Privacy Policy

Introduction

Rate Cricket is a platform where cricket fans rate matches, write reviews, and discuss them with each other. This policy explains what we collect, why, who we share it with, and how to get rid of it.

It covers both the Rate Cricket website at ratecricket.com and the Rate Cricket app for Android. Where the two behave differently, we say so.

Data Controller

This platform is operated by [TODO: legal entity name], registered at [TODO: registered business address]. This Privacy Policy, and any dispute arising from your use of the platform, is governed by the laws of [TODO: governing-law jurisdiction].

Accounts and Sign-In

You can browse Rate Cricket without an account. To rate a match, write a review, reply, or vote, you need one.

Accounts are handled by Supabase Auth, which stores credentials on our behalf. You can sign up with an email address and password, or sign in with Google. When you use Google sign-in, Google tells us your email address and, if you have them set, your name and profile picture — we never see your Google password.

We do not offer anonymous or guest accounts, and we never store your password ourselves.

Information We Collect

Information you give us when you create an account: your email address, which is required. Optionally, a display name, a favourite cricket nation, a profile picture, and links to your social profiles. Everything except the email address can be left blank or removed later.

Information you create by using the platform: your match ratings, the text of your reviews, whether you watched at the stadium or on a stream or replay, your replies and votes, blog posts and comments if you write them, and any images you upload with a review.

Information collected automatically: when your device talks to our API we record the request — the method and address, the response status, how long it took, your user agent, and your network address shortened so that it identifies a network rather than a person. If you are signed in, your account id is recorded alongside it.

Information about your sessions: when you sign in we keep a record of the session, including the network address and browser or device it was last used from, so that every session can be revoked at once if your account is compromised.

We do not collect your precise location, your phone number, your contacts, your calendar, or any advertising identifier. The Android app requests no runtime permissions; attaching an image uses the system photo picker, which hands us only the picture you chose.

How We Use Your Information

We use your email address to identify your account, to send the emails you have asked for, and to contact you about your account when we have to.

We use your ratings, reviews and votes to run the platform — showing your contributions, calculating match and tournament averages, building leaderboards, and displaying your profile.

We use request logs to keep the service working and safe: diagnosing faults, enforcing rate limits, and detecting abuse, spam and vote manipulation.

We do not sell your personal data, and we do not use your reviews or ratings to build an advertising profile of you.

User Generated Content and Match Ratings

Your ratings, reviews, replies and any images you upload are public. They appear on match pages, on your profile, and in listings, and can be read by anyone — including people who are not signed in, and search engines.

Images you upload are stored at public web addresses. Anyone who has the address can open the image without signing in, so please do not upload anything you would not want seen publicly.

We moderate content and will remove anything abusive, hateful, unlawful or deliberately false. We monitor for unusual rating patterns and may remove ratings or restrict accounts that try to manipulate scores.

Who We Share It With

We use a small number of service providers, each handling a specific part of running the platform:

• Supabase — accounts, database and image storage • Railway — hosting for our API • Vercel — hosting for the website • Resend — sending account and newsletter emails • Feedback Fish — the feedback widget; if you are signed in and send feedback, your email address is passed along so we can reply • Google Analytics — website only, and only if you accept analytics cookies • Google AdSense — advertising on the website only; there are no ads in the Android app

We do not sell your personal data, and we do not share it with third parties for their own marketing.

Cookies and Analytics

The website uses essential cookies to keep you signed in. These cannot be turned off without breaking sign-in.

Analytics cookies are off by default. Google Analytics loads only if you choose Accept on the cookie banner; if you decline, or simply never answer, it is never loaded. Where it does run, your network address is shortened and Google's advertising and personalisation signals are disabled.

Advertising on the website runs with Google Consent Mode set to denied until you accept, so ads are served without advertising cookies unless you opt in.

The Android app contains no analytics, no advertising and no tracking software of any kind.

Data Security

All traffic between your device and our servers is encrypted in transit using HTTPS, on both the website and the Android app. Data is encrypted at rest by our hosting providers.

We never store passwords — they are held by Supabase Auth in hashed form. Access tokens are short-lived, refresh tokens are stored only as a hash, and every session for an account can be revoked at once.

Access to production data is limited to administrators who need it. No online service can promise perfect security, but we take these measures seriously and keep them under review.

Children's Privacy

Rate Cricket is intended for a general audience and is not directed at children under thirteen.

We do not knowingly collect personal data from children under thirteen. If you are a parent or guardian and believe your child has given us personal information, contact us and we will delete it.

Your Rights

You can see and change most of what we hold about you directly in the app or on the website, from your profile. You can edit or remove your display name, profile picture, favourite nation and social links at any time, and you can delete individual reviews and replies.

You can delete your account, and choose whether your reviews are anonymised or deleted along with it — see Delete Your Account for how, and for exactly what happens to each kind of data.

You can unsubscribe from any newsletter using the link at the bottom of the email, or by turning off email preferences in your profile.

Depending on where you live you may also have the right to a copy of your data, to have it corrected, or to object to how we use it. Write to support@ratecricket.com or use our contact form and we will respond within 30 days.

Data Retention

We keep your account and the content you post for as long as your account exists.

Request logs are kept for 90 days and then deleted automatically. Anything identifying you is removed from them as soon as your account is deleted.

When you ask us to delete your account it is deactivated immediately and you are signed out everywhere. Nothing is erased until the grace period you chose has passed — 7, 14 or 30 days — during which you can sign back in and restore it. After that the option you picked is applied, and it cannot be undone.

We may keep certain records for longer where the law requires it, for instance to resolve a dispute or meet an accounting obligation.

International Transfers

Our service providers operate globally, so your data may be processed in countries other than your own, including the United States. Where that happens we rely on the safeguards those providers have in place, such as the European Commission's standard contractual clauses.

Match Rating Transparency Policy

Our match ratings come from genuine users. We do not accept payment to change a rating, and we do not adjust scores by hand.

We use automated checks and moderation to spot fake votes and unusual rating patterns, and may remove ratings or restrict accounts where we find manipulation.

Changes to This Privacy Policy

We update this policy when what we do with your data changes. The date at the top of the page tells you when it last changed.

If a change materially affects how we use data you have already given us, we will tell you before it takes effect.

Contact Us

For anything about this policy or your personal data, write to support@ratecricket.com or use our contact form. We aim to respond within 30 days.