Privacy policy
Last updated October 26, 2026
Short version: we use analytics to see how the site is doing. We don't run ads, and we don't sell your data. Here's the long version, with no fine-print curveballs.
Who we are
Ballpark ("we", "us") is a brand, product, and AI design agency. This policy covers our website, www.ballpark.is.
The company responsible for your data is Ballpark Collective LLC, doing business as Ballpark, 8030 La Mesa Blvd #3200, La Mesa, CA 91942. Questions about privacy go to privacy@ballpark.is.
What we collect
- Analytics. With your consent where the law requires it, Google Analytics collects the pages you visit, how you found us, your approximate location (city or country), your device and browser type, and how you scroll and click. It uses cookies that recognize your browser, not you by name. Google Analytics 4 doesn't log or store IP addresses.
- Hosting logs. Our host, Vercel, processes your IP address, browser details, and request information to deliver the site and keep it secure.
- Weather in the footer. The live weather in our footer is for San Diego, Pasadena, and Durham. It never uses your location. To load it, your browser requests the forecast from Open-Meteo and the US National Weather Service, which receive your IP address as part of that request. We don't send them anything else.
- When you contact us or book a call. Whatever you choose to share, like your name, email, company, and message. Booking is handled by Calendly under its own privacy policy.
- Job applications. If you apply through our hiring page, we collect what you submit: your name, email, portfolio and LinkedIn links, discipline, availability, location, and anything else you tell us. We use it only to review your application and get back to you.
- Spam protection. The application form uses Cloudflare Turnstile to check that you're human. It looks at technical signals like your IP address and browser details, and isn't used for advertising.
- There are no accounts on this site, and we don't ask for sensitive personal data.
Cookies and similar storage
| Name | What it does | How long |
|---|---|---|
_ga, _ga_RXZ4KYD8YS | Google Analytics: tells visits and sessions apart. In the EU, EEA, UK, and Switzerland, only set if you accept. | Up to 2 years |
bp-consent | Remembers your cookie choice (stored in your browser). | Until you clear it |
bp-region | Tells the site whether to ask for consent, based on your country. | Until you close your browser |
bp-theme | Remembers light or dark mode (stored in your browser). | Until you clear it |
You can change your choice any time with Cookie settings in the site footer.
How we use it
- To understand which pages and work resonate, and to improve the site.
- To keep the site running and secure.
- To reply when you reach out, and to review job applications.
We don't run ads, build advertising profiles, or sell or share your personal information for advertising.
Legal bases (EU, EEA, UK, and Switzerland)
- Consent for analytics cookies. You can withdraw it at any time.
- Legitimate interests for hosting, security (including spam protection), the weather widget, and replying to inquiries.
- Steps before a contract when you ask us about a project or apply to work with us.
Who we share it with
Only the service providers that run the site for us, under contract: Google (analytics and workspace tools), Vercel (hosting), Calendly (scheduling), Cloudflare (spam protection), and Resend (email delivery). We may also disclose information if the law requires it. We never sell it.
Their policies: Google, Vercel, Calendly, Cloudflare, Resend.
International transfers
Our providers may process data in the United States. Where they do, transfers rely on the EU-US Data Privacy Framework (and its UK and Swiss extensions) where the provider is certified, or on Standard Contractual Clauses.
How long we keep it
- Google Analytics automatically deletes visitor-level and event-level data 14 months after a visitor's last activity. Aggregated reports, which contain no personal identifiers, are kept.
- Hosting logs follow Vercel's retention periods.
- Job applications are deleted one year after you apply.
- Inquiries that don’t become projects are deleted within 2 years of our last contact.
- Client records are kept for the length of the work and as long as legal, tax, and accounting rules require, generally up to 7 years.
Your rights
In the EU, EEA, UK, and Switzerland, you can ask to access, correct, delete, or export your data, restrict or object to how we use it, and withdraw consent. You can also complain to your local data protection authority (in the UK, the ICO).
In the US (including California), you can ask to know, correct, or delete the personal information we hold. We don't sell or share personal information, so there's nothing to opt out of.
To make a request, email privacy@ballpark.is. We respond within one month.
Children
This site isn't directed at children under 16, and we don't knowingly collect their information.
Changes
If we update this policy, we change the date at the top of this page.