Privacy Policy | BBallRankings.com

BBallRankings.com is intended for users located in the United States. Our content covers United States youth basketball tournaments, and our services are directed to a United States audience.
We do not target, market to, or intend to offer our services to individuals located in the European Union, European Economic Area, or United Kingdom. The site is not directed at users in those regions.
If you access the site from outside the United States, you do so on your own initiative and are responsible for compliance with your local laws. Your information will be processed in the United States, where our hosting and infrastructure are located.

Account information from Google Sign-In, including your name, email address, profile picture, and a stable Google account identifier, which we use to create and authenticate your account. We receive this from Google when you choose to sign in; we do not receive your Google password.
Subscription and payment information processed by our payment provider, Stripe, including your subscription tier, status, renewal dates, and a Stripe customer identifier. Payment card details are collected and stored by Stripe — we do not receive or store your full card number.
Authentication information, including a first-party, signed session cookie used to keep you signed in.
Cookie preference information, including the choices you make in the site's cookie consent controls.
Technical and usage information that may be processed in the ordinary course of operating the service, such as IP address, browser type, device information, request URLs, timestamps, and related server or platform log data.
Operational sports-data records used to provide the service, such as tournament names, schedule URLs, sponsors, team names, club names, scores, rankings, and related game metadata.

To provide rankings, predictions, tournament results, authentication, administration, security, debugging, and core site functionality.
To maintain and improve data quality, troubleshoot issues, detect misuse, and protect the service.
To comply with legal obligations and enforce our terms, policies, and access controls.

Legitimate interests, such as operating, securing, and improving the service and maintaining data accuracy.
Performance of a contract or pre-contractual steps where processing is required to provide requested access or functionality.
Compliance with legal obligations where applicable.
Consent where required by law, including for any optional cookies or similar technologies that may be enabled in the future.

Identifiers, such as online identifiers, IP addresses, and cookie identifiers.
Internet or network activity information, such as browsing or interaction data collected through standard site operations or infrastructure logs.
Professional or commercial information is not intentionally collected through the current public site experience, except to the extent tournament or sponsor data may be associated with organizations.

The site currently uses an essential authentication cookie for sign-in and a consent preference cookie for storing privacy choices.
We use Google Analytics (Google tag) for analytics and advertising measurement. Optional Functional, Analytics, and Advertising categories are presented in the consent banner and default to off. We use Google Consent Mode v2 so analytics and advertising cookies are not set until you consent.
We honor the Global Privacy Control (GPC) signal as a valid opt-out of the sale/sharing of personal information; when present, analytics and advertising cookies remain disabled.
See the Cookie Policy for additional detail.

Information may be processed by service providers or contractors that support hosting, infrastructure, security, logging, database operations, or related technical services.
Information may also be disclosed when required by law, to protect rights or safety, or in connection with a business transfer, reorganization, or similar transaction.
Key service providers (sub-processors) we use:
- Google LLC — authentication via Google Sign-In, and site analytics and advertising measurement (Google Analytics / Google tag, when you consent). See Google's Privacy Policy.
- Stripe, Inc. — subscription billing and payment processing. Card data is handled directly by Stripe under its Privacy Policy.
- Microsoft Azure — application hosting and database infrastructure (United States region).
We do not sell your personal information for money. However, when you enable the Advertising (or Analytics) category, the use of Google advertising features may constitute a "sale" or "share" of personal information for cross-context behavioral advertising under California law (CCPA/CPRA).
Do Not Sell or Share My Personal Information: You can opt out at any time using the Do Not Sell or Share My Personal Information link, by rejecting the Analytics and Advertising categories in the consent banner, or by enabling the Global Privacy Control (GPC) signal in your browser — all of which we honor.

We retain information for as long as reasonably necessary to operate the service, maintain security, resolve disputes, comply with legal obligations, and enforce agreements.
Specific retention schedules for logs, authentication records, backups, and operational data should be defined internally and reviewed with counsel.

Depending on your location, you may have rights to request access, correction, deletion, portability, restriction, objection, or withdrawal of consent.
California residents have rights to know, delete, correct, and opt out of the sale or sharing of personal information. To opt out, use the "Do Not Sell or Share My Personal Information" control in the "Sharing and disclosures" section above, or enable the Global Privacy Control (GPC) signal in your browser; we treat both as valid opt-out requests.
Deleting your account: to request deletion of your account and the personal data associated with it, sign in and use the Request Account Deletion page. That page lists exactly what is deleted, what we must retain (billing records, security logs, backups) and for how long. We confirm and complete deletion within 30 days. You can also submit a request through our Contact Us page.

Information may be processed in the United States or other countries where service providers operate.
We use reasonable administrative, technical, and organizational safeguards, but no method of transmission or storage is completely secure.

We may update this Privacy Policy by posting the revised version on this page and updating the effective date.