Privacy Policy

Ball Knowers is a fantasy-football trivia and dynasty-tools site. We collect the minimum we need to run leaderboards, link your Sleeper league, and keep your token wallet attached to your account. We don’t sell your data and we don’t run third-party ad networks.

Anonymous visitors. When you first load the site we set a long-lived cookie (bk_voter) with a random session ID. That ID is how we track your token balance, your votes, and your activity in casino-style games while you’re signed out.

Signed-in users.If you sign in with Google we receive your email address, your name, and your Google avatar URL from Google’s OAuth response. We store these on your profile so the leaderboard can show your name and picture. You can change your display name at any time from the account menu.

Sleeper link.If you connect a Sleeper username, we call Sleeper’s public API to fetch your leagues and rosters so the trade calculator and league-aware tools work. We don’t store your Sleeper password — Sleeper’s public API doesn’t use one.

Gameplay activity. Votes, chat messages, casino game results (wagers/payouts), and token transactions are stored against your session ID (and your user ID once signed in) so we can render leaderboards, the live feed, and your wallet history.

Operational data. We hash the originating IP address of each vote (SHA-256 with a private server-side salt) so we can rate-limit abuse without storing raw IPs.

• Run the leaderboards, live feed, and biggest-wins surfaces.
• Keep your token balance and game state attached to you across sessions and devices.
• Power Sleeper-aware features like the trade calculator.
• Rate-limit abuse and investigate spam or cheating.
• Send transactional emails if you ever ask us to (e.g. wallet recovery by email).

We use a small set of service providers to operate the site:

• Supabase — authentication and database (Postgres + storage). All user accounts and gameplay data live here.
• Google— Sign in with Google (OAuth). Google sees that you’re using Ball Knowers; we receive only the profile fields you consent to.
• Sleeper — public API calls only, made from our server when you link a Sleeper username.
• Vercel — application hosting and CDN.
• Upstash Redis — short- lived rate-limit counters keyed by hashed IP.
• Ably — realtime broadcast for live chat and the live feed.

We do not sell your data. We don’t use third-party advertising trackers.

We use only first-party cookies that the site needs to function:

• bk_voter — your anonymous session ID. Six-month expiry.
• sb-* — Supabase authentication cookies once you sign in.

All tokens used in Ball Knowers are virtual and have no monetary value. We do not accept payment to buy tokens and tokens cannot be cashed out. The casino-style games are skill-and-luck entertainment using virtual currency only.

• You can sign out at any time from the account menu, which clears your authentication and voter cookies.
• You can change your display name and avatar URL from the settings modal.
• Email ballknowers.fun@gmail.com to request deletion of your account and associated gameplay records. We’ll confirm and complete deletion within 30 days.

Ball Knowers is not directed at children under 13 and we do not knowingly collect data from them. If you believe a child has given us their information, contact us and we’ll delete it.

We’ll update this page if we materially change what we collect or how we use it. The “last updated” date at the top reflects the most recent revision.

Questions or requests: ballknowers.fun@gmail.com.