Privacy Policy

Information we collect

We collect the following information through the features you choose to use:

• Account and sign-in information. If you create an account with email and password, Supabase Auth processes your email address, password credential, account identifier, email-confirmation status, and authentication records. Ball Ranks does not receive your plaintext password. If you continue with Google, Google and Supabase provide the basic account data used for sign-in, which can include your Google account identifier, email address, name, profile image, and email-verification status. Ball Ranks does not request access to Gmail, Google Drive, contacts, or other Google services.
• Saved roster and watch list information. When you add players to My Team or your watch list, we store your account identifier together with the identifiers of the public football or basketball players you selected.
• BallChat information. We store conversation titles, your messages, BallChat responses, relevant tool results, timestamps, and the number of free messages used for the current UTC day. A tool result can include your saved roster or watch list when your question calls for it.
• Customer support. Our tawk.to support widget processes messages, replies, timestamps, any contact details you provide, and technical information such as your IP address, browser, and device to deliver support and let us follow up.
• Premium and billing information. When you start or complete a Premium purchase, Stripe processes your email address, payment method, billing details, transaction, and fraud-prevention information. Ball Ranks stores your Stripe customer and transaction identifiers, email address, purchased season, amount, currency, payment status, access period, and refund or dispute status. Ball Ranks does not receive your full card number.
• Website and device information. Vercel Web Analytics records page views and aggregated information such as the page visited, referrer, approximate location, device type, operating system, browser, and event time. Our hosting infrastructure also processes request data, such as IP address, user agent, requested URL, and diagnostic or security logs, to deliver and protect the service. On production deployments where Google measurement is configured, Google also receives page and session activity, approximate location, browser and device information, cookie-based client identifiers, ad-click information, and defined conversion events through Google Analytics and Google Ads.
• Landing-page testing. On the homepage and Premium landing page, we store a random visit identifier, the page variation shown, visible time on the page, and clicks on the main rankings, chat, and Premium actions. We do not attach these testing records to a Ball Ranks account, email address, IP address, or raw browser signature.

Public football and basketball statistics, rankings, projections, and league-news digests are product content rather than information about a Ball Ranks account holder.

How we use information

• Authenticate accounts, maintain signed-in sessions, and support password confirmation and reset.
• Save and display your fantasy roster and watch list, and personalize BallChat answers.
• Provide, resume, and protect BallChat conversations and enforce the daily free-message limit.
• Respond to support questions and follow up on messages received while we are unavailable.
• Process Premium purchases, provide season access, manage billing, and handle refunds or disputes.
• Operate, debug, secure, and improve the website and understand aggregate traffic and page performance.
• Measure advertising performance and attribute defined actions to Ball Ranks ads.
• Comply with law, enforce our agreements, and investigate fraud, abuse, or security incidents.

Where data-protection law requires a legal basis, we process information as needed to provide the service you request, for our legitimate interests in operating and securing Ball Ranks, with consent where required, and to meet legal obligations.

How BallChat handles chat data

BallChat is powered by Anthropic's commercial API. When you send a message, Ball Ranks sends Anthropic your message, the prior messages and BallChat responses needed to continue that conversation, product instructions, and relevant tool results. Tool results can include public player data, rankings, projections, league news, and your saved roster or watch list when needed to answer your question.

We do not include your Ball Ranks email address, Google profile, account identifier, authentication cookie, or password in a BallChat request. Anthropic states that commercial API inputs and outputs are not used to train its models unless the API customer expressly opts in, and that standard API inputs and outputs are deleted from its systems within 30 days, subject to exceptions for legal obligations and usage-policy enforcement. Ball Ranks separately stores your conversation history in Supabase so you can resume it. Please do not put passwords, financial information, health information, government identifiers, or other sensitive personal information into chat messages.

Cookies and analytics

Ball Ranks uses Supabase authentication cookies that are necessary to keep you signed in, refresh your session, and protect account-only pages. We do not use browser local storage for Ball Ranks account, roster, or BallChat data.

When you open Support, the tawk.to chat loads and uses cookies and browser storage to maintain support conversations and connection state. See tawk.to's cookie information for details.

When you visit the homepage or Premium page, Ball Ranks sets a first-party cookie for up to 90 days for that experiment so you continue to see the same page variation. We use anonymous visit records to compare bounce rate, visible time, and clicks on the main actions. Gallery, local-development, and preview-deployment visits are excluded.

Vercel Web Analytics is enabled across the website. Vercel describes this service as cookie-free and anonymous: it creates a one-day visitor hash from request information, does not associate page-view data with an account or IP address, and does not track a visitor across different days or websites. Ball Ranks does not use Vercel Web Analytics to identify individual visitors.

On production deployments where Google Analytics is configured, it uses first-party cookies such as_ga to distinguish visitors and sessions. Google Ads conversion measurement may use first-party cookies such as_gcl_* to store an identifier for a visitor or the ad click that brought the visitor to Ball Ranks and to attribute defined actions to that ad. Google states that Google Analytics cookies expire after up to two years by default. You can block or delete cookies through your browser settings.

Before loading Google measurement, Ball Ranks uses Vercel's country-level request signal to decide whether Google tags are available in the visitor's region. We store only that allowed-or-blocked decision in a first-party cookie for up to seven days. Google tags are not loaded for visitors detected in the European Economic Area, the United Kingdom, or Switzerland, and advertising-personalization signals are disabled where the tags are loaded.

Ball Ranks also uses OpenAI's advertising measurement pixel in the same permitted regions. It records account registrations and completed Premium purchases, including purchase value, currency, and a transaction identifier. It stores the ad-click identifier supplied by ChatGPT in a first-party cookie to attribute those actions to an ad. The pixel may detect supported account information and hash it in the browser to improve matching; raw account information is not sent through that matching feature. OpenAI measurement does not load where Google measurement is blocked, and conversion events are excluded from advertising personalization.

Fantasy league connections and the League Sync extension

When you connect a fantasy league from Sleeper, ESPN, or Yahoo, Ball Ranks reads and stores a copy of that league's information — team names, rosters, standings, matchups, waiver order, and recent transactions — to show it to you and to let BallChat give advice about your league. We only read league information; we never make changes on any fantasy platform (no lineup moves, no trades, no messages).

Private ESPN and Yahoo leagues can only be read while signed in, so connecting one requires your sign-in cookies for that platform (ESPN's espn_s2 andSWID, Yahoo'sT andY). Our League Sync browser extension sends them with one click. They are encrypted before storage, decrypted only on our servers to read your league's pages, and never shared with anyone else or used for any other purpose.

The League Sync extension reads only those four cookies: when you open its popup, click Sync, or open a supported fantasy page for a platform you already connected to Ball Ranks. The popup also reads the URLs and titles of open Yahoo and ESPN tabs to let you choose a league. When you click Sync, it reads the selected page's My Team navigation link and sends that link, the league URL, and the platform's sign-in cookies to Ball Ranks to import your league and select your team. After the first connection, opening that fantasy site can send changed sign-in cookies to keep the connection current. The extension does not read browsing history, unrelated page contents, or other cookies. Its background process wakes for these supported page events and then returns to sleep. Disconnecting a league deletes that league's stored copy of your cookies along with its synced data; to remove every stored platform cookie, email help@ballranks.com.

When we disclose information

We disclose information only as described here:

• Supabase provides account authentication, session management, the database, and storage of saved rosters, watch lists, usage counts, and chat history.
• Anthropic processes BallChat inputs, relevant context, and model outputs to answer chat requests.
• tawk.to hosts customer-support conversations and contact details, delivers chat notifications, and supports email follow-up. Its Privacy Policy describes its processing practices.
• Vercel hosts and delivers the website, processes operational request logs, and provides anonymous website analytics.
• Stripe processes Premium checkout, payments, refunds, and billing records.
• Google processes the Google sign-in flow if you choose that option. We use the resulting basic profile information only to authenticate your Ball Ranks account. Google also processes website, device, ad-interaction, and conversion data for Google Analytics and Google Ads measurement when those services are configured on the production website.
• We may disclose information if required by law or legal process, to protect rights or safety, to investigate abuse or security incidents, or as part of a merger, financing, acquisition, or transfer of the service, subject to appropriate protections.

We do not sell personal information. We do not disclose personal information for cross-context behavioral advertising or targeted advertising, and we do not use data brokers.

Retention

• Account records, saved rosters, watch lists, chat conversations, and the current daily usage record are retained while your account remains active or until you ask us to delete them, unless a longer period is required for legal, security, or dispute-resolution purposes.
• Deleting an account removes its saved roster, watch list, usage record, conversations, and messages from the active Ball Ranks database. Residual copies may remain temporarily in protected backups until those backups cycle out.
• Anthropic applies its standard commercial API retention described above. Vercel retains analytics and operational data according to its service settings and applicable provider terms.
• Purchase and billing records are retained as needed for accounting, tax, fraud prevention, refunds, disputes, and other legal obligations. Stripe retains information under its own terms and retention practices.
• When Google Analytics or Google Ads measurement is configured, Google retains measurement data according to the applicable account settings and Google's terms.
• Anonymous landing-page testing records are deleted after 13 months.
• Customer-support messages are stored in tawk.to so we can respond and refer to earlier conversations. To request their deletion, contact us using the email address below.
• We may keep de-identified or aggregated information that cannot reasonably be linked back to you.

Your choices and privacy rights

You can choose not to create an account and still use public rankings and articles. You can remove players from My Team, clear authentication cookies by signing out or using browser controls, and avoid sending personal information through BallChat.

Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of personal information; object to or restrict certain processing; withdraw consent; or appeal our response. You may also have the right to complain to your local data-protection authority. To make a request, email help@ballranks.com from the address connected to your account. We may need to verify your identity before completing the request. Authorized agents should identify the account holder and provide proof of authority. We will not discriminate against you for exercising an applicable privacy right.

Ball Ranks does not sell or share personal information for targeted advertising, so there is no sale or targeted-advertising opt-out to exercise. We do not currently respond to browser Global Privacy Control or Do Not Track signals because we do not engage in those activities.

Security

We use administrative, technical, and organizational safeguards designed to protect information. These include encrypted HTTPS connections, managed authentication, restricted service credentials, and database rules that limit account data to the signed-in user. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.

International data transfers

Ball Ranks and its service providers may process information in the United States and other countries that may have different data-protection laws from your home country. Where required, we rely on contractual and other lawful safeguards for those transfers.

Children's privacy

Ball Ranks is intended only for adults 18 and older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided personal information, contact us so we can investigate and delete it where appropriate.

Changes to this policy

We may update this Privacy Policy as Ball Ranks changes. We will post the updated policy here and revise the effective date. If a change materially affects how we use information already collected, we will provide additional notice when required by law.

Contact us

Ball Ranks is the operator responsible for the practices described in this policy. For privacy questions or requests, email help@ballranks.com.

You can return to the Ball Ranks home page at any time.