Pretty Serious Baseball — Privacy Policy

Effective date: 2026-09-02 Operator: EasyLinkAI (a sole proprietorship operated by Seungyoun Song) (an individual developer, "we", "us") Contact: admin@easylinkai.online Applies to: the Pretty Serious Baseball mobile game (Android package com.prettyseriousbaseball.game) and its online service at api.prettyseriousbaseball.com (together, the "Game").

This policy explains what information the Game collects, why, who receives it, how long we keep it, and what choices you have. It is written to match what the Game's software actually does; if we change the software, we will update this policy and the effective date.

1. Summary

We run our own game server. The Game does not contain advertising, analytics, attribution or crash-reporting SDKs from third parties.
To play you need an account. You can register with an email address and password, or sign in with Google (and Apple, where available).
Purchases are made through Google Play. We never see your payment card or billing details.
We keep the data needed to run your account, your club, your matches, chat, and your purchase ledger. We do not sell or rent personal data and we do not use it for advertising.
You can request deletion of your account by email. See section 9.

2. Information we collect

2.1 Information you give us

Data	When	Why
Email address and password	Email registration or password sign-in	Create and secure your account, verify your email, reset your password. The password is stored only as an Argon2id hash; we cannot read it.
Game ID	Registration	Your permanent sign-in name and greeting name.
Google or Apple account identifier and the email address the provider shares (if you choose provider sign-in)	Provider sign-in or linking	Sign you in without a password; recover the account. We verify the provider's token on our server and store the provider's subject ID, the email it reports and whether that email is verified.
Nickname, name colour, club name	Setting up or editing your profile	Shown to other players in chat, profiles, rankings, clans and the market. The first nickname and the first change are free; later changes cost 500 Blue Diamonds.
Chat messages, direct messages, clan chat, reports of other players' messages, block lists	Using social features	Deliver the messages, moderate abuse, let you block and report.

2.2 Information created while you play

Data	Why
Game state: club, roster and cards, lineups, equipment, wallet balances and Blue Diamond ledger, scout results and pity counters, match results and replays, competition and ranked standings, clan membership, story progress, missions, attendance, referral bindings, VIP level, sanctions	Run the game and keep your progress; enforce the rules and fairness of the shared economy.
Gameplay event log (which actions your account performed and when, e.g. scouts, market listings, enhancements, sanctions)	Operate the game, detect abuse and exploits, investigate support requests, produce aggregate product metrics. This log is first-party; it is not shared with advertisers.
Purchase records: Google order ID, product ID, quantity of Blue Diamonds granted, purchase time, verification hash	Grant what you bought, prevent duplicate grants, handle disputes and refunds, keep required financial records.

2.3 Information collected automatically

Data	Details
Installation identifier	The Game generates a random ID the first time it runs and stores it on your device. It is sent with sign-in requests so that a sign-in session belongs to that installation. Our server stores only a one-way hash of it. It is not your advertising ID, Android ID or hardware serial, and it resets if you clear the Game's data.
Device model name	Sent with sign-in requests and stored with the session so you can recognise where you are signed in.
Language / locale	Used to show content in your language.
IP address and connection metadata	Our HTTPS gateway (Caddy) writes a standard access log containing the connecting IP address, request path, user agent and status. These logs are kept for at most 30 days and are used only for security, abuse investigation and troubleshooting. Our DNS and edge proxy provider (Cloudflare) also processes connection metadata to deliver traffic. The game application itself does not record your IP address.

We do not collect: precise or approximate location, contacts, photos, microphone or camera data, advertising ID, phone number, name, postal address, date of birth, government identifiers, payment card or bank details, or crash reports.

3. How we use information

To provide the Game: accounts, saved progress, online matches, rankings, clans, chat, and purchases.
To secure accounts: session tokens bound to your installation, email verification, password recovery, sign-out and session revocation.
To keep the Game fair: server-side verification of purchases and random results, anti-abuse guardrails, chat moderation, and sanctions (temporary suspension or ban) for violations of the Terms of Service.
To support you: investigating problems you report.
To understand the product in aggregate: first-party metrics computed from gameplay events. We do not build advertising profiles.
To comply with law: tax and accounting records for purchases, responses to lawful requests.

We do not use automated decision-making that produces legal or similarly significant effects about you. Sanctions are issued by a human operator.

4. Who receives information

We share personal data only with the service providers below, only as needed for the stated purpose, and we do not sell it.

Recipient	Purpose	Data
Google Play (Google LLC)	Payment processing and purchase verification. Google is the merchant for in-app purchases.	Purchase token, order ID, product ID, and an opaque account identifier that ties the purchase to your game account. Google's own privacy policy applies to your Google account and payment.
Google Sign-In / Apple Sign In	Optional identity providers	Your provider account's token; we receive the subject ID, email and verification flag.
Resend (Resend, Inc.)	Sending transactional emails on our behalf	Your email address, your game ID, and a one-time verification or password-reset link. We send only these two kinds of email; no newsletters.
OVHcloud	Hosting our servers and database	All server-side data at rest.
Cloudflare, Inc.	DNS and edge proxy in front of our API	Connection metadata such as IP address and TLS session data.

Other players see your nickname, name colour, club name, rank/VIP badges, public profile, market listings and the messages you post in shared channels.

We may disclose information when required by law, to enforce our Terms, or to protect the rights, property or safety of players, ourselves or others.

5. International transfers

Our servers are hosted by OVHcloud [hosting region: UNVERIFIED — fill in]. Google, Apple, Resend and Cloudflare may process data in other countries, including the United States. Where required, transfers rely on the providers' standard contractual clauses or equivalent safeguards.

6. How long we keep information

Data	Retention
Account (email, hashed password, game ID, provider links)	Until you delete your account (section 9), plus up to 30 days to complete deletion and backups.
Sign-in sessions	Each session expires 30 days after issue; sessions are revoked immediately on sign-out or password reset.
Email verification and password reset links	24 hours and 30 minutes respectively; one-time use.
Game state and gameplay event log	Life of the account; deleted or de-identified with the account.
Chat messages and direct messages	Retained while the account exists or until removed by moderation; deleted or de-identified with the account, except for the minimum records we must keep for legal, security or fraud-prevention purposes.
Purchase records	Kept as long as required by tax, accounting and consumer-protection law after account deletion, then deleted.
Gateway access logs (IP address)	Up to 30 days.
Backups	Encrypted backups are rotated on a fixed schedule; deleted data leaves backups as they expire.

7. Security

All traffic between the Game and our servers uses HTTPS; plain HTTP is refused.
Passwords are hashed with Argon2id. Refresh tokens are stored on your device encrypted with the Android Keystore and only if you leave auto sign-in on.
Sign-in sessions are bound to your installation; reuse of an old token revokes the session.
Purchases and random results (scouts, equipment options, enhancement) are decided and verified on the server.
Chat is filtered server-side to block links, phone numbers, personal-information requests and abusive language.

No system is perfectly secure. If we learn of a breach affecting your personal data we will notify you and the relevant authority as the law requires.

8. Children

The Game is not directed at children under 13 and we do not knowingly collect personal data from children under 13. The Game does not ask for your age. If you believe a child under 13 has created an account, contact admin@easylinkai.online and we will delete it. Where local law sets a higher age of digital consent (for example 14 in the Republic of Korea, 16 in parts of the EU), the same applies to that age.

9. Your rights and choices

Depending on where you live you may have the right to access, correct, export, restrict or delete your personal data, to object to certain processing, and to lodge a complaint with a supervisory authority. To exercise any right, email admin@easylinkai.online from the address on the account (or include your game ID and public manager ID). We will verify the request and respond within 30 days.

Access / correction: your email, game ID and nickname are visible in the Game. Nickname can be changed in-game.
Sign out: the Sign out button ends the current session. Resetting your password ends all sessions.
Auto sign-in: can be turned off on the title screen; the stored token is then removed from the device.
Blocking and reporting: available in chat.
Account deletion: see account-deletion.md (published at [ACCOUNT DELETION URL]). Deletion is completed within 30 days and is irreversible; purchased Blue Diamonds and items are forfeited.
Withdrawing provider sign-in: you can also revoke the Game's access from your Google or Apple account settings.

We do not sell personal data and do not process it for targeted advertising, so there is no "opt out of sale/sharing" to exercise.

10. Changes

We will post changes here and update the effective date. Material changes will be announced in the Game's notice board before they take effect.

11. Contact

EasyLinkAI (a sole proprietorship operated by Seungyoun Song) admin@easylinkai.online [POSTAL ADDRESS — optional]