Privacy Policy

The short version

• We collect what's needed to run a league: your name, email, leagues you belong to, and the matches you play in.
• We don't sell your data. We don't run ads. We don't track you across other apps or websites.
• You can delete your account and all your data at any time — email ludicstudiohq@gmail.com.

What we collect

Account information

When you sign in with Apple or Google, we receive your name and email address from the provider. We use these to identify you in the app and to contact you about your account.

• If you sign in with Apple and choose "Hide My Email," we get the relay address Apple gives us. That's fine — we'll use it.
• We don't get a password from you, ever. Apple and Google handle authentication.

League and match data

When you create or join a league, we store:

• The league's name, sport/game, and settings.
• Which players are in it, and who the admins are.
• Every match submitted to the league — who played, who won, when it was submitted, and who approved it.
• Each player's TrueSkill rating (μ and σ) as it changes over time.

This data is visible to other members of the same league. League admins can remove members and approve or reject matches.

Feedback you send

If you tap "Send feedback" in the app, the message is sent to our internal Slack along with your name, email, user ID, app version, and the league ID you were viewing. We use it to fix bugs and improve the app. We don't share it with anyone else.

Diagnostic logs

Our server logs basic request information (timestamp, route, response code) so we can debug failures. Logs are retained for a short period (typically 7–30 days) and then discarded.

Crash and error reports

The mobile app uses Sentry to capture crashes, unhandled errors, and performance traces so we can fix problems we'd otherwise never hear about. When the app crashes or hits an error, Sentry receives the stack trace, the device model, the OS and app version, the IP address the report came from, and (where available) the user ID associated with the session. We use this only to debug. We don't use Sentry for product analytics, feature tracking, or advertising.

Website analytics

The marketing website at zeebra.app uses Vercel Web Analytics to count page views and approximate device/region. It does not set cookies and does not track you across other sites. The mobile app itself doesn't use Vercel Analytics.

What we don't collect

• No advertising identifiers, IDFA, or cross-app tracking.
• No location data (beyond the coarse country/region Vercel and Sentry derive from your IP).
• No contacts, photos, microphone, or camera access.
• No third-party product-analytics SDK in the mobile app — no Mixpanel, Amplitude, Firebase Analytics, Segment, or similar.

How we use it

• To run the app. Show you your leagues, compute ratings, list standings, send you in-app notifications about matches that need your attention.
• To keep it working. Diagnose bugs, recover from crashes, and respond to feedback you send us.
• To contact you about your account. If we need to reach you about something account-related (rare — like a deletion request), we'll use the email you signed up with.

We don't use your data for advertising, profiling, or to train machine learning models.

Who we share it with

We share data with a small number of infrastructure providers who run the systems Zeebra is built on. They process data on our behalf and are not allowed to use it for their own purposes.

• Supabase — authentication and database hosting. Your account, profile, leagues, and matches are stored here.
• Railway — hosts our API server. Server logs are retained here briefly.
• Apple and Google — for Sign in with Apple / Sign in with Google. They authenticate you and tell us your name + email.
• Slack — receives the feedback messages you choose to send. Only the people on the Zeebra team can read them.
• Sentry — receives crash reports, error traces, and performance traces from the mobile app, including your IP address and user ID.
• Vercel — hosts this marketing website (zeebra.app) and provides cookieless web analytics for it.

We don't sell your data. We don't share it with advertisers or data brokers. If a law enforcement agency makes a valid request, we'll respond as required by law and tell you about it where we're allowed to.

How long we keep it

• Account data — until you delete your account.
• Leagues and matches — for as long as the league exists. If a league is deleted, the matches go with it.
• Server logs — typically 7–30 days, then discarded.
• Feedback messages — kept in our Slack workspace's standard retention.

Your rights

You can:

• See your data. Most of it is visible inside the app. Email us if you want a full export.
• Correct it. Update your display name in the app. Email us for anything else.
• Delete it. Email ludicstudiohq@gmail.com from the address tied to your account and we'll delete your profile, your match history, and any leagues where you're the only admin. We aim to do this within 30 days.

If you're in the EU/UK, you also have the right to object to processing or to lodge a complaint with your local data protection authority. We'd rather hear from you first — most things are easier to fix that way.

Children

Zeebra is not directed at children under 13 (or under 16 in jurisdictions that set the bar there). If we learn we've collected data from a child, we'll delete it.

International transfers

Our servers and Supabase database are hosted in the United States. If you're using Zeebra from somewhere else, your data is being processed in the US. We rely on standard contractual clauses where required.

Changes to this policy

If we make a material change, we'll update the "last updated" date at the top of this page. For significant changes, we'll also let you know in the app.

Contact

Questions, deletion requests, or anything else: ludicstudiohq@gmail.com.