Privacy

• Your email address. So you can sign in and so the app can send you the handful of emails in §4. If you sign in with Google we receive your address from Google — nothing else, no contacts, no profile photo, no calendar.
• Your handle and your avatar. The name and the chip you chose. These are public to the league by design: they are what appears on a leaderboard. Your FULL name is never asked for and never shown — the most this app ever holds is a first name, which is optional and covered in §5.
• What you do in the game. Your picks each week, which contests you entered, your scores, your head-to-heads, and your coin ledger. This is the game itself — without it there is nothing to play.
• Who invited you, if anybody did. An invite code is optional. If you sign up with one, we record which member's code it was, so they get the credit for bringing you. Sign up without one and there is nothing to record.
• An address you type into an invite, if you use one. Sending an invite by email stores the address you sent it to, so the guest list can show whether it was claimed. That is somebody else's address, so: only what you typed, only to send that one invite, and never used for anything else.

• No advertising, ever. There are no ads in this app and no ad networks in its code.
• Nothing is sold or shared for marketing. Your data is not sold, rented, traded or handed to a data broker. There is nobody to sell it to and no intention to find one.
• No analytics or tracking SDKs. No Google Analytics, no Facebook pixel, no Segment, no Mixpanel, no session recording, no advertising identifier. The app does not follow you anywhere and could not tell you what other sites you visit.
• No payment details. The app has never touched a card, a bank or a payment processor. Coins are an accounting record kept by the league; money changes hands between people, in person.
• No photos, no contacts, no location. The app never asks for them, so there is nothing to store. Avatars are a fixed set of drawn marks — there are no uploads.

Four companies hold or handle data on the league's behalf. Each one is doing a job the app needs done, and none of them is given anything to use for their own purposes.

• Supabase. The database and the sign-in system. Your account and everything in §1 lives there.
• Vercel. Hosting. It serves the app and keeps ordinary server logs, which include IP addresses, the way every web server does.
• Google. Only if you choose to sign in with Google, and only to confirm who you are. You can use an email and password instead and Google is never involved.
• Resend. Sends the league's emails. It is given your address and the message, and nothing else.

Player statistics come in from public sports data. Nothing about you goes out to them — those requests are about football players, not about members.

• What gets sent. The board dropping, a reminder the day the week's games start, a note if somebody challenges you, and a warning if a player on a squad you have money on is ruled out before kickoff. That is the lot.
• Every one of them is optional. Turn them off on your account screen and they stop. Every message also carries an unsubscribe address, and you can reply to any of them — a person reads it.
• Nothing is sent for marketing. There is nothing to market.

• Your picks stay hidden until kickoff. Each of your five is invisible to everyone else until that player's game starts, when it flips face up. That rule is enforced by the database, not by what the screens choose to draw.
• Every squad you lock in plays in The Main Event. Locking is free and it enters you, so your handle and your place appear on the leaderboard like everybody else's — whether or not you have staked. What stays hidden is the LINEUP: each of your five is invisible until his own kickoff, by the rule above. Before Week 2 a squad you never paid for was seen by nobody, and that changed when entering stopped costing anything.
• Your handle, avatar, scores and results are public to the league. That is what a leaderboard is.
• Your first name, if set, is shown to other members next to your handle. Rob may add it for you; you can change or hide it in Account.
• Rob can see the administrative side. Balances, the guest list and who invited whom — because somebody has to run the game and hold the money. Nobody else can.

• Game history is kept while the league runs. Past weeks are part of the record — who won Week 4 has to still be true in December.
• The money ledger is only ever added to. A correction is a new line, never an erasure. That is what makes a balance checkable.
• You can leave. Ask and your account and your email address are deleted. Settled results may stay in the league's record without your name attached, because other people's weeks are part of that record too.
• You can ask what is held about you. Ask, and you get it.

This game is for adults. It is not directed at children and is not intended for anyone under 18.

One person runs this and answers the mail.

rob@fivecarddraft.com

If this policy changes, the date at the top changes with it.