Privacy Policy
1. What we collect
- Account details: email address, password (stored only as a secure hash by our authentication provider), first and last name, team name, and an optional profile photo.
- Game activity: leagues you create or join, your picks and point stakes, standings, and league settings.
- Invite emails: when a commissioner adds a name and email to their invite list, we store it to send that league's invite and show whether the person joined.
- Agreement records: the date and version of the Terms you accepted and your confirmation that you're 18 or older.
- Email preferences: whether you want pick reminders and weekly results, and a record of emails we've sent you so we don't send duplicates.
- Technical data: our hosting and database providers keep standard server logs (such as IP address, browser type, and request times) for security and troubleshooting. Your browser stores your sign-in session and display preferences (like dark mode) on your device.
2. How we use it
- to run your account and leagues, score picks, and show standings;
- to send account and league emails: welcome messages, invites, pick reminders, weekly results, and password resets;
- to keep the Service secure, prevent abuse, and fix problems;
- to understand, in aggregate, how the Service is used so we can improve it.
3. Who sees what
- Other players in your leagues see your team name, photo, first name and last initial, standings, and your picks once each game has locked.
- Your commissioner sees the same, plus whether you've joined from their invite list.
- Nobody else in PropPool sees your email address. Commissioner invite emails show the commissioner's name and email so you can reply to them.
4. Service providers
We use a small number of providers to run PropPool. They process data only on our behalf:
- Supabase — database, sign-in, and server functions
- Netlify — website hosting
- Resend — sending email
- Sentry — error reports, only if error tracking is turned on
Sports data providers send us schedules, odds, and results; we don't send them your personal information. We don't use advertising or analytics trackers today. If that changes, we'll update this policy first.
We don't sell or rent your personal information, and we don't share it for others' marketing. We may disclose information if required by law or to protect the safety of users or the Service.
5. How long we keep it
- Account and game data: while your account exists. Deleting your account removes your profile, picks, and memberships.
- Pick history from finished leagues is archived after about 400 days.
- Invite emails: until the commissioner removes them or the league is deleted. You can ask us to remove yours at any time.
- Security and audit logs: up to two years.
6. Your choices
- Edit your name, team name, and photo in your profile.
- Turn pick reminders and weekly results on or off in your profile, or use the unsubscribe link in those emails.
- Delete your account from your profile.
- Ask for a copy of your data, a correction, or removal of an invite email by writing to proppooladmin@gmail.com. We'll respond within 30 days.
7. Age
PropPool is only for people 18 and older. We don't knowingly collect information from anyone under 18. If you believe a minor has an account, contact us and we'll delete it.
8. Security
We use encrypted connections (HTTPS), row-level access rules so players can only read what they're allowed to, and rate limits against abuse. No system is perfectly secure, so please use a password you don't use anywhere else.
9. Changes
If we change this policy in a meaningful way, we'll update the effective date and let you know in the app or by email.
10. Contact
Privacy questions or requests: proppooladmin@gmail.com.