Privacy Policy

Effective August 11, 2026

Wallop is a fantasy baseball game built for small groups of friends. This policy describes what data we collect, why, and what we do with it. The short version: we collect the minimum needed to run the game and know how people found us, we don't sell your data, and we don't use third-party trackers.

What changed in this version

Updated August 11, 2026, when we started recording how people find us. One thing is new, and one thing we should have described better all along:

• New: a second cookie that records how you found us — an ad, a link, a search — so we can tell which of those is worth continuing. It's first-party, expires in 30 days, and is never shared with an advertising platform.
• Corrected: the previous version said we send no marketing email. That understated it — we already send occasional come-back-and-play reminders about your own league, and always have. The email section below now says so plainly.

Nothing was removed, and nothing you could do before is now restricted. We still use no third-party analytics, still don't follow you to other sites, and still don't sell or share your data.

What we collect

Account information

Your email address, used for passwordless login (magic links) and game notifications. If you set a display name, timezone, or location in your profile, we store those too.

Game data

League membership, team rosters, draft picks, and scoring history. This is the core data that makes the game work.

Usage data

Page views and basic interaction events (e.g., "draft pick made," "roster move completed"). These help us understand which parts of the app are used and where problems occur. We do not track individual browsing behavior across sites. Usage data is retained for 90 days, then deleted automatically.

When you create an account, we attach how you found us to it — the ad, link, or search that brought you here. That's how we tell whether an ad actually brought anyone in. It stays with us. If another site sent you here, we record which site — never the query string it sent you with.

Payment information

League payments are processed by Stripe. We do not see or store your card number. We receive confirmation of payment status from Stripe (paid/unpaid) and a Stripe customer ID for your league.

What we don't collect

• No third-party analytics (no Google Analytics, no Meta Pixel)
• No third-party advertising trackers, and nothing that follows you to other sites
• No location data beyond what you voluntarily add to your profile
• No data from other apps or services

How we use your data

• Email: Login links and game notifications (HR alerts, draft reminders, weekly recaps). We may also email you about your own league when you've been away — the season started without you, your league is waiting. Every one of those has a one-click unsubscribe. We don't send product or marketing email today; if that ever changes, we'll ask you to opt in first, and we won't start sending it just because you didn't object.
• Game data: Running the game — standings, rosters, scoring.
• Usage data: Identifying bugs and understanding feature usage. Not sold, not shared.

Who can see your data

Your display name, team name, and game activity (draft picks, roster moves, standings) are visible to other members of your league. Your email address is not shared with other users.

Data retention

Account and game data are retained as long as your account is active. Usage data (telemetry) is automatically deleted after 90 days. If you want your account and data deleted, email privacy@wallop.app and we'll remove it within 30 days.

Cookies

We use two first-party cookies, both httpOnly. One keeps you logged in and expires 30 days after you log in. The other records how you found us — an ad, a link, a search — so we can tell which of those was worth doing. It expires after 30 days and is never shared with an advertising platform. Neither can see what you do on other sites.

Third-party services

• Stripe — payment processing (their privacy policy)
• Resend — email delivery (their privacy policy)
• Railway — hosting infrastructure (their privacy policy)

Children

Wallop is not intended for children under 13. We do not knowingly collect data from children.

Changes

If this policy changes meaningfully, we'll note the update date above and summarize what moved. We won't reduce your rights without notice. Want the version this replaced? Email privacy@wallop.app and we'll send it.

Contact

Questions about this policy: privacy@wallop.app

See also: Terms of Service · Official Rulebook

Applied Might LLC