Privacy Policy

What we collect

• Your account: your name, your email address and your password. The password is stored only as a bcrypt hash, so we can check it but can't read it. If you ask to reset your password, we keep a fingerprint (a hash) of the link we email you and when you asked, for a day, so the link works once and requests can be limited.
• If you sign in with Google or Apple instead of a password: the name you share (if any), your email address, and the ID Google or Apple gives your account, which is how we recognize you next time. We never see your Google or Apple password. With Apple you can choose "Hide My Email", and we get a private address that forwards to yours. Your name starts as the one Google or Apple shares, and you can change it in Settings.
• What you do in a league: the teams you manage and the name, manager name, emoji and color you give them, the players you add and drop, your lineups, the trades you propose and answer, your draft picks, your player watchlist and your dashboard layout.
• If you're a commissioner: the league's settings, scoring and schedule, the team and manager names you enter, and the email addresses you invite managers with.
• A sign-in token, so you stay signed in. On the web it's a cookie named session, which lasts 30 days or until you log out. While you're signing in with Google or Apple, a second cookie (oauth_google or oauth_apple) holds that sign-in's one-time security values for up to 10 minutes, and is deleted when you come back. In the iPhone app it's kept in the device's Keychain, stays on that device, and is sent only to Know Ball. If you sign in with Apple, the app keeps your Apple user ID there too, only to notice if you stop using Apple with Know Ball and sign you out.
• If you turn on notifications in the iPhone app: the push token Apple gives your phone (it identifies the phone to Apple's notification service, not you), which alerts you've switched on, and a record of each alert we've sent you — its text and when — so the same news is never sent twice. Turning notifications off in the app or in your iPhone's Settings stops them; logging out removes the phone's token.
• Display choices that never leave your device: on the web, your theme, whether the sidebar is collapsed and whether you've dismissed the cookie notice are kept in your browser's local storage. The iPhone app keeps two flags on the phone: whether it has been opened before (so a fresh install starts signed out) and whether you've seen the lineup-swap tip.

What we don't collect

No location, contacts, photos or payment details. No advertising identifiers, and no analytics, crash-reporting or other third-party code in the website or the app. We don't keep logs of which pages you visit.

Who can see what

• Anyone, with or without an account: every league is listed on the home page, with its name and settings, its teams, the name on each manager's account, the commissioner's name, and every roster, lineup, score, trade and draft pick. We ask search engines not to index league pages. Your email address is never shown.
• Your league's commissioner also sees the email address each team was invited with.
• Invitations: if a commissioner invites an email address that already has an account, the invitation waits on that account's My Teams page. Nobody is added to a league until they choose to join.
• Only you see your account's email address, the manager name on your team, your watchlist and your dashboard.

Where your information goes

• Google Cloud hosts the server and the database, in the United States (South Carolina).
• Cloudflare provides the site's DNS: it tells your device where uknowball.win is. Your traffic doesn't pass through Cloudflare.
• Let's Encrypt issues the site's HTTPS certificate. It receives no information about you.
• Google and Apple, if you choose to sign in with one of them: you sign in on their page (or Apple's sign-in sheet on iPhone), so they know you use Know Ball, under their own privacy policies. We send them nothing about you; we only check what they send back.
• Apple Push Notification service delivers alerts to your iPhone, if you've turned them on: we send Apple your phone's push token and the alert's text (for example, "Trade offer from Aces"). Apple handles it under its own privacy policy.
• NFL data: the server downloads public player, schedule and stats data from Sleeper and ESPN. Those requests contain nothing about you.
• Resend delivers the one email Know Ball sends: a password reset link, when you ask for one. It receives your email address and that message, and nothing else, under its own privacy policy. Invites are sent from the commissioner's own email app.
• Apple: if you test the iPhone app through TestFlight, Apple shows us the email address you were invited with, when you installed and opened the app, crash reports, and any feedback you send. For the App Store app, Apple shares crash reports and usage statistics with us only if you've chosen to share them with app developers in your iPhone's settings. We use these only to fix problems.

We don't sell, rent or share personal information with anyone else. We would disclose it only if the law required us to.

How long we keep it

• Your account information: until you delete your account.
• Sign-ins: 30 days, or until you log out.
• Backups: the database is copied once a day, and each copy is deleted after 7 days. Something you delete can remain in a backup for up to 7 days.
• Server error logs are deleted automatically as newer ones replace them.
• League history stays with the league. See below.

Deleting your account

On the web, go to Settings and choose Delete account. In the iPhone app, open the Account menu on the My Teams tab and choose Delete Account. You'll be asked for your password — or, if your account signs in with Google or Apple, to sign in with it once more — and the deletion happens right away. For an Apple account we also tell Apple to revoke Know Ball's access, so it disappears from your Apple ID's settings.

• Deleted: your name, email address, password hash or Google or Apple account ID, watchlist, dashboard, notification settings, your phones' push tokens and the record of alerts sent to you. The manager name on teams you managed goes back to "Unknown".
• Kept with the league: the teams you managed go back to unclaimed, with their rosters, lineups, scores and trades, so the rest of the league's season still adds up. A league you were commissioner of is left without one, and another manager in it can take the seat. Leagues you created stay with their members.
• Entered by your commissioner: an invite email your commissioner set for your team stays until they change it. Ask them, or contact us and we'll remove it.
• Backup copies are deleted within 7 days.

Your choices

Settings shows the name and email on your account and how you sign in, and lets you change your name. To change your email, to get a copy of your information, or with any other request about it, contact us at privacy@uknowball.win. Depending on where you live, you may have a legal right to see, correct, delete or take a copy of your information. We'll honor those requests for everyone, wherever they live, and reply within 30 days. We use your information only to provide the league service you signed up for.

Children

Know Ball isn't meant for children under 13, and we don't knowingly collect their information. If you believe a child has an account, contact us and we'll delete it.

Security

Everything travels over HTTPS. Passwords are stored only as bcrypt hashes, and we never see a Google or Apple password at all. The web sign-in cookie can't be read by scripts on the page, and the iPhone app keeps its token in the Keychain. No system is perfectly secure, but we work to keep yours safe.

Changes to this policy

We'll post any change here and update the date at the top. If a change affects how information you already gave us is used, we'll say so in the app before it takes effect.

Contact

Questions or requests about your privacy: privacy@uknowball.win.