How netpitch handles data.

This policy applies to netpitch.us and the related web, API, and worker services that support the dashboard. The service is operated as a personal project by Michael Vieth. Privacy requests can be opened through the netpitch project repository. Do not include sensitive personal information in a public issue.

netpitch is not affiliated with Major League Baseball, Minor League Baseball, MLB Advanced Media, Google, or any team. Baseball names, statistics, game data, and images remain the property of their respective owners.

netpitch is designed so the browser primarily talks to same-origin netpitch routes. The backend services fetch and cache public baseball data, process background jobs, and return dashboard-friendly JSON to the web app.

netpitch may process the following categories of information:

• Search and interaction data: pitcher search text, selected pitcher IDs, selected level/season filters, and dashboard API requests.
• Public baseball data: player names, team information, throwing hand, positions, season stat lines, game logs, pitch events, pitch locations, outcomes, and derived analytics.
• Operational metadata: recently viewed public pitchers, dataset status, cache freshness, backfill progress, and job payloads needed to prepare pitch datasets.
• Technical logs: IP address, user agent, request path, timestamps, status codes, error messages, and Cloud Run/Cloud Logging diagnostics.
• Analytics data: Google Analytics page views, page titles, aggregate search/filter interactions, referrers, approximate geography, device/browser categories, and analytics identifiers.
• Contact data: if you contact the operator about the service, the message contents and related correspondence.

netpitch does not intentionally collect account passwords, payment information, precise geolocation, government identifiers, health information, private scouting reports, uploaded files, biometric identifiers, or user-generated comments. The site does not require registration and does not ask visitors to submit sensitive personal information.

The application code does not use localStorage or sessionStorage. Google Analytics may set analytics cookies or similar identifiers according to Google controls and policies.

You can block or delete cookies in your browser. Blocking analytics may reduce the accuracy of site usage metrics but does not prevent use of the core pitcher search and dashboard features.

Information is used for these purposes:

• Provide pitcher search, summaries, pitch dashboards, and dataset status updates.
• Cache public baseball data so repeat requests are faster and more reliable.
• Run async pitch backfills, stale dataset refreshes, and service monitoring.
• Secure the service, debug errors, prevent abuse, and maintain uptime.
• Understand aggregate traffic and product usage through Google Analytics.
• Respond to support requests, legal requests, or privacy requests.

Where a legal basis is required, netpitch processes data based on legitimate interests in operating, securing, improving, and measuring a public analytics service; performance of a requested service when you use the dashboard or contact the operator; compliance with legal obligations; and consent where required for analytics.

Public baseball data may be cached for long periods because historical seasons are effectively immutable and caching reduces load on upstream public APIs. Current-season datasets may be refreshed when stale. Search cache entries are designed to expire after a short period, and public headshots are cached with browser/CDN headers.

Operational logs and analytics records are retained according to the configured retention settings of Google Cloud and Google Analytics. Contact correspondence is retained as long as needed to respond to requests, maintain records, or protect the service.

netpitch does not sell personal information. Data may be processed by service providers used to run the app, including Google Cloud and Google Analytics. Public baseball data is fetched from MLB-related public endpoints. Information may also be disclosed if required by law, to protect rights and safety, to investigate abuse, or as part of a transfer of the service.

netpitch uses industry-standard safeguards appropriate for a small public web app, including HTTPS, HTTP security headers, Content Security Policy, HSTS, same-origin API access, CORS restrictions, least-privilege service accounts, internal-only worker ingress, and separated storage for large cached blobs and metadata. No security program can guarantee perfect protection, but the service is designed to minimize the amount of personal data it needs in the first place.

netpitch is a general-audience baseball analytics site and is not directed to children under 13. The site does not knowingly collect personal information from children under 13. If you believe a child provided personal information, contact the operator and it will be reviewed and deleted where appropriate.

Depending on where you live, including California, Colorado, Connecticut, Virginia, Utah, other U.S. states, the EEA, or the UK, you may have privacy rights over personal information associated with you. Because netpitch has no accounts, verification may require enough information to identify records related to your request.

• Request access to personal information associated with you, if any.
• Request deletion or correction of personal information, subject to security, debugging, legal, and operational exceptions.
• Object to or restrict certain processing where applicable law provides that right.
• Opt out of sale or sharing of personal information. netpitch does not sell personal information or share it for cross-context behavioral advertising.
• Use an authorized agent where applicable law allows it. Verification may be required before a request is fulfilled.
• Appeal or complain to a privacy regulator where applicable law provides that right.

To exercise rights, open a request through the netpitch project repository. Do not include sensitive personal information in a public issue. netpitch will not discriminate against you for exercising privacy rights.

netpitch is operated from the United States and is hosted primarily on Google Cloud infrastructure. If you access the service from outside the United States, your information may be processed in the United States or other locations where service providers operate.

Some browsers send Do Not Track or Global Privacy Control signals. netpitch does not sell personal information or share it for cross-context behavioral advertising, so there is no sale/share opt-out state to toggle. Browser-level blocking of analytics scripts or cookies remains the most direct way to limit analytics collection.

This policy may be updated as the service changes. Material changes will be reflected by changing the effective date on this page. Continued use of the service after an update means the updated policy applies going forward.