Privacy Policy

Sports Ball Squares Effective Date: May 28, 2026 Last Updated: May 28, 2026

1. Introduction

Sports Ball Squares ("we," "us," "our," or the "Platform") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you visit our website or use our Platform.

This Privacy Policy applies to all Users of Sports Ball Squares, including visitors to our public landing page, registered Players, and Commissioners. By using the Platform, you agree to the practices described in this Privacy Policy.

This Privacy Policy applies to residents of the United States and Canada. If you are accessing the Platform from outside these regions, please be aware that your data may not receive the same level of protection as it does in your home jurisdiction.

If you have any questions about this Privacy Policy, please contact us at contact@sportsballsquares.com.

2. Information We Collect

2.1 Information You Provide Directly

When you create an account or use the Platform, we may collect the following information:

Required at signup:

• First and last name
• Email address
• Date of birth (used to verify you meet the minimum age requirement of 18)
• Password (stored in encrypted form; we never store your password in plain text)

Optional at signup:

• Phone number (used for SMS notifications if you choose to opt in)
• Marketing communication consent (whether you agree to receive promotional emails from Sports Ball Squares)

During Platform use:

• Game data including games created or joined, squares claimed, labels assigned, and game outcomes
• Communications you send to us directly, such as support requests

2.2 Information Collected Automatically

When you visit our website or use the Platform, we automatically collect certain technical information, including:

• IP address
• Browser type and version
• Device type and operating system
• Pages visited and time spent on pages
• Referring URLs
• Session and authentication tokens

This information is collected through cookies and similar tracking technologies used by our Platform provider (Lovable) and our marketing platform (HubSpot). See Section 5 (Cookies and Tracking) for more detail.

2.3 Information We Do Not Collect

Sports Ball Squares does not collect:

• Payment information of any kind (credit card numbers, bank account details, or any financial account information)
• Government-issued identification numbers
• Social Security numbers
• Any financial transaction data related to Games organized through the Platform

All financial arrangements between Commissioners and Players occur entirely outside of the Platform and are not known to or recorded by Sports Ball Squares.

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 To Operate the Platform

• Create and manage your account
• Authenticate your identity when you log in
• Enable you to create, manage, and participate in Games
• Track game history and outcomes
• Send transactional notifications (code delivery, deadline reminders, grid reveals, quarter win alerts, series summaries) via email and, if you have opted in, via SMS

3.2 To Verify Eligibility

• Use your date of birth to confirm you are at least 18 years of age

3.3 To Communicate with You

• Send transactional emails related to your account and Game activity
• Send marketing and promotional emails if you have provided explicit consent to receive them
• Respond to your support requests and inquiries

3.4 To Improve the Platform

• Analyze usage patterns and Platform performance using aggregated and anonymized data
• Troubleshoot technical issues
• Develop new features and improve existing ones

3.5 To Comply with Legal Obligations

• Retain records as required by applicable law
• Respond to lawful requests from law enforcement or regulatory authorities
• Enforce our Terms of Service

3.6 Aggregate and Anonymized Data

We may use anonymized, aggregated data that cannot reasonably be used to identify you for business analytics, reporting, and, in the future, for sharing with advertising or marketing partners. We will never sell or share your personal information with advertisers. Any data shared with third parties for commercial purposes will be aggregate and non-identifiable only.

4. How We Share Your Information

We do not sell your personal information. We share your information only in the following circumstances:

4.1 With Service Providers

We share personal information with trusted third-party service providers who assist us in operating the Platform. These providers are contractually obligated to protect your data and may only use it for the purposes we specify.

Our current service providers include:

4.2 With Other Users

Certain information is visible to other Users of the Platform in the context of Games:

• Your square label (which you set yourself and may be your name or any custom label) is visible to all participants in a Game
• Commissioners can see the identity of Players in Games they administer
• Players cannot see the identity of other Players; they can only see square labels

4.3 For Legal Compliance

We may disclose your personal information if required to do so by law or in good faith belief that such action is necessary to:

• Comply with a legal obligation, court order, or governmental request
• Protect and defend the rights or property of Sports Ball Squares
• Prevent or investigate possible wrongdoing in connection with the Platform
• Protect the personal safety of Users or the public

4.4 Business Transfers

In the event that Sports Ball Squares is acquired, merged, or its assets are transferred to another entity, your personal information may be transferred as part of that transaction. We will provide notice of any such transfer and any material changes to how your data is handled.

4.5 With Your Consent

We may share your information with third parties when you have given us explicit consent to do so.

5. Cookies and Tracking Technologies

5.1 What Are Cookies

Cookies are small text files stored on your device when you visit a website. We use cookies and similar technologies to operate the Platform and understand how it is used.

5.2 Types of Cookies We Use

Strictly Necessary Cookies These cookies are required for the Platform to function. They include session management and authentication tokens. You cannot opt out of these cookies while using the Platform.

Analytics and Performance Cookies Our Platform provider (Lovable) uses cookies to collect information about how Users interact with the Platform. This data is used in aggregate to improve Platform performance and user experience.

Marketing and Tracking Cookies We use the HubSpot tracking pixel on our website. This technology collects information about your visit including pages viewed, time spent, and actions taken, even before you create an account. This data is used to understand visitor behavior, measure marketing effectiveness, and personalize communications.

The HubSpot tracking pixel may set cookies on your device for these purposes.

5.3 Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to refuse or delete cookies. However, disabling strictly necessary cookies will prevent the Platform from functioning properly.

To opt out of HubSpot tracking specifically, you can use a browser-level ad blocker or visit HubSpot's opt-out page at https://www.hubspot.com/data-privacy/privacy-policy.

5.4 Do Not Track

Some browsers offer a "Do Not Track" signal. Our Platform does not currently respond to Do Not Track signals. We will update this Policy if our practices change.

6. Data Storage and Security

6.1 Where Your Data Is Stored

Your personal data is stored on servers operated by Supabase in the United States West region (Oregon). By using the Platform, you consent to your data being stored and processed in the United States.

6.2 How We Protect Your Data

We implement industry-standard security measures to protect your personal information, including:

• Encryption of data in transit using TLS
• Encryption of passwords at rest
• Access controls limiting who can access personal data
• Regular security monitoring

No method of electronic transmission or storage is 100% secure. While we take reasonable precautions, we cannot guarantee absolute security. If you believe your account has been compromised, contact us immediately at contact@sportsballsquares.com.

6.3 Data Retention

We retain your personal information for as long as your account is active and for 90 days following account deletion, after which your personal data is permanently deleted from our systems and those of our service providers where technically feasible.

Game outcome records may be retained in anonymized, non-personally identifiable form beyond the 90-day period for Platform integrity and analytics purposes.

We may retain certain information beyond 90 days if required to do so by applicable law or to resolve an open dispute or legal claim.

7. Your Rights and Choices

7.1 Access and Correction

You have the right to access the personal information we hold about you and to request corrections to inaccurate or incomplete data. You can update most account information directly through your account settings. For additional requests, contact us at contact@sportsballsquares.com.

7.2 Account Deletion

You may delete your account at any time through your account settings. Upon deletion, your personal data will be retained for 90 days and then permanently deleted as described in Section 6.3.

7.3 Marketing Communications

If you have opted in to receive marketing emails from Sports Ball Squares, you may withdraw that consent at any time by:

• Clicking the unsubscribe link in any marketing email
• Updating your communication preferences in your account settings
• Contacting us at contact@sportsballsquares.com

Withdrawing marketing consent will not affect transactional communications related to your account and active Games.

7.4 SMS Communications

If you have opted in to receive SMS notifications, you may opt out at any time by:

• Replying STOP to any SMS message from Sports Ball Squares
• Updating your notification preferences in your account settings

Standard message and data rates may apply. Message frequency varies based on game activity.

7.5 Data Portability

You may request a copy of your personal data in a portable format by contacting us at contact@sportsballsquares.com. We will respond to such requests within 30 days.

8. Canadian Users — PIPEDA

For Users in Canada, we comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws.

8.1 Consent

We collect, use, and disclose your personal information only with your knowledge and consent, except where permitted or required by law. Where we rely on implied consent (for example, using your email to send transactional notifications related to your account), we will always provide you with an opportunity to withdraw consent.

For marketing communications, we rely on express consent only. You will be asked to explicitly opt in at signup and can withdraw consent at any time as described in Section 7.3.

8.2 Your Rights Under PIPEDA

As a Canadian resident, you have the right to:

• Be informed of what personal information we hold about you
• Access your personal information
• Request corrections to inaccurate personal information
• Withdraw consent for non-essential data processing
• File a complaint with the Office of the Privacy Commissioner of Canada at www.priv.gc.ca

8.3 Accountability

Sports Ball Squares is accountable for all personal information under its control. For privacy-related inquiries or complaints, contact us at contact@sportsballsquares.com. We will respond within 30 days.

8.4 Cross-Border Data Transfers

Your personal information is stored and processed in the United States. By using the Platform, Canadian Users acknowledge and consent to the transfer of their personal information to the United States, where privacy laws may differ from those in Canada.

9. Marketing Emails and Anti-Spam Compliance

9.1 CAN-SPAM (United States)

For US Users, our marketing emails comply with the CAN-SPAM Act. Every marketing email we send will:

• Clearly identify Sports Ball Squares as the sender
• Include a valid physical mailing address or P.O. Box
• Include a clear and functional unsubscribe mechanism
• Honor unsubscribe requests promptly

9.2 CASL (Canada)

For Canadian Users, we comply with Canada's Anti-Spam Legislation (CASL). We will only send commercial electronic messages to Canadian Users who have provided express consent. Every marketing message will include:

• Clear identification of Sports Ball Squares as the sender
• Contact information including our email address
• A working unsubscribe mechanism that is honored within 10 business days

10. Children's Privacy — COPPA

Sports Ball Squares is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. We use date of birth at signup to screen for our minimum age requirement of 18.

If you are a parent or guardian and believe your child under 13 has provided personal information to Sports Ball Squares, please contact us immediately at contact@sportsballsquares.com. We will take prompt steps to delete such information from our systems.

We comply with the Children's Online Privacy Protection Act (COPPA). If we discover that we have collected personal information from a child under 13 without verifiable parental consent, we will delete that information as quickly as possible.

11. Third-Party Links and Services

The Platform may contain links to third-party websites or services. This Privacy Policy does not apply to those third-party sites. We encourage you to review the privacy policies of any third-party services you access through or in connection with the Platform. Sports Ball Squares is not responsible for the privacy practices of any third party.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify registered Users via email and update the "Last Updated" date at the top of this document. Your continued use of the Platform after any changes constitutes your acceptance of the updated Privacy Policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Sports Ball Squares contact@sportsballsquares.com

For Canadian privacy inquiries, you may also contact the Office of the Privacy Commissioner of Canada: 30 Victoria Street Gatineau, Quebec K1A 1H3 www.priv.gc.ca 1-800-282-1376

This document is a first draft prepared for review purposes. Sports Ball Squares strongly recommends that this Privacy Policy be reviewed and approved by a licensed attorney with experience in internet law, privacy law, and the specific requirements of PIPEDA and CASL before publication.