDPR applies, providing the service and handling your requested account actions is based on performance of our agreement with you. Keeping games reliable and fair, preventing abuse and responding to general enquiries is based on our legitimate interests in running and protecting this website. We rely on legal obligations when we must retain or disclose information by law. Optional public sharing is based on your consent, which you can withdraw in your account settings.

Sending us a message does not subscribe you to marketing. We do not provide your email address, private account information or game history to advertising tags. Advertising partners may process browser information for personalised advertising; under some US state laws, this can count as selling or sharing personal information. Game scoring is automatic, but we do not use it to make decisions that have legal or similarly significant effects on you.

What other players can see

Public-profile sharing and leaderboard visibility are separate settings, both off by default. If you enable a public profile, other people can see your username and the selected aggregate game statistics shown on that profile. If you enable leaderboard visibility, eligible leaderboards can show your username and scores. We do not include your email address, Google identity or private guess history in these public views.

You can switch either setting off on the Account page. Public information may already have been copied, screenshotted or cached by others. If you share a result yourself, the people and platforms you share it with can retain it under their own policies.

Cookies and browser storage

We use essential sign-in cookies to keep guest and Google sessions connected. We also use browser local storage for sample-game progress, local results, preferences and game-resume or retry information. These are used to provide the functions you request. Anti-bot checks may process additional browser information to distinguish people from automated requests.

We use Google AdSense to support advertising on the site. Google and its advertising partners may use cookies to deliver ads, measure their performance and limit repeated ads. Depending on your choices and advertising settings, cookies may also be used to personalise ads. You can manage Google's ad personalisation in My Ad Center. Learn more about how Google uses information for advertising.

We use Google Analytics 4 through Google Tag Manager to measure visits to public pages. It can process cookie identifiers, page addresses, referring websites and browser or device information. We remove query strings and fragments from page and referrer addresses, exclude account and authentication pages, and do not send your email address, username, guesses or saved game history. Google Signals and advertising personalisation signals are disabled for this measurement.

When analytics is allowed, we also store limited product events in Supabase: game readiness, first actions, result views, visible result options, clicks, archive dates, sharing outcomes, help opens and connection recovery. A random browser-session identifier expires after 30 minutes of inactivity. Events can be linked to your existing game attempt after verifying ownership, but contain no guesses, names, contact messages or full addresses. We categorise supported campaign tags and referring platforms; shared game links include a public sharing marker without identifying the sender. These optional events are deleted after 90 days and follow the same analytics choices below.

Analytics stays off until Google’s consent system reports that analytics is allowed or that European consent requirements do not apply, subject to your US privacy choices. Unknown or unconfigured consent states keep analytics off. You can turn analytics off below; we also turn it off when your browser sends Global Privacy Control. Where consent is required, optional analytics uses your consent. Learn more about how Google uses information from sites that use its services.

You can block cookies or clear site storage in your browser, but doing so can remove local progress or disconnect you from a guest identity. A guest identity is not recoverable across devices unless you link it to a permanent sign-in. Clearing browser storage does not delete cloud records; deleting a cloud account does not automatically clear locally stored sample history.

Who processes information for us

We use Supabase for authentication and database storage, Vercel for hosting and request delivery, and Cloudflare Turnstile for anti-bot checks. Google processes information through AdSense, Tag Manager and tags enabled through it, and when you choose its sign-in service. Our email services process correspondence; when enabled, the contact form uses Resend to deliver messages to the relevant ballgames.app mailbox.

Access is limited to operators and providers who need it to run the service or handle your request. We may disclose information where legally required or necessary to protect users and the service. Providers may process information outside your country, including in the United States. Where applicable, international transfers must use legally recognised safeguards, such as adequacy decisions or standard contractual clauses. Contact us for information about the safeguards relevant to your data.

How long information is kept

Registered-account profiles, saved games and compact result history are kept while your account remains active, until you delete the account or request deletion. Detailed guesses and inactive guest records can remain stored with the account; there is currently no guaranteed automatic expiry for those records. You can request their deletion rather than relying on inactivity or signing out.

We keep correspondence for as long as needed to resolve the enquiry and any related follow-up or dispute. Technical logs and backups are subject to the providers’ operational retention settings. Information may be retained longer where required by law or necessary for a specific security incident or legal claim. Deleted information may remain in restricted backups until those backups expire; it is not intended to be restored into active use.

Your choices and rights

On the Account page, you can manage your username and sharing settings, export your game history and delete your cloud account. Account deletion removes its authentication identity, sessions, profile and associated game records, including transferred guest records. To remove local sample data too, clear ballgames.app’s site storage in your browser.

Depending on the law that applies to you, you may have rights to access, correct, delete or receive a portable copy of your information, restrict its use, object to processing based on legitimate interests, and withdraw consent without affecting earlier lawful processing. Email admin@ballgames.app to exercise these rights or ask for information beyond the game-history export. We may ask for enough information to verify you own the account; please do not send a password.

Where GDPR applies, we normally respond within one month, with any permitted extension explained to you. You can also complain to your local data-protection authority, including in the country where you live, work or believe an infringement occurred.

Security and children

We use encrypted connections, verified sessions and ownership checks to protect private account and game data. No online service can guarantee complete security. Please contact us if you suspect unauthorised access to your account.

The site is for a general audience and is not directed at children. If you believe a child has provided personal information that should not be processed, contact us so we can investigate and remove it where appropriate.

Changes and contact

We will update this page when our data practices change and show the new date above. For material changes affecting existing users, we will provide an appropriate notice. Privacy enquiries go to admin@ballgames.app; marketing and partnership enquiries go to marketing@ballgames.app. You can also visit our Contact page.