First Base: Baseball Standings ("we", "us", or "our"), developed by Flipping Leaf LLC, is committed to protecting your privacy. This Privacy Policy describes how information is handled when you use the First Base iOS application and this website (collectively, the "Service").
First Base is designed to keep everything on your device. We do not require an account, we do not collect your name or email address, and all standings data, team records, and event archives are stored locally on your iPhone — not on any server we own. There are two optional exceptions. First, GameChanger integration: if you choose to connect your GameChanger account, your login token is stored exclusively in your device's Keychain and never transmitted to our servers. Second, anonymous game data and odds-accuracy diagnostics: if enabled (off by default — opt-in via Settings), First Base sends anonymous game results and prediction data — with no account or personal info, plus a persistent per-install identifier used only for de-duplication and grouping (see below) — to help us improve and train our prediction models. See "Anonymous Game Data & Odds-Accuracy Diagnostics" below for details.
The following data is stored exclusively on your device. It is never uploaded to Flipping Leaf servers:
This data remains on your device until you delete the app, at which point it is removed entirely.
First Base fetches publicly available standings and schedule data from the LI Hot Stove Baseball and East Coast league websites on your behalf. This data is displayed within the app and cached locally on your device. We do not collect, aggregate, or transmit this data to our own servers. Your IP address may be visible to those websites when the app fetches data on your behalf, the same as visiting the site in a browser.
If you choose to connect a GameChanger account, First Base opens GameChanger's own login page in an in-app web view. You log in directly with GameChanger — we never see your password. The resulting session token is stored exclusively in your device's Keychain using Apple's secure storage APIs. This token is used only to fetch game data from GameChanger on your behalf; it is never transmitted to Flipping Leaf servers.
GameChanger's integration is entirely optional. The app is fully functional without it. Disconnecting GameChanger in Settings removes the token from your Keychain immediately.
First Base Plus can add your team's games to your iOS calendar — either as a one-time export to a calendar you choose, or as an ongoing sync that maintains a dedicated "First Base" calendar with your team's upcoming games and keeps it current when schedules change. If you use these features, the app asks for calendar access using Apple's standard permission prompt.
All calendar operations happen entirely on your device through Apple's EventKit framework. First Base only creates and updates its own game events; no calendar data — neither the events First Base creates nor anything else in your calendar — is ever read for any other purpose, transmitted to Flipping Leaf, or shared with anyone. Calendar features are entirely optional, and you can revoke access at any time in iOS Settings → Privacy & Security → Calendars.
If you subscribe to First Base Plus, your subscription is managed through Apple's in-app purchase system. We use RevenueCat to verify and manage subscription status. RevenueCat receives a non-personally-identifiable device identifier and your subscription status from Apple. No payment card details are shared with RevenueCat or with us — all payment processing is handled entirely by Apple.
RevenueCat's privacy policy is available at revenuecat.com/privacy.
First Base optionally collects two kinds of anonymous data to help us improve and train our playoff-odds prediction models. Both are covered by a single "Share anonymous data" setting.
First, anonymous game-level results: scores, dates and times, and home/away for completed games in the events you follow. This is the same publicly available data First Base already reads from the Hot Stove and East Coast league websites to show you standings and schedules — it is not new or private data, just a copy of public results sent to us so we can use real outcomes to train better models.
Second, the existing odds-accuracy diagnostics: at the time odds are calculated, the app records the model's prediction alongside coarse context — league, field size, games played, and games remaining — plus a coarse device class and OS major version. Later, once the real outcome is known, the app records whether the prediction was correct.
Both kinds of data are uploaded to our database, hosted on Supabase, and are pseudonymous, not anonymous by accident — anonymous by design. Teams are identified only by a per-event position number (for example, "team 3 in this event"), not by team name or Hot Stove Team ID. Events are identified only by a dedup key so we can avoid double-counting the same event uploaded from multiple devices. This data contains no team names, no team IDs, and no account or personal information — nothing in it identifies you or is linkable back to you, and we do not build or keep any map that would re-identify it.
Both kinds of data also include a persistent, per-install identifier. This identifier is not tied to your name, email, account, or any other personal information — it exists only to avoid double-counting the same install's data and to let us analyze an install's own data points together (for example, splitting training data by install so the same device's data doesn't appear in both our training and evaluation sets). It is never sold, never used for advertising or cross-app tracking, and never combined with any other identifying information.
This feature is opt-in and off by default. You can turn it on at any time in Settings under "Share anonymous data". If you turn it off after enabling it, any data already queued on your device for upload is deleted immediately, and nothing further is collected until you turn it back on.
Beyond the optional, anonymous game data and odds-accuracy diagnostics described above, First Base does not include any analytics SDKs, advertising networks, tracking pixels, or third-party tracking of any kind. The only data that ever leaves your device is that optional diagnostic data, which you can turn off at any time. We use no advertising networks, no cross-app or cross-site tracking, and no analytics that identify you or track how you personally use the app across sessions.
If you enable notifications, First Base alerts you to things like schedule postings, field changes, and other teams' results. These notifications are generated locally on your device: the app compares freshly fetched league data against what it saw previously and schedules an alert when something changed. No notification content is ever transmitted to us.
If — and only if — you turn on "Share anonymous data" (off by default), First Base also registers a standard Apple push token for this install and sends it to our database, hosted on Supabase, alongside the same per-install identifier and coarse context described above. The token is used only to support delivery of app-related notifications; it is not tied to your name, email, or account, and is never sold or used for advertising or cross-app tracking. If you leave "Share anonymous data" off, no push token is ever transmitted.
First Base is not directed at children under the age of 13. We do not knowingly collect any personal information from children under 13. If you believe a child has provided personal information through the Service, please contact us and we will take steps to address it.
We may update this Privacy Policy from time to time. When we do, we will update the "Last Modified" date at the top of this page. We encourage you to review this page periodically.
If you have any questions about this Privacy Policy, please contact us at [email protected].