Privacy Policy
Last updated
Rank-Em is a free-to-play sports pick'em game. You call winners, you say how sure you are, and a ladder keeps score. This page explains what we collect to run that, who processes it on our behalf, and how to get rid of it.
There is no money in or out of the game itself, no odds, and no payouts. We do not sell your personal information, we do not share it with advertisers, and we run no third-party ad networks or cross-app tracking.
What we collect
Account information
When you sign up we receive your email address and an account identifier from our authentication provider. If you sign in with Google, Apple or another provider, we receive whatever that provider returns for a basic profile: typically your email address, and sometimes a display name or profile picture. We store your chosen handle and, if you have one, an avatar image URL.
We do not ask for, and do not want, your real name, date of birth, postal address or phone number.
Gameplay information
This is the product, so we keep it while your account exists:
- Your picks, and the conviction you staked on each one.
- Your LP ledger, season standings, tier, Dynasty rating and any badges you have earned.
- The sports and leagues you follow, the private leagues you belong to, and any head-to-head challenges you send or accept.
- Your settings: notification preferences, display preferences, and the push tokens for devices you have allowed to notify you.
Some of this is public by design. Your handle, avatar, tier, LP and season standings appear on public ladders and on your profile page, which are readable without an account and are indexed by search engines. Your individual picks are visible to other players only where the game says so, which means after a game locks, and inside the leagues and head-to-head duels you have joined.
Purchases
If you buy something, we store what you bought, when, the amount, the store it came through (Apple, Google or web) and that store's transaction identifier, plus, for a subscription, its plan and status. We never see or store your card number. Payment is handled entirely by Apple, Google or our billing processor.
Technical information
Our analytics and error tools receive ordinary technical detail about the device you play on: app version, operating system version, device model, browser, language and approximate region derived from your IP address. We do not collect precise location, your contacts, your photos, your health data, or advertising identifiers such as the IDFA.
Who processes it
We use a small number of processors. Each one is contractually limited to processing data on our instructions.
| Processor | What it receives | Why |
|---|---|---|
| Clerk | Email address, authentication identifiers, anything an OAuth provider returns at sign-up, and subscription status | Signing you in and keeping you signed in; billing |
| Convex | Everything above under Account and Gameplay. This is where the game lives | Running the game and storing your account |
| PostHog | Product events and crash reports with stack traces tied to your account identifier, technical information, and on the web session replay | Understanding product use and fixing bugs and crashes |
| Apple, Google | Purchase and subscription records; push delivery | App distribution, payments and notifications |
| Cloudflare | On this website only: page timings and web vitals, with no cookie and no identifier | Keeping the site fast |
Two notes worth being specific about. Our error reporting is configured not to attach IP addresses, cookies or request bodies to a report. The account identifier is the only thing about you that travels with a crash. And on the web, session replay records how you move through the interface, together with your browser's console messages and the timing of the requests the page makes. What you type into a field is masked, and signing in happens on Clerk's own pages, which replay never sees. It is not enabled in the iOS or Android app.
Our processors are based in the United States, and your information is stored and processed there.
Why we collect it
- To run the game. You cannot have a ladder without picks, a score, and an account to attach them to.
- To keep it fair. Locked picks and the LP ledger are kept so results stay auditable.
- To reach you. Notifications you have turned on, and occasional service messages about your account.
- To improve it. Aggregate usage patterns, and crash reports.
Where the GDPR applies, our legal bases are performance of a contract for the first three, and legitimate interests for product analytics and crash reporting.
How to delete your data
Open Settings in the app and choose Delete account. No email, no waiting on us. When you confirm:
- Your email address, avatar, authentication identifiers, settings and push tokens are erased.
- Your handle is replaced with an anonymous placeholder.
- The sports and leagues you follow are deleted, any pick you had not yet locked in is voided, and any pending head-to-head challenge expires.
- You are removed from every ladder, so you no longer occupy a rank or appear on a leaderboard.
- Picks in a season still being played that had already been graded are kept, detached from you, so that season's results stay correct for everyone else. They can no longer be traced back to you.
Your sign-in record goes too. Shortly after you confirm, we delete the account held by our authentication provider, and with it your email address and anything an OAuth provider gave us at sign-up. You do not have to ask for that separately. If you have reason to think something survived, email privacy@rank-ems.com and we will check.
You can turn off analytics collection at the operating-system level using your device's tracking and privacy settings, and you can turn off notifications at any time in Settings.
How long we keep it
While your account exists, and then as described above once you delete it. Crash reports and product analytics events are retained by our processors on their own rolling schedules, generally no longer than a year. Purchase records are kept as long as tax and accounting rules require.
Your rights
Depending on where you live, you may have the right to access, correct, export, or delete your personal information, to object to or restrict certain processing, and to complain to your data protection authority. Deletion is available in the app, immediately, to everyone. For anything else, email privacy@rank-ems.com and we will respond within 30 days.
California residents: we have not sold or shared personal information in the preceding twelve months, and we do not knowingly do so.
Children
Rank-Em is not intended for children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has created an account, email privacy@rank-ems.com and we will delete it.
Security
Traffic is encrypted in transit, data is encrypted at rest by our processors, and we hold no payment credentials of yours to lose. No system is perfect; if we ever discover a breach affecting your information we will tell you and the relevant authorities as the law requires.
Changes
If we change this policy we will update the date at the top, and for a material change we will tell you in the app before it takes effect.
Contact
Questions, requests, or anything that reads wrong here: privacy@rank-ems.com.
See also our Terms of Use .