Privacy Policy

Last updated: draft — not yet legally reviewed.

What we collect

• Email address and username you sign up with
• Your password, stored as a one-way bcrypt hash — never in plain text, and never visible to us either
• If you sign in with Google or Facebook instead: the email and name they share with us, and nothing else from your Google/Facebook account
• Comments, votes, player ratings, and team follows you create
• Your IP address, briefly, only to enforce rate limits (e.g. blocking rapid-fire signups) — not stored long-term or used to track you
• Basic product-usage analytics — which pages you visit and which actions you take (signing up, following a team, voting, commenting, creating or voting on a poll), via PostHog. This is tied to your account only once you're signed in; browsing anonymously generates anonymous usage data, not a profile tied to your identity

What we don't do (yet)

No ad network is integrated yet — ads are a planned future feature and this policy will be updated with what that involves before it ships. We don't sell your data.

Where it's stored

In a PostgreSQL database hosted by Neon, encrypted in transit and at rest per Neon's own infrastructure. The app itself runs on Vercel. Rate-limit counters live briefly in Upstash Redis. None of these providers can read your password — only its bcrypt hash is ever stored, by design.

Third parties involved

• Neon — database hosting
• Vercel — app hosting
• Upstash — rate-limit counters (sees your IP briefly)
• PostHog — product analytics (page visits and the actions listed above)
• Google / Facebook — only if you choose to sign in with them; they share basic profile info with us per their own privacy policies
• X (Twitter) / Reddit — we pull public posts from these to build news threads; we don't send them any of your data

Your choices

You can delete your own comments and polls at any time from Profile. To delete your account entirely — which removes your account and personal data — go to Profile → Account → Delete account, or email us at yuxi.jack.wang@gmail.com and we'll do it for you. To request an export of your data, email that same address.

Children

Ballhouse isn't directed at children under 13, and we don't knowingly collect data from them.

Changes

This policy may be updated as the product changes. Material changes will be reflected here with an updated date.