Privacy Policy

Information we collect

We collect the following information through the features you choose to use:

• Account and sign-in information. If you create an account with email and password, Supabase Auth processes your email address, password credential, account identifier, email-confirmation status, and authentication records. Ball Ranks does not receive your plaintext password. If you continue with Google, Google and Supabase provide the basic account data used for sign-in, which can include your Google account identifier, email address, name, profile image, and email-verification status. Ball Ranks does not request access to Gmail, Google Drive, contacts, or other Google services.
• Saved roster information. When you add players to My Team, we store your account identifier together with the identifiers of the public NBA players you selected.
• Assistant information. We store conversation titles, your messages, assistant responses, relevant tool results, timestamps, and the number of free messages used for the current UTC day. A tool result can include your saved roster when your question calls for it.
• Website and device information. Vercel Web Analytics records page views and aggregated information such as the page visited, referrer, approximate location, device type, operating system, browser, and event time. Our hosting infrastructure also processes request data, such as IP address, user agent, requested URL, and diagnostic or security logs, to deliver and protect the service.

Ball Ranks does not currently offer paid checkout and does not collect payment-card or billing information. Public NBA statistics, rankings, projections, and league-news digests are product content rather than information about a Ball Ranks account holder.

How we use information

• Authenticate accounts, maintain signed-in sessions, and support password confirmation and reset.
• Save and display your fantasy roster and personalize roster-aware assistant answers.
• Provide, resume, and protect assistant conversations and enforce the daily free-message limit.
• Operate, debug, secure, and improve the website and understand aggregate traffic and page performance.
• Comply with law, enforce our agreements, and investigate fraud, abuse, or security incidents.

Where data-protection law requires a legal basis, we process information as needed to provide the service you request, for our legitimate interests in operating and securing Ball Ranks, with consent where required, and to meet legal obligations.

How the assistant handles chat data

The assistant is powered by Anthropic's commercial API. When you send a message, Ball Ranks sends Anthropic your message, the prior messages and assistant responses needed to continue that conversation, product instructions, and relevant tool results. Tool results can include public player data, rankings, projections, league news, and your saved roster when needed to answer a roster question.

We do not include your Ball Ranks email address, Google profile, account identifier, authentication cookie, or password in the assistant request. Anthropic states that commercial API inputs and outputs are not used to train its models unless the API customer expressly opts in, and that standard API inputs and outputs are deleted from its systems within 30 days, subject to exceptions for legal obligations and usage-policy enforcement. Ball Ranks separately stores your conversation history in Supabase so you can resume it. Please do not put passwords, financial information, health information, government identifiers, or other sensitive personal information into chat messages.

Cookies and analytics

Ball Ranks uses Supabase authentication cookies that are necessary to keep you signed in, refresh your session, and protect account-only pages. We do not use browser local storage for Ball Ranks account, roster, or chat data.

Vercel Web Analytics is enabled across the website. Vercel describes this service as cookie-free and anonymous: it creates a one-day visitor hash from request information, does not associate page-view data with an account or IP address, and does not track a visitor across different days or websites. Ball Ranks does not use advertising cookies or cross-site behavioral advertising.

When we disclose information

We disclose information only as described here:

• Supabase provides account authentication, session management, the database, and storage of saved rosters, usage counts, and chat history.
• Anthropic processes assistant inputs, relevant context, and model outputs to answer chat requests.
• Vercel hosts and delivers the website, processes operational request logs, and provides anonymous website analytics.
• Google processes the Google sign-in flow if you choose that option. We use the resulting basic profile information only to authenticate your Ball Ranks account.
• We may disclose information if required by law or legal process, to protect rights or safety, to investigate abuse or security incidents, or as part of a merger, financing, acquisition, or transfer of the service, subject to appropriate protections.

We do not sell personal information. We do not disclose personal information for cross-context behavioral advertising or targeted advertising, and we do not use data brokers.

Retention

• Account records, saved rosters, chat conversations, and the current daily usage record are retained while your account remains active or until you ask us to delete them, unless a longer period is required for legal, security, or dispute-resolution purposes.
• Deleting an account removes its saved roster, usage record, conversations, and messages from the active Ball Ranks database. Residual copies may remain temporarily in protected backups until those backups cycle out.
• Anthropic applies its standard commercial API retention described above. Vercel retains analytics and operational data according to its service settings and applicable provider terms.
• We may keep de-identified or aggregated information that cannot reasonably be linked back to you.

Your choices and privacy rights

You can choose not to create an account and still use public rankings and articles. You can remove players from My Team, clear authentication cookies by signing out or using browser controls, and avoid sending personal information through the assistant.

Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of personal information; object to or restrict certain processing; withdraw consent; or appeal our response. You may also have the right to complain to your local data-protection authority. To make a request, email ollynov@gmail.com from the address connected to your account. We may need to verify your identity before completing the request. Authorized agents should identify the account holder and provide proof of authority. We will not discriminate against you for exercising an applicable privacy right.

Ball Ranks does not sell or share personal information for targeted advertising, so there is no sale or targeted-advertising opt-out to exercise. We do not currently respond to browser Global Privacy Control or Do Not Track signals because we do not engage in those activities.

Security

We use administrative, technical, and organizational safeguards designed to protect information. These include encrypted HTTPS connections, managed authentication, restricted service credentials, and database rules that limit account data to the signed-in user. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.

International data transfers

Ball Ranks and its service providers may process information in the United States and other countries that may have different data-protection laws from your home country. Where required, we rely on contractual and other lawful safeguards for those transfers.

Children's privacy

Ball Ranks is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us so we can investigate and delete it where appropriate. Higher minimum ages may apply in some locations.

Changes to this policy

We may update this Privacy Policy as Ball Ranks changes. We will post the updated policy here and revise the effective date. If a change materially affects how we use information already collected, we will provide additional notice when required by law.

Contact us

Ball Ranks is the operator responsible for the practices described in this policy. For privacy questions or requests, email ollynov@gmail.com.

You can return to the Ball Ranks home page at any time.