Privacy Policy

Who we are

BOBA Leagues is operated by Radish Dijital Technologies LLC ("we" or "us"). This policy explains what we collect when you use the site, who can see it, and which services receive it.

What we collect

• Account details: your email address and the display name you choose. If you sign in with Google, your sign-in session also holds your Google name and profile picture.
• League activity: your registrations, team names, the decks you register, match results, and ratings.
• Contact info, when a league requires it, and a prize shipping address, when a league collects one.
• Payments. Stripe Checkout collects your card details. We do not store full card numbers.
• Saved decks.
• Card scan photos, which we store in private storage.
• Survey responses. If you are signed in when you respond, we store your email and name with your answers.
• Commissioner applications: your name, email, shop, location, and experience.
• Your answer to the optional marketing box on the league join page.

How we use it

We use your information to sign you in, run leagues, calculate ratings, process payments and refunds, and look up card details and prices.

We email you about your account and your leagues. These emails include sign-in links, registration confirmations, notices that a match is ready, league invites, final standings when a league is completed, survey invitations, and notices about commissioner applications and co-commissioner roles.

Who can see your information

Anyone can see your display name, ratings, match and league counts, and the date you joined. Profiles and rankings do not show your email address.

Someone who knows your email address, or the part before the @, can use it to find your public profile. The result does not show your email.

Anyone with a league's link can see its player names, team names, registration status, deck DBS totals, join and drop dates, and each match's winner, score, and status.

Private leagues are omitted from the browse list and the public league feed. Anyone with the link can open the page and see the details above.

In an online league that requires contact info, anyone who is signed in and views the league page can see every player's contact info.

A league's commissioners, co-commissioners, and judges, and our site admins, can see each player's email address, contact info, registered decks, and prize shipping address for that league.

When a league that collects prize shipping addresses is completed, we email those addresses to the league's commissioners.

Decks you register for a league are shown to you and to the people listed above, not to other players.

Saved decks are private unless you make them public. A public deck shows your display name and its record, not your email. You can delete a saved deck at any time.

Services that receive your information

• Google, when you sign in with Google.
• Stripe, which processes payments.
• Mailgun, which sends our email.
• Supabase, which hosts our database.
• Radish, our card data partner. Price lookup sends card details to Radish and stores nothing. Photo lookup and scan corrections send the photo and the signed-in email.
• Google Tag Manager, which loads on every page.

Cookies

We use sign-in cookies to keep you signed in. The session cookie holds your email address and, if you sign in with Google, your name and profile picture.

Every page also loads Google Tag Manager, which can load other tags that set their own cookies.

You can block or delete cookies in your browser settings. Without the session cookie, you cannot stay signed in.

How long we keep it

We keep account and league data while the account is active, and afterward as long as needed for league records, payment records, and legal obligations.

Emailed sign-in links are deleted once used. Prize shipping addresses are not deleted when a league ends.

Your choices

There is no in-app way to delete your account or export your data. To ask about your information, use the contact form.

You can delete your saved decks at any time.

The marketing box on the league join page is optional and starts unchecked. Nothing sends mail from that flag, and there is no setting to change it.

Children

BOBA Leagues is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have, we delete the account and the data. Profiles, rankings, and match results are public, so a minor should use a display name that does not reveal their identity. To tell us, use the contact form.

Changes to this policy

We may update these terms or this policy by posting the new version and updating the effective date on the page. Continued use after the update means you accept the changes.

Contact

Questions about this policy can go to Radish Dijital Technologies LLC through the contact form.