Privacy

What is collected

Your account

Email address, the display name you choose, and a hash of your password. The password itself is never stored and cannot be recovered from the hash — a reset replaces it rather than revealing it.

Sign-in and sign-up records

The time and IP address of sign-in attempts, and of attempts to create an account, successful or not. This is what makes it possible to rate-limit someone guessing at passwords or creating accounts in bulk. It is the only reason those addresses are kept.

Confirmation links

When you register we store a one-way hash of the link we email you, never the link itself, and only until it is used or expires.

Your picks

The lineups you submit, what each player cost at the moment you submitted, and what they scored. This is the record of the competition and is kept for as long as the pool exists.

The notify list

If you asked to hear when public sign-ups open: your email address, the date, and the IP it came from. Nothing else. It is not an account and grants no access.

What is not collected

There are no third-party analytics, no advertising trackers, no social media pixels and no cookies beyond the one session cookie that keeps you signed in. Fonts and styles are served from this site, so loading a page does not tell anyone else you were here.

The single exception is the signup form, which loads Cloudflare Turnstile to tell people from bots. Cloudflare sees that request and the IP it came from. It runs on that one page and nowhere else on this site.

Your email address is not sold, rented or shared. The only mail this site sends is a password reset you asked for, and — once — a notice that public sign-ups have opened if you asked for that.

Who can see what

Other members of a pool you join can see your display name, your lineups once a week locks, and your scores. They cannot see your email address.

A pool can be listed publicly by its commissioner, which means anyone with an account can see its name and how many members it has, and can join it. Private pools are not listed anywhere and their existence is not public.

Your commissioner can additionally remove you from their pool. Removing you ends the membership; the lineups and scores you already recorded stay in the pool's history.

Getting your data out, or deleted

Delete your account yourself, at any time, from your account settings. It destroys your address, your display name, your password, your confirmation and reset links, and the sign-in and sign-up records tied to your address.

What it does not destroy is a lineup you already submitted and what it scored. Those stay in their pool under the name "Deleted user". A scored week is the record of a competition other people played in, so it is not yours alone to erase — the same reason a league table does not change when a player leaves the league.

For a copy of what is held about you, email the address below and ask.