Privacy Policy
Introduction
This Privacy Policy explains how TheShowBase ("we", "us", or "our") collects, uses, and shares your information when you use our website and services.
Information We Collect
We collect information when you visit our website, including:
- Information about your browser, operating system, and device
- Pages you visit and features you use on our site
- IP address and geographic location (city/country level)
- Referral source that brought you to our site
Cookies and Similar Technologies
We use cookies and similar tracking technologies to collect information about your browsing activities. Cookies are small text files stored on your device that help us provide and improve our services.
Types of Cookies We Use
Essential Cookies
These cookies are necessary for the website to function properly and cannot be switched off.
Analytics Cookies
We use Google Analytics to understand how visitors interact with our website. These cookies help us analyze data about webpage traffic and improve our website to tailor it to user needs.
Your Cookie Choices
When you first visit our site, you will be presented with a cookie banner allowing you to accept or decline non-essential cookies. You can change your preferences at any time by clicking the cookie settings button in the footer of our website.
How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our services
- Understand how users interact with our website
- Detect and prevent fraud and abuse
- Analyze usage patterns and trends
Data Sharing
We may share your information with:
- Service providers who help us operate our website (such as Google Analytics)
- Legal authorities when required by law
Your Rights
Depending on your location, you may have certain rights regarding your personal information, such as:
- Access to your data
- Correction of inaccurate data
- Deletion of your data
- Objection to processing
- Data portability
To exercise these rights, please contact us using the information provided below.
Chrome Extension Privacy Notice
This section applies specifically to users of the TheShowBase Inventory Import Chrome Extension.
What Data We Collect
- MLB The Show 25 Inventory: Card UUIDs, quantities, and "is_sellable" flags from your MLB account
- Account Email: Via Google OAuth for authentication purposes only
- Import Metadata: Timestamps, total items imported, and extension version
- Extension Identifier: Chrome extension ID for security validation
What We DON'T Collect
- ❌ MLB The Show passwords or login credentials (never stored or transmitted)
- ❌ Browsing history outside of MLB The Show website
- ❌ Personal information beyond your email address
- ❌ Payment, financial, or credit card information
- ❌ In-game currency or purchase history
How We Use Your Data
- Display your card collection on TheShowBase.com
- Provide collection tracking and team building features
- Identify which cards you own vs. need to complete sets
- Improve extension functionality and reliability
- Provide support and troubleshooting assistance
Data Storage & Security
We take your privacy and security seriously:
- Encrypted Storage: All data stored in Supabase with enterprise-grade encryption
- Row-Level Security: Database policies ensure only you can access your inventory data
- Token Management: OAuth tokens stored locally in your browser only, never on our servers
- Server Validation: All API requests validated server-side with JWT tokens
- No Credential Storage: We never store your MLB The Show password or session cookies
- HTTPS Only: All data transmission encrypted via HTTPS/TLS
Authentication Process
The extension uses a secure multi-step authentication process:
- TheShowBase Login: You authenticate with your Google account via Supabase OAuth
- MLB The Show Login: You log into MLB The Show directly on their official website
- Data Import: Extension reads your inventory and sends it securely to TheShowBase
- Token Expiration: Authentication tokens automatically expire for security
Note: The extension opens the official MLB The Show login page. We never see or store your MLB credentials.
Your Rights
You have complete control over your data:
- Access: View your inventory data anytime on TheShowBase.com
- Update: Re-import your inventory at any time to refresh the data
- Delete: Remove your inventory data via account settings on TheShowBase
- Export: Request a copy of your data in JSON format (contact support)
- Opt-out: Uninstall the extension to stop all data collection
Third-Party Services
The extension integrates with the following third-party services:
- Google OAuth: For secure authentication (Google Privacy Policy applies)
- Supabase: For encrypted data storage (Supabase Privacy Policy applies)
- MLB The Show API: Read-only access to your inventory data (Sony Interactive Entertainment Privacy Policy applies)
Each third-party service has its own privacy policy. We recommend reviewing them.
Data Retention
Your inventory data is retained until you request deletion or delete your account. Authentication tokens expire automatically after their designated lifetime (typically 1 hour for access tokens).
Compliance
This Chrome Extension complies with:
- Chrome Web Store Developer Program Policies
- Google OAuth 2.0 Policies
- GDPR (General Data Protection Regulation)
- CCPA (California Consumer Privacy Act)
Contact Us
If you have any questions about this Privacy Policy or the Chrome Extension, please contact us at:
General Support: support@theshowbase.com
Privacy Concerns: privacy@theshowbase.com
Changes to This Policy
We may update this Privacy Policy from time to time. The updated version will be indicated by an updated "Last Updated" date and the updated version will be effective as soon as it is accessible.
Last Updated: October 2025