Privacy Policy
Last updated: October 13, 2026
Table of Contents
Overview
At BallerField ("we," "our," or "us"), we are committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, website, and mobile application (collectively, the "Service").
By using BallerField, you agree to the collection and use of information in accordance with this policy. We will not use or share your information with anyone except as described in this Privacy Policy.
Quick Summary: We collect information to provide and improve our sports community platform. We never sell your personal data and only share what's necessary to deliver our services.
Information We Collect
Personal Information You Provide
- Account Information: Display name, email address, profile photo, the language you choose, your notification preferences, the version of the Terms you accepted and when, and your confirmation of being 18 or older
- Sign-in with Google or Apple: If you sign in with Google, Google confirms your identity and gives our sign-in provider your name, email address and profile picture address. If you use Sign in with Apple in the iPhone app, Apple gives us your email address, which can be a private relay address that forwards to you. We use the name and the email for your account; we do not use the picture
- Profile Details: Skill level, preferred positions, self-assessed skill ratings, bio, and the attendance and goals that game hosts record
- Communication Data: Messages sent through our platform (game chats and direct messages), support inquiries
- Reviews: The host rating, the match rating and the optional comment you leave after a game
- Safety Reports and Blocks: When you report a message, a conversation, a profile or a game, we store the reason, the details you add, a copy of the reported content as it was at that moment and the account it belongs to. When you block someone, we store who you blocked and when. If we suspend an account, we store the date
- Referrals: Your referral code and, when someone signs up with it, the link between the two accounts and the status of the reward
- Host Applications: Additional information for users applying to become hosts
Payment Information
- Payment Data: Processed securely through Stripe (we don't store full card details)
- Transaction History: Records of games joined, waitlist entries, payments made, refunds processed
- Credits & Earnings: Platform credits, host earnings, payout information
Automatically Collected Information
- Technical Data: IP address, browser or app version, device type and operating system, recorded in the short-lived logs of our hosting and database providers. Our sign-in provider also keeps the IP address and the browser or app of each sign-in session, for security, and the contact form sends us your IP address with your message, to fight abuse
- Phone Notifications (mobile app): If you allow notifications in the app, the push token that Expo issues for your phone, a random installation identifier created by the app, the platform (iOS or Android), the app version and the app language, so that we can send notifications to that phone
- Browser Notifications: If you turn on notifications in your browser, the subscription your browser gives us (an address at your browser's push service, its encryption keys and your browser's user agent)
- No Location or Analytics: We do not collect your location, and we use no analytics, advertising or tracking tools on the website or in the app
How We Use Your Information
Core Services
- • Create and manage your account
- • Process game bookings and payments
- • Facilitate communication between players
- • Send game confirmations and updates
- • Provide customer support
Platform Improvement
- • Improve platform features and functionality
- • Develop new services and features
- • Ensure platform security and safety
- • Prevent fraud and abuse
Communications
- • Send service-related notifications
- • Provide important updates and announcements
- • Send notifications to your phone or browser, for the categories you choose (we send no marketing)
- • Respond to your inquiries and support requests
Legal & Safety
- • Comply with legal obligations
- • Enforce our Terms of Service
- • Protect against fraudulent activity
- • Ensure community safety and guidelines
- • Review reports, remove content that breaks our Terms and suspend accounts
- • Refuse messages, review comments, names and bios that contain a term from a short list of severe slurs and explicit threats
Information Sharing and Disclosure
Important: We Never Sell Your Personal Data
BallerField does not sell, rent, or trade your personal information to third parties for marketing purposes.
When We Share Information
With Other Users
Your public profile (display name, photo, bio, role as a player or host, preferred positions, skill level, self-assessed ratings, goals, assists, games played and the date you joined, and for hosts the average ratings from reviews) can be seen by anyone, signed in or not, on the leaderboard and on your player page, and search engines may index it. Players and hosts of your games also see you in the roster and the game chat. Game hosts can see participant information to manage their events. Reviews are anonymous: other people see only averages, and the host reads comments without your name. The person you report or block is not told who reported or blocked them. Someone you blocked who tries to send you a direct message is only told that they cannot message you.
Service Providers
We share information with trusted service providers who help us operate our platform (Stripe for payments, Resend for emails, Supabase for the database and sign-in, hosted on Amazon Web Services in the United States, Vercel for hosting, Cloudinary for images, Cloudflare Turnstile to block bots on the sign-in and contact forms, and Expo to deliver the mobile app's notifications through Apple Push Notification service on iPhone and Google Firebase Cloud Messaging on Android). Each new report is emailed to our support inbox through Resend, with the reported content and the details you add (at most 5 report emails a day per reporter; later reports are still recorded). When you choose to sign in with Google or Apple, they confirm your identity. On the website, the address search of the game and field forms sends what you type to Komoot's Photon service, and game maps load their images from OpenStreetMap and their markers from unpkg.com, which receive your IP address but not your account. Your information may therefore be stored and processed outside Québec and Canada, mainly in the United States and, for Komoot and OpenStreetMap, in Europe; we choose providers that commit to protecting it to a standard comparable to Québec law.
Legal Requirements
We may disclose information when required by law, to protect our rights, or to ensure the safety of our users and the public.
Business Transfers
In the event of a merger, acquisition, or sale of assets, user information may be transferred as part of the business transaction.
Data Security
We implement robust security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Our security practices include:
Technical Safeguards
- • SSL/TLS encryption for data transmission
- • Encrypted data storage with Supabase (PostgreSQL on Amazon Web Services), with row-level access rules
- • Secure payment processing via Stripe
- • Regular security updates and patches
- • Access controls and authentication
Operational Safeguards
- • Limited employee access to personal data
- • Regular security training for staff
- • Incident response procedures
- • Regular security assessments
- • Data backup and recovery systems
Please Note: While we strive to protect your personal information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.
Third-Party Services
BallerField integrates with trusted third-party services to provide you with the best possible experience. These services have their own privacy policies:
Stripe (Payments)
Handles all payment processing securely. Your payment information is processed directly by Stripe and subject to their privacy policy.
View Stripe Privacy Policy →Supabase (Database and Sign-in)
Provides our database and authentication services. Data is stored on Amazon Web Services (United States, region us-east-2) with encryption and row-level access rules. It keeps the IP address and the browser or app of each sign-in session, for security.
View Supabase Privacy Policy →Vercel (Hosting)
Hosts the website and runs its server functions. Vercel keeps short-lived technical logs (IP address, requested pages) to operate and secure the service.
View Vercel Privacy Policy →Resend (Emails)
Sends transactional emails like booking confirmations, invoices, and important platform notifications, and the alert our support inbox receives for each new report.
View Resend Privacy Policy →Cloudinary (Images)
Handles image storage and optimization for profile photos and field images. Images are stored securely in Cloudinary's cloud infrastructure and are deleted when you delete your account.
View Cloudinary Privacy Policy →Expo (App Notifications)
Delivers the mobile app's notifications. Expo receives your phone's push token and each notification's title, text and link, and passes them to Apple or Google for delivery; it does not keep the content after delivery.
View Expo Privacy Policy →Apple (Notifications and Sign-in)
Apple Push Notification service delivers the app's notifications to iPhones. Sign in with Apple, when you choose it in the iPhone app, confirms your identity and gives us your email address or a private relay address.
View Apple Privacy Policy →Google (Notifications and Sign-in)
Firebase Cloud Messaging delivers the app's notifications to Android phones. Google sign-in, when you choose it, confirms your identity and gives our sign-in provider your name, email address and profile picture address. Firebase keeps its own installation identifier for the app on your phone under Google's rules.
View Google Privacy Policy →Cloudflare Turnstile (Bot Protection)
Checks that the sign-in and contact forms are used by a person, from technical signals of your browser such as its IP address and user agent. It sets no advertising cookies.
View Turnstile Privacy Policy →Komoot Photon (Address Search)
Suggests addresses when a host creates a game or adds a field. It receives the text typed in the address field and your IP address, not your account.
View Komoot Privacy Policy →OpenStreetMap (Maps)
Provides the map images on game pages. Its servers receive your IP address and the area shown, not your account.
View OpenStreetMap Privacy Policy →Your Privacy Rights
You have several rights regarding your personal information. Here's what you can do:
Access & Portability
- • View your personal data through your dashboard
- • Request a copy of your information
- • Export your data in a portable format (Settings → Your Data, JSON file)
- • Download your booking and payment history
- • The export includes the people you blocked and the reports you filed; to protect them, we never disclose who reported or blocked you
Control & Correction
- • Update your profile information anytime
- • Correct inaccurate personal data
- • Manage your communication preferences
- • Choose what you put in your public profile (photo, bio, positions, ratings)
Deletion & Restriction
- • Delete your account in the app (Profile, Settings, Account and data), on the website (Dashboard, Account Settings) or by email: your identity is erased right away, your profile picture and field photos are deleted from our image provider, your messages are anonymized and your reviews are deleted
- • Reports you filed are kept without your name, and reports about your account keep the reported content until 1 year after they are resolved (see how account deletion works)
- • Request deletion of specific information
- • Restrict processing of your data
- • Object to certain data processing
Communication
- • Turn off notifications on a phone or in a browser at any time
- • Choose notification preferences
- • Withdraw consent for data processing
- • File complaints with regulatory authorities
Your Rights under Québec Law (Act respecting the protection of personal information in the private sector)
- • Access the personal information we hold about you and have it rectified
- • Withdraw your consent to a use that is not necessary to provide the service
- • Ask that your information stop being circulated, or be de-indexed, where the law allows
- • Receive the information you provided in a structured, commonly used format
- • File a complaint with the Commission d'accès à l'information du Québec
The person in charge of the protection of personal information at BallerField is the owner of BallerField, who can be reached at privacy@ballerfield.ca. We answer within 30 days.
How Long We Keep Your Information
- • Profile, games, messages, reviews, images and preferences: as long as your account exists; deleting the account erases your identity immediately and deletes your reviews and your images (profile picture, field photos)
- • Payment and credit records: 7 years after the transaction, as required by tax and accounting rules. Once the account is deleted, our database removes your name and email from them; the card payments in our account at Stripe, our payment processor, keep the email address and name given at checkout, and the invoices of games you hosted keep your host name (see Stripe's privacy policy)
- • Phone notification data (push token, installation identifier, platform, app version, language): until you sign out on that phone, turn off "Notifications on this phone" in the app or delete your account, or until the notification service tells us the phone no longer receives them
- • Browser notification subscriptions: until you turn notifications off in that browser or delete your account, or until the browser's push service reports the subscription expired
- • Blocks you make: until you remove them or delete your account (a block that someone else made of your account stays with their account)
- • Reports: while they are open, then 1 year after they are resolved, even if an account involved was deleted; copies in our support inbox follow the same rule
- • Sign-in sessions (IP address, browser or app): as long as the session lasts, then for the retention period of our sign-in provider's security logs
- • Technical logs of our hosting and database providers: 30 days or less
How to Exercise Your Rights
To exercise any of these rights, you can:
- • Use the settings in your BallerField dashboard
- • Contact us at privacy@ballerfield.ca
- • Submit a request through our support system
We will respond to your request within 30 days and may require identity verification for security purposes.
Children's Privacy
Age Requirement
BallerField is intended for users who are at least 18 years old. We do not knowingly collect personal information from children under 18 years of age.
If you are under 18, please do not use our platform or provide any personal information. If we discover that we have collected personal information from a child under 18, we will take steps to delete that information as quickly as possible.
Parents and Guardians: If you believe your child has provided personal information to BallerField, please contact us immediately atprivacy@ballerfield.ca
Privacy Policy Updates
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will:
How We Notify You
- • Update the "Last Updated" date at the top of this policy
- • Send email notifications for significant changes
- • Post announcements on our platform
- • Provide prominent notice for material changes
When a change affects your rights, we ask you to accept the new version the next time you sign in. The "Last Updated" date at the top of this page identifies the version in force.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please don't hesitate to contact us:
Privacy-Related Inquiries
For questions about your personal data, privacy rights, or this policy.
General Support
For general questions, technical support, or platform assistance.
Response Time
We typically respond to privacy-related inquiries within 72 hours and will work to resolve your request within 30 days. For urgent privacy concerns, please mark your email as "URGENT - Privacy Request."