Privacy policy
This policy explains what KnowBall collects when you join the pre-launch waitlist at knowball.us, why we collect it, the legal basis for doing so, and how to exercise your rights. The waitlist is the only thing live today; there is no game account, no payments, and no public posting yet.
Who we are
KnowBall is operated by CXC Studio LLC ("KnowBall," "we," "us"). For anything in this policy, reach us at support@knowball.us. For people in the EU and UK, we act as the data controller for the information described below.
What we collect
When you join the waitlist we store only what the signup needs:
- Email address, to confirm your spot, send you a sign-in or check-in code, and notify you at launch.
- Username (handle), your public name on the Founder leaderboard.
- Display name, optional, if you provide one.
- Invite code, generated for you to share.
- Referral relationship: if you arrived through someone's invite link, we record who referred you and a count of people you've referred, to rank the leaderboard.
- Signup date and a source tag (e.g. "landing") describing where the signup came from.
- Google account identifier, name, and email, only if you choose "Continue with Google" (see below).
We also generate a one-time verification code so you can confirm signup and check back in from a new device. We store only a SHA-256 hash of that code, never the code itself, and clear it once used. Your IP address is used transiently for rate-limiting and the anti-abuse challenge; it is not stored alongside your waitlist record.
Why we collect it, and our legal basis
Under the GDPR, each purpose has a legal basis:
- Operate the waitlist: confirm your spot, send sign-in or check-in codes, and email you once when KnowBall launches. Basis: your consent, given when you submit the form (withdrawable at any time).
- Leaderboard and Founder status: compute your rank and standing. Basis: consent or legitimate interest in running the pre-launch program you asked to join.
- Referral attribution: credit the people who shared. Basis: legitimate interest.
- Security and anti-abuse: rate-limiting and bot challenges. Basis: legitimate interest in protecting the service.
Continue with Google
If you sign up with Google, we receive your basic Google profile (email and name) and a unique account identifier, which we use solely to create and verify your waitlist entry and to contact you at launch. KnowBall's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google data for advertising and do not share it with third parties except as described here.
Cookies and analytics
This site sets no advertising or tracking cookies. We use Cloudflare Turnstile to block automated signups; when a challenge runs it may set short-lived, strictly-necessary cookies needed to complete that check. We use Plausible Analytics, which is privacy-friendly, cookieless, EU-hosted, and collects no personal data. Because the only cookies are strictly necessary for security, no cookie-consent banner is required, but we describe them here for transparency.
Who we share it with
We do not share your information with anyone for their own purposes. We use a small set of service providers ("processors") that handle data only on our instructions: our cloud hosting and database provider, our email-delivery provider (to send your codes and launch notice), Cloudflare (anti-abuse), Google (only if you use Google sign-in), and Plausible (analytics). Each operates under its own data-processing terms.
We do not sell or share your personal information
We do not sell your personal information, and we do not "share" it for cross-context behavioral advertising, as those terms are defined under the California Consumer Privacy Act (CCPA/CPRA). Recording a referral relationship you opted into is not a sale.
Where your data is processed
KnowBall is operated from the United States, so if you contact us or sign up from outside the US your information will be processed in the US. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for international transfers. Plausible processes analytics data in the EU.
How long we keep it
We keep your waitlist record until KnowBall launches and for a reasonable period afterward to honor Founder status and rewards, or until you ask us to delete it, whichever comes first. Transient data such as IP addresses and expired verification codes is discarded automatically.
Your rights
Depending on where you live, you have the right to access, correct, delete, or receive a copy of your data; to object to or restrict certain processing; to withdraw consent; and to opt out of any sale or sharing (we do neither). Exercising these rights will never result in discriminatory treatment. Email support@knowball.us and we'll respond within 30 days. EU and UK residents may also complain to their local data-protection authority.
Children
The KnowBall waitlist is not directed to children under 13 (or under 16 in the EU and UK), and we do not knowingly collect their information. If you believe a child signed up, email support@knowball.us and we'll remove it.
Changes
We'll update this policy as the product grows, for example when the game itself launches and adds accounts, gameplay data, or purchases. The "last updated" date above reflects the most recent change.