Privacy Policy

1. Information We Collect

We collect the following information:

• Account data: Email address, username, display name, profile photo
• User content: Reviews, comments, reactions, and follows
• Usage data: Pages viewed, features used, timestamps
• Device data: Browser type, operating system, IP address

2. How We Use Your Information

• Provide and improve the Service
• Display your public profile and content to other users
• Send notifications about activity on your content
• Enforce our Terms of Service and moderate content
• Prevent abuse, spam, and security threats

3. Information Sharing

We do not sell or share your personal information for cross-context behavioural advertising, and we run no advertising or third-party tracking scripts. Your public profile, reviews, and comments are visible to other users (or only to approved followers if your profile is private). To improve the app we keep a basic first-party usage log in our own database (for example: app opened, a review draft started, or an error shown). It never includes what you type, your email, or your location, is not shared with anyone, and is deleted automatically after 90 days. We use a small number of processors strictly to operate the Service: our cloud hosting and database provider, and our transactional email provider. They act on our instructions under confidentiality obligations. We may disclose information where legally required or to protect the rights and safety of our users.

3a. Legal Bases & Data Minimisation

We collect only what the Service needs to work: an email address (to create and secure your account), a username and optional display name and photo, and the content you choose to post. We do not ask for your real name, address, phone number, date of birth, or payment details. Where the GDPR/UK GDPR applies, we rely on contract performance (running your account), legitimate interests (security, abuse prevention, product improvement), and consent where required (for example optional emails).

3b. Retention & International Transfers

We keep account data while your account is active and delete or anonymise it within 30 days of an account-deletion request, except where we must retain records to comply with law or resolve disputes. Our providers may process data in the United States and other countries; transfers out of the EEA/UK rely on Standard Contractual Clauses offered by those providers.

4. Data Security

We use industry-standard security measures including encryption, secure authentication, and row-level security policies to protect your data. However, no method of transmission over the internet is 100% secure.

5. Your Rights

• Access and update your personal information via your profile settings
• Delete your reviews and comments at any time
• Delete your account and personal data from Profile → Edit Profile → Delete account
• Block other users to prevent mutual content visibility
• Make your profile private so only approved followers see your activity

If you are in the EEA or UK, you also have the rights to access, rectification, erasure, restriction, objection, and data portability, and the right to complain to your local data protection authority. If you are a California resident, you have the rights to know, delete, correct, and opt out of sale or sharing — we do not sell or share personal information, and we will not discriminate against you for exercising any right. Email privacy@letterball.com and we will respond within 30 days.

6. Third-Party Media & Data

The Service displays third-party media and data, including team logos, league marks, player portraits, game scores, and statistics. These materials belong to their respective owners (e.g., ESPN, Wikimedia Commons contributors, sports leagues, and teams) and are used under license or in accordance with the applicable provider's terms. LetterBall does not claim ownership of third-party media. Player portraits sourced from Wikipedia/Wikimedia Commons are generally licensed under CC BY-SA 4.0. For a complete inventory of third-party sources, please contact us.

7. Cookies & Local Storage

We use only strictly necessary cookies and local storage — your login session, theme preference, small interface settings, and content caching. We use no advertising or third-party tracking cookies and no third-party analytics, so no consent banner is required. Full details are in our Cookie Policy.

8. Children's Privacy

The Service is not intended for children under 13. We do not knowingly collect information from children under 13. If you believe a child has provided us with personal information, please contact us.

9. Changes to This Policy

We may update this policy at any time. We will notify users of material changes via the Service.

10. Contact & Who We Are

LetterBall is an independently operated website and is the controller of the personal data described here. Privacy questions or data requests: privacy@letterball.com. General support: support@letterball.com. Copyright notices: copyright@letterball.com.