Privacy Policy

SimLeague OS (“SimLeague OS”, “we”, “us”) is a platform for running NBA 2K simulation basketball leagues, operated by MVMBA out of the Philippines. This policy explains what we collect, why, where it is stored, and the choices you have.

We collect only what we need to run the service:

• Account data — email address, a securely hashed password (we never see your plaintext password), and your display name and role (owner, commissioner, or admin).
• League data — teams, rosters, schedules, box scores, settings, and other content you or your commissioner create.
• Uploaded files — box-score screenshots and poster assets you upload, stored in private buckets and served via short-lived signed links.
• Billing records — subscription tier and status. Card details are handled by our payment processor; we do not store full card numbers.
• Technical data — IP address and device/session identifiers used for sign-in, rate limiting, and abuse prevention, plus basic usage analytics and error diagnostics.

Your primary data is stored with Supabase (database, authentication, and file storage) and the application is hosted on Vercel, both in the Singapore region. Some processing happens through the third-party providers below. We do not sell your data, and we do not share it except as needed to operate these services.

You can sign in with email and password or with Google. When you use Google sign-in, we receive your basic profile (name, email address, and account identifier) to create or link your account. If you choose to connect Google Calendar, we request only the access needed to add and update your league’s game events; we do not read unrelated calendar data. You can disconnect Google access at any time from your account settings or your Google account’s connected-apps page.

• To provide the service — running your leagues, generating scouting and stats, and syncing schedules.
• To authenticate you and keep your account secure (sessions, rate limiting, abuse prevention).
• To process subscriptions and support requests.
• To diagnose errors and improve the product through aggregate analytics.

We do not use your league data to train third-party AI models.

We use first-party cookies strictly to keep you signed in and to enforce one-session-per-owner and subscription checks. We do not use third-party advertising cookies.

We keep your data while your account is active. If you cancel, your data is preserved and access is paused — nothing is deleted automatically. You can request export or deletion of your personal data at any time by contacting us; we will action verified requests within a reasonable period, subject to legal record-keeping requirements.

You may access, correct, export, or delete your personal data, and withdraw consent for optional integrations (such as Google Calendar). To exercise any of these, reach us through the contact below.

Questions about this policy or your data? Reach us on Discord at @mvmba_ph, or see the Help & Support page.