Privacy Policy
Effective October 29, 2026
Beaver Ball is a softball game, not a data business. We don't ask for your name, location, contacts or photos, you never need an account to play, and we never sell anything about you or use it for advertising.
- No account needed and no personal data. You never have to type in who you are. Signing in, to play one save everywhere, is optional: with Apple (iPhone apps and website) or Google (Android apps and website) it shares no name or email, and if you choose an email link we keep only a scrambled copy of the address and use it for nothing but sign-in.
- Your save and scores are backed up to our database under a random, anonymous id, from the apps and the website alike, so the Hall of Fame works and your progress is safe. There's no name, email or account behind it.
- The apps have no third-party analytics, no tracking and no tracking prompt. Nothing follows you to other apps or sites. The game keeps a few anonymous counts of its own (games started and finished, home runs, how the tutorial goes), with no id attached. The website counts visits with Vercel Web Analytics, which sets no cookies and keeps no id.
- No ads, in either app or on the website. The game makes its money from optional in-app purchases.
- Beaver Ball is made with kids in mind: purchases and links out of the app sit behind a parental gate.
- Delete everything from inside the game, any time: Settings › Your account › Delete my account.
Who we are
Beaver Ball, Beaver Ball: After Dark, the other Beaver games (Beaver Football, Beaver Basketball, Beaver Soccer, Beaver Ski & Snowboard, Beaver Pickleball and Beaver Math so far, below) and beaverball.app are made by You Found Waldo LLC ("we"). This one policy covers all of the Beaver games. Questions about privacy go to waldo@youfoundwaldo.com.
The apps (iPhone and iPad)
Your save
Your progress (Beaver Bucks, Fan Level, unlocked items, your teams, settings and game stats) is saved on your device. If you sign in to Game Center, a copy is kept in Game Center saved games in your iCloud account, so it follows you to a new device. That copy is stored by Apple; we can't see it. On Android, when the phone's own Google backup is on, Android keeps a copy of the save and the game's settings in your Google account so a reinstall or a new phone gets them back; that copy is stored by Google, and we can't see it. The apps also back up your save to our database under a random id the game makes up, the same way the website does (below), and send your scores to the Hall of Fame.
Game Center
Game Center is optional. When you're signed in, the app reports your achievements and your scores (things like your longest home run or your win streak) to Game Center, and Game Center shows your Game Center nickname on its leaderboards. Apple handles all of this under Apple's Privacy Policy, and you control it in the Settings app under Game Center.
Purchases
In-app purchases are processed by Apple; we never see your payment details. To confirm what you've bought and to restore it on a new device, the app uses RevenueCat, a purchase-management service. RevenueCat receives an anonymous app user id it makes up, your purchase receipts from Apple, and basic device facts (such as the iOS version, the app version and your App Store country). It does not receive your name, email or Apple ID. On Android the same goes for Google Play: Google processes the payment, and RevenueCat receives the anonymous id, your Google Play purchase tokens and the same basic device facts (the Android version, the app version, your Play country), never your name, email or Google account. See RevenueCat's privacy policy.
The Beaver Ball Club and player pages
The Beaver Ball Club is an optional yearly subscription in the apps. Apple processes it like any in-app purchase. So your membership follows your save, the app tells RevenueCat your save's random id (the same one our database uses), never your name, email or Apple ID. Club members can make a player page that other players can open from the Hall of Fame. Before you make one in After Dark, we ask your birth month and year once, use it to work out which kind of page you can have, and keep only that answer (child, teen or adult) and the country your connection comes from, never your birthday. Pages for players under the age of digital consent in their country (13 in the US), and every page in the Beaver Ball app, are built only from our lists, so nothing typed is collected. Teens and adults can add a short About me; it is checked by a filter and read by a person before anyone else sees it, and a teen's page is hidden until she chooses to show it. Anyone can report a page; we keep the reason and the time, not who sent it. "Empty my page" removes your page's content right away.
No ads
Neither app shows ads, and neither contains an advertising SDK. We don't use the advertising identifier (IDFA, or Android's advertising ID, which the Android apps don't even ask for) and never show Apple's tracking prompt.
Optional voice control
Voice control is off until you turn it on in Settings and allow microphone access. Recognition runs on your device; the apps do not fall back to an online recognition service. We do not store or upload your microphone audio or command transcripts. The microphone closes when you turn voice control off, leave the game view or put the app in the background. Devices without on-device recognition keep the touch and keyboard controls. Described play reads game events aloud with the system speech voice.
Nothing else
The apps contain no third-party analytics or crash-reporting tools and no chat. They send our server a few anonymous counts (for example "a game was finished in Beaver Ball, version 1.0", or the tutorial step where it was skipped), with no id, name or device details attached. In the Beaver Ball app your Hall of Fame name is built from word lists, so there's nothing to type; in After Dark you may type one, which is filtered and which kids never see. If you've agreed to share diagnostics with app developers in your device settings, Apple may send us anonymous crash reports, which we use only to fix bugs.
The website
The game at beaverball.app saves your progress in your browser. To keep it safe if your browser's storage is cleared, it also backs the save up to our database under a random id the game makes up (for example 4f9c…), along with a one-way scrambled (hashed) copy of your recovery code. Your recovery code is how you move your save to another browser; we can't read it from what we store.
Signing in (optional)
If you join a league, the league keeps your board name, your results and a snapshot of your team under the save's random id, so its other players see the standings. If you pick a place for the place leagues (a country, and on some versions a state or city you choose), it's kept with your scores; the game never reads your device's location.
In the apps and on the website you can sign in with Apple (Settings › Your account) to play the same save everywhere. We ask Apple for nothing but a sign-in: no name and no email. Apple gives us an anonymous user id, which we keep only as a one-way scrambled (hashed) copy, next to the save's random id and its recovery code, encrypted, so the save can open on your other devices. Unlink it any time from the same place; the link is deleted and your save stays as it is. So that deleting your account can also cancel the sign-in at Apple, we may keep the token Apple issues for it, encrypted the same way.
On the website and in the Android apps you can also sign in with Google. We ask Google for nothing but a sign-in (no name, no email, no profile); Google gives us an anonymous user id, which we keep only as a scrambled copy beside the save, the same way.
Or, on the website and in the Android apps, sign in with an email link. You type your email address, we send one email with a sign-in link and a 6-digit code, and we keep only a one-way scrambled copy of the address so the same address opens the same save next time. We never store the address itself, never send you anything else, and never share it. Email sign-in is only for people over the age of digital consent: the game asks your year of birth once, keeps the answer on your device, and never sends it to us. In the Beaver Ball app on Android the same question comes before Google sign-in. Emails are sent by Resend, our email provider.
On the Beaver Football and Beaver Basketball pages, a grown-up can join a list to hear when those games reach the App Store. The page asks the year of birth first, keeps the answer on your device and never sends it to us; under the age of digital consent the list stays closed. We keep the email address you type and which games you picked, send one email with a link to confirm, and only once you confirm, one email per game when it's out. Nothing else, never shared, and every email has an unsubscribe link that takes you off the list straight away. An address that never confirms gets no more emails.
Unlink any sign-in from Settings › Your account. On a shared computer, Sign out of this browser there backs your save up and makes this browser forget it; signing in again brings it back.
The Hall of Fame shows scores under a made-up handle the game picks for you (like "Professor Chompy 7360"), or a name you build from our word lists (like "Captain Birchpaddle 7"); on the website you can't type in a name. We store your random id, your name, your scores, when they were set, and which app and version last saved (like "web 1.0.0"). We check names every day and may hide a score or reset a name that breaks the rules. The website also counts a few things anonymously (games started and finished, home runs and which star hit them, how the tutorial goes), with no id attached.
Like every website, our hosting provider sees your IP address and browser type when you load a page. We use your IP address for a minute or so, in memory only, to stop the leaderboards from being spammed; we don't store it with your save or your scores. Our host keeps standard server logs for a short time for security.
The website uses Vercel Web Analytics, from our host, to count page views. It doesn't use Google Analytics or any other tracker. It sets no cookies and keeps no id that follows you: it counts a visit from the page address, the page that sent you, your browser, operating system, device type and country, and identifies a visit only by a hash that changes every day and is never stored with your IP address. It doesn't load if your browser sends Global Privacy Control. The apps don't use it. See Vercel Web Analytics and privacy.
The website's optional voice control follows the same on-device rule. It works only in browsers with local speech recognition and an installed English language pack; we do not use a remote recognition service or automatically download a language pack. Turning it off or hiding the game tab closes the microphone.
The other Beaver games
Beaver Ball's beavers play other sports too, each in its own app from You Found Waldo LLC, and each can also be played on its own website. This policy covers them as well; each game's part below says what that game keeps. The website, service providers, kids, your choices and contact parts of this page apply to all of them.
On a game's website (like beaver-soccer.vercel.app), the save lives in your browser's storage instead of the app, and its backup works the same way, with a recovery code to move it to another browser; we keep only a one-way scrambled copy of the code. Those websites count page views with Vercel Web Analytics, without a cookie, as for beaverball.app below; it doesn't load when your browser sends Global Privacy Control. The apps don't use it.
Beaver Football (iPhone, iPad and the web)
Beaver Football keeps your teams and players, the plays you've unlocked, the Locker looks you own and wear, your Beaver Bucks, XP, trophies, the coach tips you've seen and your settings on your device. It backs your save (your profile, with your Bucks, plays, looks and trophies, your teams and the coach tips) up to Beaver Football's own server under a random id the game makes up, so it isn't lost. Your Career (your beaver, their job and seasons), your Daily challenges and streak, your Manager games and your Tail Punt Derby record stay on the device. We never ask for a name, email, age or location, and the app has no analytics of any kind, no ads, no chat and no tracking prompt; it never reads your location, contacts or photos. The app loads its own pictures and recorded voices from the app itself.
Sign in with Apple is optional, under Settings › Your account, after the grown-ups check: it links your save to your Apple ID so it opens on your other devices. Apple gives us only an id for your Apple ID in this game, never your name or email. Delete my account, in the same place, deletes your save, the sign-in and everything tied to them from our server and the device; deleting the app deletes what it saved on the device.
Game Center is optional: when you're signed in, the app reports your trophies as achievements and your bests (your longest touchdown, the most flags you pulled in a game, your Tail Punt Derby record and your Two-Minute Drill wins) to its leaderboards, stored by Apple under Apple's policy. The Locker sells optional packs of looks and the Beaver Football Club, a yearly subscription (its terms), through the App Store, behind the grown-ups check. Apple processes the payment; to confirm and restore what you bought, the app tells RevenueCat an anonymous id the game makes up for your save, and RevenueCat gets your purchase receipts and basic device facts, never your name, email or Apple ID (as above for Beaver Ball). Beaver Bucks are never sold.
Beaver Basketball (iPhone, iPad and the web)
Beaver Basketball keeps your teams and players, the plays you've opened, the Locker looks you own and wear, your Beaver Bucks, XP, trophies, your Career beaver, Season and Coach games, Daily challenges and streak and your settings on your device, and backs your save up to Beaver Basketball's own server under a random id the game makes up, so it isn't lost. With it go your scores (like your XP and wins), filed under that id and a handle the game makes up from word lists, and which app and version last saved. We never ask for a name, email, age or location, and the app has no analytics of any kind, no ads and no chat. The app loads its own pictures and recorded voices from the app itself.
Sign in with Apple is optional, under Settings › Your account, after the grown-ups check: it links your save to your Apple ID so it opens on your other devices. Apple gives us only an id for your Apple ID in this game, never your name or email. Delete my account, in the same place, deletes your save, the sign-in and everything tied to them from our server and the device; deleting the app deletes what it saved on the device.
Game Center is optional: when you're signed in, the app reports your trophies as achievements and your bests (most points in a game, your Shootout best, your longest shot and Season titles) to its leaderboards, and keeps a copy of your save in Game Center saved games in your iCloud account, all stored by Apple under Apple's policy. The Locker sells optional packs of looks and the Beaver Basketball Club, a yearly subscription (its terms), through the App Store, behind the grown-ups check. Apple processes the payment; to confirm and restore what you bought, the app tells RevenueCat an anonymous id the game makes up for your save, and RevenueCat gets your purchase receipts and basic device facts, never your name, email or Apple ID (as above for Beaver Ball). Beaver Bucks are never sold.
Beaver Soccer (iPhone, iPad and the web)
Beaver Soccer keeps your teams and players, the Tactics Book cards and Locker looks you own and wear, your Beaver Bucks, trophies, your Pond Smarts level, the Clinic lessons you've passed, your Career (your club, your beaver and their seasons), your Daily challenges and streak, your Manager games, your Spot Kick Splash best and your settings on your device. It backs your save (your profile, with your Bucks, cards, looks, trophies and Pond Smarts, your teams and your Clinic lessons) up to Beaver Soccer's own server under a random id the game makes up, so it isn't lost; your Career, Daily, Manager games and Game Plan stay on the device. We never ask for a name, email, age or location, and the app has no analytics of any kind, no ads, no chat and no tracking prompt; it never reads your location, contacts or photos. The app loads its own pictures and recorded voices from the app itself.
Sign in with Apple is optional, under Settings › Your account, after the grown-ups check: it links your save to your Apple ID so it opens on your other devices. Apple gives us only an id for your Apple ID in this game, never your name or email. Delete my account, in the same place, deletes your save, the sign-in and everything tied to them from our server and the device; deleting the app deletes what it saved on the device.
Game Center is optional: when you're signed in, the app reports your trophies as achievements and your bests (most goals in a game, your Spot Kick Splash and Crossbar Challenge bests, and your points on the Pond Smarts ladder) to its leaderboards, stored by Apple under Apple's policy. The Locker sells optional packs of looks and the Beaver Soccer Club, a yearly subscription (its terms), through the App Store, behind the grown-ups check. Apple processes the payment; to confirm and restore what you bought, the app tells RevenueCat an anonymous id the game makes up for your save, and RevenueCat gets your purchase receipts and basic device facts, never your name, email or Apple ID (as above for Beaver Ball). Beaver Bucks are never sold.
Beaver Ski & Snowboard (the website)
Beaver Ski & Snowboard is played in a web browser and is still being built. It keeps your best times and scores, your last Big Air attempts, your Ski School lessons, the woods you picked in the Sap Shack and your settings in your browser's own storage on your device; nothing is sent to a server, there is no account or sign-in, and nothing is sold (every wood is free). We never ask for a name, email, age or location, and there are no ads, no chat and no cookies. It loads its pictures and recorded voices from its own site. Vercel Web Analytics counts its page views without a cookie, as for the website above, and is off when your browser sends Global Privacy Control. Clearing your browser's site data deletes everything it kept.
Beaver Pickleball (iPhone, iPad and the web)
Beaver Pickleball keeps your Beaver Bucks, the Locker looks you own and wear, your trophies and levels, the Pickleball School lessons you've passed, your Tour, your Open Play nights, your Daily challenges and streak, your Captain mode matches, your Dink Derby scores and your settings on your device. It backs your profile (your Bucks, looks, trophies, levels and bests) up to Beaver Pickleball's own server under a random id the game makes up, so it isn't lost; the rest stays on the device. We never ask for a name, email, age or location, and the app has no analytics of any kind, no ads, no chat and no tracking prompt; it never reads your location, contacts or photos. The app loads its own pictures and recorded voices from the app itself.
Sign in with Apple is optional, under Settings › Your account, after the grown-ups check: it links your save to your Apple ID so it opens on your other devices. Apple gives us only an id for your Apple ID in this game, never your name or email. Delete my account, in the same place, deletes your save, the sign-in and everything tied to them from our server and the device; deleting the app deletes what it saved on the device.
Game Center is optional: when you're signed in, the app reports your trophies as achievements and your bests (your longest rally and dink rally, your Pond Rating, your Dink Derby best and your Golden Dills) to its leaderboards, stored by Apple under Apple's policy. The Locker sells optional packs of looks and the Beaver Pickleball Club, a yearly subscription (its terms), through the App Store, behind the grown-ups check. Apple processes the payment; to confirm and restore what you bought, the app tells RevenueCat an anonymous id the game makes up for your save, and RevenueCat gets your purchase receipts and basic device facts, never your name, email or Apple ID (as above for Beaver Ball). Beaver Bucks are never sold.
Beaver Math (the website)
Beaver Math is played in a web browser and is still being built. It keeps the nickname you pick from its list (nothing is typed), your grade, which state's standards you learn by (Missouri or Florida), how each skill is going, your badges and your settings in your browser's own storage on your device. Nothing is sent to a server: there is no account, no sign-in, no analytics, no ads, no chat, no cookies and nothing to buy. When read-aloud is on, your device's own speech voice reads the problems. The grown-ups view shows the same progress on the same device. Clearing your browser's site data deletes everything it kept.
Service providers
| Who | What for | What they get |
|---|---|---|
| Apple (Game Center, iCloud, App Store, Sign in with Apple) | Saves, achievements, leaderboards, purchases, the optional sign-in | What you share with Game Center and the App Store, under Apple's policy |
| RevenueCat | Confirming and restoring purchases (apps) | An anonymous app user id, purchase receipts, device and app version |
| Vercel | Hosting the websites and their servers; Vercel Web Analytics counts its page views (not the apps) | IP address and browser type (server logs); for page views: page address, referrer, browser, operating system, device type, country, no cookie |
| Google (Sign in with Google) | The optional sign-in on the website and in the Android apps | Only that you signed in to Beaver Ball, under Google's policy; we receive an anonymous user id |
| Resend | Sending the sign-in emails, and the launch list's emails | The email address you typed and the email we send, to deliver it |
| Neon | The databases of the website and the other Beaver games | Saves and leaderboard scores from the apps and the websites, under the random id |
We don't sell personal information, we don't share it for targeted advertising, and we don't use data brokers.
Kids
Beaver Ball is made for families and is treated as directed to children. We don't knowingly collect personal information from children: email sign-in and the launch list, the only places an address is typed, are offered only after a year-of-birth question shows the player is over the age of digital consent (we use 16 unless we know a lower age applies where the player lives). The Beaver Ball app has no ads, and buying anything or leaving the app for a website needs a grown-up to pass a parental gate first. If you believe a child has sent us personal information (for example by emailing us), write to waldo@youfoundwaldo.com and we'll delete it. Beaver Ball: After Dark is for adults 18 and over.
Your choices, and deleting your data
- Delete my account (the apps and the website): Settings › Your account › Delete my account. In Beaver Ball a grown-up confirms it first. It deletes, right away, your save and its backup, your leaderboard and weekly scores, every sign-in link, Apple, Google or email (and cancels the sign-in at Apple when we hold its token), your chosen place, your player page and your purchase record at RevenueCat. Your Game Center saved game is deleted too when you're signed in to Game Center. In a league, you leave it and your past results stay in its standings as "Retired beaver", with no name. We keep a one-way scrambled copy of the save's random id for 30 days, only so another device still holding the save starts fresh instead of putting it back. This can't be undone, and purchases made with your Apple ID or Google account can still be restored. If you no longer have the app, email us (below) and we'll delete the same things for you within 30 days.
- Without deleting: deleting the app deletes the save on that device, and clearing your browser's site data deletes the website's local save; the backup stays until you delete your account. Game Center data is managed by Apple (Settings › Game Center, or Settings › [your name] › iCloud for saved games).
- Wherever you live, you can ask us what we hold about you, or ask us to delete it, at waldo@youfoundwaldo.com. Because we don't know who you are, we may ask for your recovery code or handle to find your data.
Keeping it safe
Everything travels over HTTPS. Recovery codes are stored only as one-way hashes, except for a save you've signed in to, whose code is also kept encrypted so your sign-in can open it. Saves and scores are kept while the game is running and deleted when you delete your account.
Changes
If what the game collects changes, we'll update this page and the date at the top before the change ships, and, for anything significant, mention it in the app's release notes.
Contact
waldo@youfoundwaldo.com
You Found Waldo LLC