Privacy Policy

Who we are

Ballseye is the “controller” of your personal data under UK GDPR. Contact us at info@balls-eye.com.

What we collect, and why

We collect your email address to create your account, sign you in (a one-time link, or via Google) and contact you about your account. It is never shown to other players. If you use Google we receive your email and whether Google has verified it; we don't store your Google name, photo or access tokens. You choose a nickname for the leaderboards, which you can change any time — please don't use your real name. We keep your guesses and scores (where you clicked, the distance, points and when you played) for results, streaks, the leagues and your account page. Your IP address and browser are held briefly in memory to limit abuse, and appear in our hosting provider's standard server logs for security.

We don't collect your precise location, we don't run advertising, and we don't sell your data or use it for marketing. We use Google Tag Manager to understand how the site is used (for example pages viewed). We only email you to deliver sign-in links and for essential account notices.

What other players can see

Only your nickname and your points appear on the leaderboards. Nobody else can see your email address or your individual guess positions.

Who we share it with

We use service providers to host the site, store puzzle photos and accounts, send sign-in emails, and (if you choose) sign you in with Google. Google Tag Manager measures how the site is used, and Google Gemini processes puzzle photographs only — no player data is sent. They only act on our instructions. Where a provider is outside the UK, we rely on the UK's international transfer safeguards (such as the UK Extension to the EU–US Data Privacy Framework or the standard contractual clauses). We may also disclose data if the law requires it.

How long we keep it

We keep your account and scores until you delete your account. Sign-in links expire after 15 minutes and are deleted once used. Deleting your account removes your email, nickname and all scores from our database straight away. Backups held by our database provider are overwritten on its normal schedule.

Your rights

Under UK GDPR you have the right to:

• Access and portability: download everything we hold on your account page (“Download my data”).
• Rectification: change your nickname on your account page, or ask us to correct anything else.
• Erasure: delete your account yourself on your account page, any time.
• Object or restrict our processing, in the circumstances the law allows.

To exercise any right, or if you have questions, email info@balls-eye.com. We'll reply within one month.

Children

Ballseye is for people aged 13 and over. We don't knowingly collect data from younger children. If you think a child under 13 has an account, contact us and we'll delete it.

Security

Connections are encrypted (HTTPS). Sign-in uses one-time links or Google, so we never see or store a password. Our database is access-controlled. No system is perfectly secure, but we take reasonable steps to protect your data.

Cookies

We use essential cookies to keep you signed in, and Google Tag Manager which may set cookies to measure site use. See our Cookie Policy.

Complaints

If you're unhappy with how we handle your data, please tell us first so we can put it right. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk, 0303 123 1113).

Changes

We may update this policy. The date at the top shows the latest version, and for significant changes we'll tell you in the app.