Privacy policy

Who controls your data

442ball is operated by the company shown below, which is the data controller responsible for your personal data. It decides what data is collected and why, and it is accountable for keeping it safe and handling it as this policy describes. For any privacy question, or to exercise a right, you can reach us at the contact address shown.

We do not sell your data

We never sell your personal data. We never share it with advertisers or any other third party for their own purposes. There are no advertising SDKs, no tracking pixels, and no data brokers receiving anything about you.

This is not only a promise, it is how 442ball is built. Your data flows inward: it comes to us to run the service and to personalize your experience, and it does not flow back out. The only companies that ever handle it are the infrastructure providers that host and run the site on our behalf, listed later in this policy, and they may use it only to operate 442ball.

What we collect

We collect only what we need to run 442ball for you, and no more. The categories are:

Account data: your email address and the authentication details needed to sign you in and keep your account secure.

Profile data you choose to give: optional information such as demographic details or the interests you set. This is entirely optional, and 442ball works without it.

Activity data: what you read and how you engage with the site, including the affinity signals we use to personalize what you see. This is generated as you use the service.

Technical data: the strictly necessary cookies that keep you logged in and remember your language, and the basic technical information needed to deliver the site securely.

We do not collect more than this, and we do not track you across other websites or apps. 442ball has no presence on pages that are not ours.

How we use your data

We use your personal data for a small set of clearly defined purposes, and we rely on a lawful basis for each one.

To run your account and provide the service: signing you in, keeping your session secure, and delivering the content and features you signed up for. We do this to provide the service you have requested.

To provide and improve the personalized service: using your on-site activity to shape what you see, which is a core and disclosed function of 442ball. You remain in control of it, and you can adjust or reset your interests and personalization at any time from your profile.

To act on optional information you choose to give: where you provide optional profile details, we use them with your consent, which you can withdraw at any time.

To meet our legal obligations: where the law requires us to keep certain records, we process the minimum data needed to comply.

Cookies

442ball uses strictly necessary cookies only. There are two: one that keeps you logged in for the length of your session, and one that remembers the language you are reading in. Both are essential to deliver the site you asked for.

Because we use no analytics, advertising or other non-essential cookies, no cookie-consent banner is legally required at launch, and you will not see one asking you to accept tracking that does not exist.

If we ever introduce any cookie or technology that is not strictly necessary, including analytics, a consent mechanism will ship with it, and nothing non-essential will run until you have agreed to it.

Who we share data with

To run 442ball we rely on a small number of infrastructure providers, which process data only on our behalf and only to operate the service. They are:

Supabase, which provides our database and authentication.

Vercel, which hosts and serves the website.

Hostinger, which provides supporting server infrastructure.

An operational alerting service that we use to monitor the health and reliability of 442ball.

Each of these is a processor acting under our instructions and its own security obligations, handling data solely to keep 442ball running. This is fundamentally different from selling or sharing your data. We never disclose your personal data to anyone for their own purposes.

Your rights

You have strong rights over your personal data, and 442ball is built so you can exercise most of them yourself, at once, without asking anyone.

If you are in the European Union or the United Kingdom, under the GDPR and the UK GDPR you have the right to access your data, to have it corrected, to have it erased, to restrict or object to how we process it, to receive it in a portable form, and to withdraw any consent you have given.

If you are in India, under the Digital Personal Data Protection Act 2023 (the DPDP Act) you have the right to access your data, to have it corrected and erased, to grievance redressal, and to nominate another person to exercise your rights in the event of your death or incapacity. You can raise any grievance about how we handle your data by writing to us at the contact address in this policy, which serves as our grievance contact.

If you are in California or another US state with a privacy law such as the CCPA and CPRA, you have the right to know what we collect, to have it deleted, to have it corrected, and to opt out of the sale or sharing of your personal data. Because 442ball does not sell or share personal data, there is nothing to opt out of. You also have the right not to be treated differently for exercising any of these rights.

You do not need to email us to use most of these rights. From your profile area you can view your data, export it, and delete your account yourself. Export is delivered as a downloadable archive, well within any legal deadline and in practice within hours. Deletion runs after a short, cancellable grace period, which protects you if someone gains access to your account and tries to delete it maliciously; after that period, your account and personal data are removed.

If you would rather contact us, or if you want to exercise a right that is not self-service, write to us at the address in this policy and we will act within the time the law allows.

How long we keep your data

We keep your personal data for as long as your account is active. When you delete your account, your account and personal data are removed after the grace period described above.

A few things are handled specifically. Comments you have posted are anonymized rather than deleted, so that public discussions other readers took part in stay intact; once anonymized, they are no longer linked to you. Aggregate, non-identifying signals that contain no reference to you may be retained, because they say nothing about any individual. Where the law requires us to keep a minimal record, we keep only what is necessary to comply.

Deletion takes effect immediately in the live service, and then propagates through our backups over the normal backup cycle rather than instantly, after which no copy of your personal data remains.

International data transfers

442ball is operated by a company registered in India and is read around the world, including in the European Union, the United Kingdom and the United States. Your data is processed on the systems of the infrastructure providers named above, which may be located in more than one country.

Where your personal data is transferred across borders, we rely on appropriate safeguards as required by applicable law to keep it protected to the standard this policy describes.

How we protect your data

We protect your data with encryption in transit, strict access controls, and a database that enforces its own access rules, so that data cannot be read by any person or any part of the system that is not entitled to it. We practise data minimization, collecting and keeping as little as possible, so that even a worst case exposes very little.

We maintain a defined incident-response process. If a data breach affecting your personal data occurs, we will notify affected users and the relevant authorities as required by applicable law.

Changes and how to reach us

We may update this policy as 442ball evolves or as the law changes. When we do, we post the new version here and update the date below. If a change is material, we will give clearer notice than a quiet edit.

For any privacy question, or to exercise a right, contact us at the address in this policy. You also have the right to complain to your data protection authority: your local supervisory authority in the European Union or the United Kingdom, or the Data Protection Board of India.