Your passport stays yours.

This Privacy Policy explains how Ballpark Passport (“Ballpark Passport,” “we,” “us,” or “our”) handles information when you use the Ballpark Passport iOS application, the Ballpark Passport Companion Chrome extension, this website, and related support services.

We use information to operate your account, sync your passport, provide community features, improve the experience, and keep the service safe. We do not sell your personal information.

Depending on the features you use, we may process:

• Account information: email address, authentication identifiers, and information provided through Sign in with Apple.
• Profile information: username, display name, avatar, favorite team, biography, and communication preferences.
• Passport and game information: stadium visits, games, dates, ratings, seat details, notes, photos, saved stadiums, checklists, and the statistics derived from them.
• Community content: reviews, report details, friend connections, blocks, and other content you choose to submit.
• Location information: a home location you choose to save and your approximate or precise location when you ask the app to find a nearby stadium. Ballpark Passport does not continuously track your location in the background.
• Usage and diagnostics: app lifecycle events, screen views and navigation, elements you tap, feature interactions, device and operating-system information, and technical network telemetry such as request timing, status, and errors through PostHog when analytics are enabled. Before sign-in, analytics uses a random device identifier. After sign-in, events may be linked to your account identifier and include your username, display name, favorite team, profile-completeness signals, account age, and aggregate passport, game, and wishlist counts.
• Masked session replay: when analytics are enabled, PostHog may create a wireframe-style replay of app layouts and interactions so we can understand usability problems. Text inputs, images, ticket content, and embedded or sandboxed content are masked. The replay is not a raw screenshot or screen recording and does not include network response bodies.
• Support information: your name, email address, request category, subject, message, and related correspondence when you contact support.

The Chrome extension runs only after you click its toolbar icon. It temporarily reads the active page's URL, title, metadata, headings, and visible text on your device to identify a ballpark. This page information is not stored, transmitted to Ballpark Passport, or shared with third parties.

If you mark a ballpark as visited or as a place you want to visit, the extension stores that status and any optional visit date locally in Chrome. Ballpark Passport cannot access this locally stored extension data. You can remove it by changing your selections, clearing the extension's storage, or uninstalling the extension.

The extension does not use analytics, advertising, background browsing monitoring, remote code, or an account. Links to the Ballpark Passport website open only when you choose them. Ballpark Passport Companion's use of information received from Chrome APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.

We use information to:

• create, authenticate, and maintain your account;
• sync your passport and calculate personal baseball statistics;
• show stadium, schedule, social, and game-day information;
• publish the profile fields and reviews you choose to share;
• respond to support and data-rights requests;
• detect abuse, investigate reports, and enforce our terms;
• understand feature usage and improve reliability; and
• comply with legal obligations and protect users and the service.

Community features may display your username, display name, avatar, favorite team, biography, and reviews to other users. Reviews can include ratings, text, tags, photos, and visit dates that you submit.

Your underlying passport records are account data. They are not made public unless you deliberately use a sharing or social feature that presents them to others. You can remove your own reviews and use reporting or blocking tools for unwanted interactions.

We share information only as needed to operate the service, comply with law, protect safety, or complete a transaction you request. Providers currently include:

• Supabase for authentication, database, storage, and server functions;
• PostHog for product analytics when enabled;
• Apple for App Store distribution, Sign in with Apple, and operating-system services; and
• Cloudflare for delivery and security of this website.

These providers process information under their own terms and privacy commitments. We may also disclose information when reasonably necessary to comply with a valid legal request or protect the rights, safety, and integrity of Ballpark Passport and its users.

We retain account information while your account is active and for as long as reasonably necessary to provide the service, resolve disputes, maintain security, and meet legal obligations. Support and moderation records may be retained after related content is removed when needed for safety, auditing, or legal compliance.

You can delete your account from the app. Account deletion removes or de-identifies associated information according to our operational and legal requirements. Content already shared outside the service, such as an image another person saved, cannot always be recalled.

The app lets you update certain profile information, remove content, disable analytics—including interaction capture, technical telemetry, and masked session replay—in Ballpark Passport Settings, control location permission in iOS Settings, and delete your account. Turning analytics off does not remove core passport, schedule, or community features. You may also ask to access, correct, delete, or receive information about the personal data we hold where applicable law provides those rights.

Submit privacy and account requests through our Support page. We may need to verify your identity before completing a request.

We use technical and organizational safeguards designed to protect information, including encrypted network connections, authenticated access, and database access controls. No service can guarantee absolute security, so please use a unique password and protect access to your device and account.

Our providers may process information in countries other than the one where you live. Where required, we rely on recognized safeguards for international transfers.

Ballpark Passport is not intended to knowingly collect personal information from children without any consent required by applicable law. If you believe a child has provided personal information improperly, contact us through the Support page so we can review and address it.

We may update this policy as Ballpark Passport evolves. We will post the revised version here and change the “Last updated” date. Material changes may also be communicated in the app when appropriate.

Questions, concerns, or privacy requests can be submitted through the Ballpark Passport Support page.