1. What we collect
Account data
- Email address — for sign-in and account recovery.
- Display name + bowling profile — handedness, style, average, rev rate, ball speed. Optional but required for personalized recommendations.
App content (created by you)
- Your arsenal of bowling balls, including layouts, surface notes, and photos.
- Game logs, frame-by-frame scoring data, and session notes.
- Tournament + league entries you create or import.
- Personal pattern notes.
Technical data
- Cookies + local storage — for sign-in sessions, theme preference, and the autosave draft of in-progress game series.
- Error reports — when the app crashes, we collect the error message, stack trace, and route via Sentry. We do NOT log full URL paths that contain personal identifiers.
- Usage analytics — pageview counts and feature usage, aggregated by route. We do NOT use third-party advertising trackers.
2. How we use it
- To provide the app's core functions (your arsenal, your stats, recommendations).
- To send email you've opted into (weekly digest, account alerts).
- To debug crashes and improve performance.
- To prevent abuse (rate limiting, fraud checks).
3. What we share
We do not sell your data. We share it only as follows:
- Service providers we use to operate the app: Supabase (database + auth), Vercel (hosting), Resend (transactional email), Sentry (error monitoring), Upstash (rate limit storage). Each is contractually bound to use the data only to provide service to us.
- Public bowler card — if you enable “Share my card publicly” in your profile, anyone with the URL can see the limited stats shown on that page. You can revoke at any time.
- Affiliate links — when you click an affiliate buy button (where present), the destination retailer may set their own cookie for commission attribution. We don't share your account data with retailers.
- Legal compliance — if required by law or a valid legal process.
4. Your choices
- Access + export — email us and we'll send your data in JSON.
- Correction — edit your profile and content directly in the app.
- Deletion — delete your account from Profile → Account. This removes your profile, arsenal, games, achievements, and public card. Backups are retained for 30 days then permanently destroyed.
- Email preferences — toggle the weekly digest off in Profile.
- Cookies — block non-essential cookies in your browser. Required cookies (sign-in session) cannot be disabled while signed in.
5. Data retention
Active account data is retained as long as your account exists. Deleted accounts are purged from production within 7 days and from backups within 30 days. Aggregated, non-personal analytics may be retained indefinitely.
6. Security
We use industry-standard practices including TLS encryption in transit, encryption at rest, scoped row-level security on every table, and time-limited authentication tokens. No system is perfectly secure — if you suspect a vulnerability, please email privacy@bowlbrain.com.
7. Children
The BallRoom is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe we have, contact us and we'll delete it.
8. International users
Our servers are located in the United States. If you use the app from outside the US, your data is transferred to and processed in the US under standard data-protection terms with our service providers.
9. Changes to this policy
We'll update the “Effective” date above when we make material changes. Significant changes (e.g. new data sharing categories) will be announced by email.
10. Contact
Questions or requests: privacy@bowlbrain.com