Effective Date: October 2026

Cookie Policy

This Cookie Policy (“Policy”) explains how Munission, LLC, a Puerto Rico limited liability company (“Munission,” “we,” “us,” or “our”), uses cookies and similar tracking technologies when you visit or use the Roster Sports mobile application, website, and related digital services (collectively, the “Services”). This Policy should be read together with our Privacy Policy and our Terms & Conditions. It describes what cookies are, why we use them, and the options you have to control them.

1. What Are Cookies and Similar Technologies?

Cookies are small text files that a website or mobile service places on your device (computer, tablet, smartphone, or other internet-enabled device) when you visit or use it. Cookies help the operator recognize your device and remember certain information about your visit.

In addition to cookies, we may use:

  • Local storage — browser-based storage for temporary app data.
  • SDKs (Software Development Kits) — mobile equivalents of cookies used by analytics tools.
  • Web beacons / pixel tags — small image files embedded in emails or screens to confirm views.

For convenience, this Policy refers to all of these collectively as "cookies."

2. Does Roster Sports Use Cookies?

At present, Roster Sports does not place any advertising, retargeting, or behavioral-profiling cookies on user devices. We have intentionally designed the App to minimize tracking. However, some limited technical or analytics functions rely on cookie-like technologies built into third-party tools such as Firebase (in the app), Google Analytics (on our website), and Branch. Branch is used to measure which marketing efforts lead to app installs and to open shared links, such as game invitations, inside the app. It is not used to show you ads. These tools help us keep the app running well and understand basic website usage and app performance.

We do not:

  • collect cross-site browsing data,
  • use remarketing or ad cookies,
  • track users across unrelated websites or apps (we do link a visit to our own website with a later install of our own app, as described in Section 4), or
  • permit third-party ad networks to set cookies.

3. Types of Cookies and Similar Technologies We Use

We explain the categories below for transparency. Analytics and attribution technologies are active today. Advertising and social media technologies are not.

TypePurposeExamples
Strictly Necessary CookiesRequired for core operation (authentication, load balancing, security).Session IDs, CSRF tokens
Performance & Analytics CookiesCollect aggregated data on app performance and website usage.Firebase Performance Monitoring (app), Google Analytics (website)
Functionality CookiesRemember preferences such as language or region.App-level preference storage
Attribution and MeasurementMeasure which marketing efforts lead to app installs and send visitors to the right app store.Branch (website links and SDK); UTM and Google click ID values passed with download links
Advertising / Targeting CookiesDeliver personalized advertising. (Roster Sports does not use these.)None active
Social Media CookiesEnable sharing content on social networks.None active

4. Firebase, Google Analytics, and Branch

Roster Sports uses Google Firebase for account sign-in, data storage, push notifications, and app performance monitoring. For performance monitoring, Firebase may set anonymous identifiers to:

  • measure how quickly the app starts and responds, and
  • help us find and fix slow or failing features.

Performance information collected by Firebase is aggregated. No personal identifiers (name, email, or phone) are stored in cookies.

Our website uses Google Analytics to understand how visitors use the site. Google Analytics sets cookies to tell visits apart.

You can learn more about Firebase privacy practices at: firebase.google.com/support/privacy.

Branch. The "download the app" buttons on our website link through Branch (branch.io), which measures which marketing efforts lead to app installs. Branch may store an identifier in your browser, usually in browser storage and in some cases in a cookie. It receives your IP address, your browser or device type, the page you came from, and the campaign information we attach to the link (UTM tags and, for Google ad clicks, the Google click ID). These identifiers and IP addresses are treated as personal information under some laws. Branch states that it does not sell this data. Its practices are described in Branch's privacy policy.

Branch may report the resulting install to Google so we can measure our ads.

Our mobile app also includes the Branch SDK. It collects device identifiers (the Google Advertising ID on Android, and Apple's advertising identifier or vendor identifier on iOS, where your device settings allow), your IP address, and install-referrer information, to attribute app installs to our marketing and to open shared links, such as game invitations, in the right place in the app.

5. Why We Use These Technologies

We rely on limited analytics and measurement solely to:

  • Maintain system reliability and performance;
  • Detect and resolve technical problems;
  • Understand aggregated website usage and app performance to improve Roster;
  • Secure our systems against misuse or fraud;
  • Measure which marketing efforts lead to app installs;
  • Plan future product updates.

We do not use cookies to sell user data or to build advertising profiles for anyone else.

6. Legal Basis for Processing

Under data-protection laws such as the GDPR, the use of non-essential cookies requires a lawful basis.

Roster Sports is designed for U.S. users. We rely on our legitimate interest in running and improving the Services for analytics and app-install measurement, and we give you the opt-out controls in Section 7, including Global Privacy Control. If we introduce technologies that require your opt-in consent where you live, we will ask for it before activating them.

7. Managing or Disabling Cookies

Even though cookie use is minimal, you may manage your preferences by:

7.1 In the App

Future versions of Roster Sports will include a "Cookie Preferences" or "Privacy Settings" link under Account Settings, allowing you to opt in or out of non-essential cookies.

7.2 In Your Browser

You can delete or block cookies using your browser or device settings.

Common references:

  • Chrome: Settings > Privacy and Security > Cookies and Other Site Data
  • Safari: Preferences > Privacy > Cookies and Website Data
  • Firefox: Options > Privacy & Security > Cookies and Site Data
  • Edge: Settings > Cookies and Site Permissions

Blocking cookies may limit App functionality or certain preference settings.

7.3 Mobile Device Controls

On iOS or Android, you may disable ad-tracking identifiers (IDFA/AAID) through system privacy settings. Our mobile app includes Branch, which may use these identifiers where you allow them. Turning them off in system settings stops that.

7.4 On Our Website

Turn on Global Privacy Control in your browser and our website will turn off Branch tracking and will not pass the Google click ID to Branch. You can also use Branch's own opt-out, which is linked from Branch's privacy policy.

8. Data Retention

Identifiers generated by Firebase or analytics tools are retained only as long as necessary for system and performance monitoring, typically no longer than 26 months, after which data is deleted or anonymized.

If a user deletes their account, all personally linked records are removed or anonymized in accordance with our retention policy.

9. Third-Party Cookies and Links

If you follow external links (e.g., to Venmo for payments), those third-party services may place cookies on your device.

We have no control over their cookie practices. Please review their respective cookie or privacy policies before using those sites.

Venmo Policy: venmo.com/legal/us-privacy-policy
Google Analytics Policy: policies.google.com/technologies/cookies

10. "Do Not Track" Signals

Some browsers send "Do Not Track" (DNT) signals.

Because there is currently no uniform industry standard, Roster Sports does not specifically respond to DNT signals. However, we respect privacy choices and provide the management options described above.

We do honor Global Privacy Control. When your browser sends it, our website turns off Branch tracking and does not pass the Google click ID to Branch.

11. Children's Data

Roster Sports is intended for adults (18 years and older).

We do not knowingly use cookies or identifiers to track minors.

If we learn that a minor's data has been collected through cookies or analytics, we will promptly delete such data.

12. International Transfers

Data collected via Firebase or analytics may be processed in the United States or other jurisdictions where our service providers operate.

We rely on Google's standard contractual safeguards to ensure adequate protection consistent with privacy laws.

13. Updates to This Policy

We may revise this Cookie Policy periodically to reflect changes in technology, law, or business practices.

When we make material updates, we will:

  • Post the new effective date at the top of this page, and
  • Provide an in-app notification or banner where required.

Your continued use of the App after any update constitutes acceptance of the revised Policy.

14. Contact Us

If you have any questions about this Policy or our use of cookies, please contact:

Munission, LLC
Attn: Privacy Office
Email: privacy@rostersports.app
San Juan, Puerto Rico

Summary of Commitments

  • No advertising or retargeting cookies.
  • No sale of personal data, directly or through data brokers, and no third-party advertising in the app.
  • Minimal use of analytics and app-install measurement.
  • Full transparency and opt-out controls.
  • Compliance with U.S. law, Puerto Rico law, and emerging global standards (GDPR/CCPA readiness).