Daddy Ball

Privacy Policy

Effective November 8, 2026. What we collect, why, who can see it, and how to delete it.

Who we are

Daddy Ball (daddyball.app) helps youth baseball coaches track which position each player plays in every inning. It's run by Will Green. Questions or requests about your data go to info@daddyball.app.

What we collect

Your account: your email address and display name, and how you sign in: a securely hashed password, a linked Google account, or both. If you turn on two-factor authentication, we store an encrypted authenticator key and hashed recovery codes. We record when you last signed in, and we keep display preferences you choose in the app.
Teams and players: Team Admins enter team details (name, season, age division, city, league, and color), player names and jersey numbers, game schedules, scores, attendance, batting orders, and positions played. We don't collect players' photos, birthdates, or contact details.
Memberships: which teams you belong to and your role on each, invitations sent to your email, requests you make to join a team (including any note or player names you add, and whether you used a team's invite link), and which players you're linked to.
Technical data: your IP address is used to limit repeated sign-in attempts, and our hosting provider keeps standard server logs. We record which account made each change to team data, so Team Admins can see the history.

Google sign-in

If you choose to sign in with Google, we ask Google only for the basic openid, email, and profile permissions. From Google we receive your Google account ID, your email address, whether Google has verified it, and your name. We never receive your Google password, and we don't access your contacts, Gmail, Drive, calendar, or any other Google data.

We use this information only to create your Daddy Ball account, sign you in, and show your name to the teams you join. We don't sell it, use it for advertising, or use it to train AI or machine-learning models, and we share it only as described below. Daddy Ball's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.

You can unlink Google in Account settings at any time, which deletes the stored Google account ID. You can also remove Daddy Ball's access from your Google account permissions.

How we use information

We use your information only to run Daddy Ball: to sign you in and keep your account secure, to show teams their schedules, rosters, lineups, and statistics, and to send the email described below. We don't sell personal information, show ads, or track you across other sites.

Who can see it

Anyone signed in can find a team by its name, season, age division, city, league, and color. Team search shows nothing else.
Followers, once approved, can see the team's schedule, roster, and game lineups.
Team Members and Team Admins can also see season statistics and who belongs to the team, including members' names, email addresses, and linked players.
Team Admins also see join requests and invitations. A Team Admin can invite you without your email address if you belong to another team where they can see the member list; the invitation appears on your dashboard.
Site administrators can manage accounts and moderate teams to keep the service running and safe.

Service providers

We use a few companies to run Daddy Ball. They process data only on our behalf:

Microsoft Azure hosts the app and its database.
Resend delivers our email.
Google provides Google sign-in, if you use it.
Telerik (Progress) and Cloudflare (cdnjs) serve some of the scripts and styles the pages load, so they see your IP address and browser details when your browser downloads those files.

We may also disclose information if the law requires it, or to protect the safety of our users or the service.

Email

We send email only about your account (confirmation, password resets, security notices, and account deletion) and for team invitations. We don't send marketing email.

Cookies

We use only the cookies needed to run the site: one that keeps you signed in, a short-lived one during two-factor sign-in, temporary ones during Google sign-in, and ones that protect forms from forgery. We don't use analytics or advertising cookies.

How long we keep it, and deleting it

We keep your account information for as long as you have an account. You can delete your account yourself from Account settings → Delete account, or by emailing info@daddyball.app. Deleting your account permanently removes your email, name, sign-in details, team memberships, player links, join requests, and invitations sent to you, and replaces your email with "Deleted user" in team history. If you're a team's only Team Admin, make someone else a Team Admin or delete the team first.

Teams, players, games, and lineups belong to the team, so they stay after a member leaves. A Team Admin can remove a player or delete the team, and deleted teams and players are hidden from everyone. Copies in backups and server logs are removed as those age out.

Children

Daddy Ball is meant for coaches, parents, and other adults. Players' names and jersey numbers are entered by Team Admins, and we don't collect any other information about players. A parent can ask the Team Admin, or email us, to remove their child's name.

Security

All traffic uses HTTPS. Passwords and recovery codes are stored only as secure hashes, authenticator keys are encrypted, and every change to a password, two-factor, or a linked Google account signs out your other sessions. No system is perfectly secure, but we work to protect your information.

Your choices

You can change your name, password, two-factor, and linked Google account in Account settings, leave any team at any time, and delete your account. To ask what we hold about you, email info@daddyball.app.

Changes

If we change this policy, we'll update the date at the top. If a change materially affects how we use your information, we'll tell you by email or in the app before it takes effect.