Privacy Policy

Effective March 2, 2026

Wallop is a fantasy baseball game built for small groups of friends. This policy describes what data we collect, why, and what we do with it. The short version: we collect the minimum needed to run the game, we don't sell your data, and we don't use third-party trackers.

What we collect

Account information

Your email address, used for passwordless login (magic links) and game notifications. If you set a display name, timezone, or location in your profile, we store those too.

Game data

League membership, team rosters, draft picks, and scoring history. This is the core data that makes the game work.

Usage data

Anonymous page views and basic interaction events (e.g., "draft pick made," "roster move completed"). These help us understand which parts of the app are used and where problems occur. We do not track individual browsing behavior across sites. Usage data is retained for 90 days, then deleted automatically.

Payment information

League payments are processed by Stripe. We do not see or store your card number. We receive confirmation of payment status from Stripe (paid/unpaid) and a Stripe customer ID for your league.

What we don't collect

No third-party analytics (no Google Analytics, no Meta Pixel)
No advertising trackers or cookies
No location data beyond what you voluntarily add to your profile
No data from other apps or services

How we use your data

Email: Login links and game notifications (HR alerts, draft reminders, weekly recaps). We don't send marketing email.
Game data: Running the game — standings, rosters, scoring.
Usage data: Identifying bugs and understanding feature usage. Not sold, not shared.

Who can see your data

Your display name, team name, and game activity (draft picks, roster moves, standings) are visible to other members of your league. Your email address is not shared with other users.

Data retention

Account and game data are retained as long as your account is active. Usage data (telemetry) is automatically deleted after 90 days. If you want your account and data deleted, email privacy@wallop.app and we'll remove it within 30 days.

Cookies

We use a single httpOnly session cookie to keep you logged in. It expires 30 days after your last visit. We don't use cookies for tracking or advertising.

Third-party services

Stripe — payment processing (their privacy policy)
Resend — email delivery (their privacy policy)
Railway — hosting infrastructure (their privacy policy)

Children

Wallop is not intended for children under 13. We do not knowingly collect data from children.

Changes

If this policy changes meaningfully, we'll note the update date above. We won't reduce your rights without notice.

Contact

Questions about this policy: privacy@wallop.app

Applied Might LLC