Privacy Policy – CueRanks

Effective: May 11, 2026 · Last reviewed: May 11, 2026

CueRanks provides a ranked pool platform delivered through mobile apps (CueRanks for players, CueRanks for venues, and the CueRanks admin tools) and through the website at cueranks.com (collectively, the “Services“). This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have.

By using the Services you agree to the practices described here. If you don’t agree, please don’t use the Services.

1. Information we collect

1.1 Information you give us

Account information: name, email address, phone number, password (stored as a one-way hash — we never see your plaintext password), date of birth or age confirmation, and the role you sign up under (player, venue staff, or admin).
Profile information: avatar photo, home state, preferred games (8-ball, 9-ball, 10-ball, one-pocket), language preference, and any bio details you choose to add.
Match activity: match invitations you send or accept, opponents, venues, scheduled times, game type, scores you report, reward points earned, side-bet stakes, forfeits, and disputes.
Payment information: when you save a card on file for match fees, the actual card number is collected and stored by our payment processor (Stripe). CueRanks only stores a token, the last four digits, and the card brand. We never see, store, or transmit your full card number ourselves.
Communications: messages you send to other players, to venue staff, or to CueRanks support, plus the contents of any contact form on cueranks.com.
Social handles: if you link your Instagram, Facebook, TikTok, X, or YouTube handles to your profile, those handles appear on your public profile so other players can stay in touch outside the app.

1.2 Information we collect automatically

Location data: with your permission, the player app collects approximate and precise location coordinates so we can show nearby players + local venues and compute distance-based filters. You can revoke location access at any time in your device settings; the app falls back to the home state on your profile when location is off.
Presence data: a “last active at” timestamp updates while you’re using the app so other players can see when someone was last online.
Device and log data: IP address, device model, operating system + version, app version, language, time zone, and basic diagnostic info (crash logs, error events). We collect this to keep the Services working and to investigate bugs.
Cookies and similar technologies: the website uses a small number of first- party cookies for session management, plus localStorage in your browser to remember form drafts and consent choices. We do not use third-party advertising cookies and we do not run ad pixels on cueranks.com.

1.3 Information from third parties

Social sign-in providers: if you sign up with Google, Facebook, or Apple, we receive your name, email address, and profile photo from the provider per the permissions you grant. We don’t post anything back to those providers.
Payment processors: Stripe tells us whether a transaction succeeded, the last four digits + brand of the card you used, and any dispute information. CueRanks doesn’t store credit or debit card information on our servers — every payment is processed directly through Stripe, which handles all card data on their PCI-compliant infrastructure. We only see that a charge succeeded; the card number itself never touches CueRanks.

2. How we use information

We use the information we collect to:

Create and manage your account.
Match players with opponents and route them to local venues.
Compute rankings, win rates, ratings, and reward-point balances.
Verify match check-ins at venues via the 6-digit code system.
Process the per-match fee, reward redemptions, and venue reimbursements.
Deliver push notifications and email confirmations (only when you’ve opted in).
Investigate disputes, prevent fraud, and enforce our terms of service.
Improve the Services — fix bugs, measure feature usage, refine recommendations.
Comply with legal obligations and respond to lawful requests from public authorities.

We do not sell your personal information. We do not rent it, share it with data brokers, or use it to target you with ads on other platforms. The Services are ad-free.

3. How we share information

Other players: a limited public profile (display name, avatar, home state, win/loss record, rank, recent matches) is visible to other CueRanks players so they can find and challenge you. Your email, phone number, payment methods, and precise location are never shown to other players.
Local venues: when you check in to a match at a venue, the venue’s staff app sees the names and avatars of the players involved and the match details. Staff do not see your card details, your full email, or matches you’ve played at other venues.
Service providers: we share information with the third-party companies that help us run the Services — see Section 4 for the full list and what each one handles.
Legal, safety, and compliance: we may disclose information to comply with applicable laws, respond to valid legal process (subpoenas, court orders), enforce our terms, prevent fraud, or protect the rights, safety, and property of CueRanks, our users, and the public.
Business transfers: if CueRanks is involved in a merger, acquisition, financing, reorganization, or sale of assets, information about you may be transferred to the acquiring entity. We’ll notify you (via email or an in-app notice) before any such transfer becomes effective.

4. Service providers and tooling

We rely on a small set of vendors to run the Services. Each vendor only gets the data they need to do their job, and each is contractually bound to handle it consistently with this policy.

Supabase (database + storage hosting). Stores account, profile, match, and venue data, plus uploaded images.
Stripe (payment processing). Handles card details for the per-match fee and venue payouts. Stripe maintains its own privacy policy.
Resend (transactional email). Sends sign-up confirmations, match notifications, reward-redemption receipts, and password-reset emails.
Google, Apple, Meta (Facebook) (social sign-in providers). Verify your identity when you sign in with their accounts.
Expo / Apple App Store / Google Play (mobile app distribution and push notifications). Deliver app updates and push messages to your device.

5. How long we keep information

Active account data (name, email, profile, rankings, match history) is retained for as long as your account is open.
Chat messages are automatically deleted 24 hours after they’re sent.
Push and in-app notifications are automatically deleted 3 days after they’re sent.
Cancelled match records and expired match invitations are cleaned up on a rolling basis so the database doesn’t accumulate dead rows.
Invoices, payment receipts, and venue reimbursement records are retained for at least seven (7) years to satisfy tax and accounting obligations.
Deleted accounts: when you request account deletion, we remove your profile, match history, messages, and saved payment tokens within 30 days. Anonymized aggregate data (totals, averages used to compute rankings) may be retained, and we may keep records we’re legally required to keep (e.g. tax records of completed transactions).

6. Your choices and rights

You have the following rights with respect to your information. To exercise any of them, email support@cueranks.com from the address on your account, or use the in-app settings where indicated.

Access: request a copy of the personal information we have about you.
Correct: update your profile (name, avatar, home state, language, preferences) directly in the app, or email us to correct anything you can’t edit yourself.
Delete: request deletion of your account and associated personal data. We’ll process the request within 30 days. Some records may be retained as described in Section 5.
Export: request a machine-readable copy of your data.
Opt out of marketing: any non-transactional email we send includes an unsubscribe link. Transactional emails (sign-up confirmations, match notifications, payment receipts) are required for the Services to work and can’t be opted out of while your account is active.
Revoke location access: change permission in your device settings. The app continues to work, but distance-based features fall back to your home state.
Turn off push notifications: change permission in your device settings, or toggle notification categories in the app’s Profile → Notifications screen.

7. California, EEA, and UK residents

California (CCPA / CPRA)

If you’re a California resident, you have the right to know what categories of personal information we collect, where it came from, and the business purpose for collecting it; the right to request access, correction, and deletion; and the right to opt out of any “sale” or “sharing” of your personal information. CueRanks does not sell or share personal information for cross-context behavioral advertising. To exercise any CCPA right, email support@cueranks.com.

EEA, UK, and Switzerland (GDPR / UK GDPR)

If you’re in the European Economic Area, United Kingdom, or Switzerland, our legal bases for processing your information are:

Contract: to provide the Services you signed up for.
Legitimate interests: to improve the Services, prevent fraud, and keep our infrastructure secure.
Consent: for optional features like location access and marketing email, which you can withdraw at any time.
Legal obligation: for tax, accounting, and lawful disclosure requirements.

You have the right to access, rectify, erase, restrict, and port your information, plus the right to object to processing and to lodge a complaint with your local supervisory authority. To exercise these rights, email support@cueranks.com.

8. Children’s privacy

The Services are not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. Some local venues serve alcohol and are restricted to patrons 21+; the in-app age requirements at sign-up reflect each region’s applicable minimums. If you believe a child under 13 has provided us with personal information, email support@cueranks.com and we will delete it.

9. Security

We use industry-standard measures to protect your information — encryption of data in transit (HTTPS / TLS), encryption of card data at rest by our payment processors, hashed passwords (we never see your password in plaintext), role-based database access, and regular security review. No method of transmission or storage is 100% secure, however, and we can’t guarantee absolute security. If we ever become aware of a breach affecting your information, we’ll notify you as required by applicable law.

10. Third-party links

The Services may include links to third-party websites or services (a venue’s website, map providers, social sign-in flows, payment processors). Those services are governed by their own privacy policies — CueRanks is not responsible for their practices.

11. Changes to this policy

We may update this Privacy Policy from time to time. If we make a material change, we’ll notify you via email (to the address on your account) or an in-app notice before the change takes effect. The “Effective” date at the top of this page always reflects the current version. We encourage you to review this policy periodically.

12. Contact us

Questions, requests, or complaints about this policy or our handling of your information? Reach the CueRanks support team at:

Support: support@cueranks.com