Your data has one job.

What we collect

• Account identity: verified email and authentication details are managed by Clerk. The app stores an internal Clerk identifier and one-way hashes of verified identity identifiers.
• Player card: display name and full date of birth. The date is used to calculate whether you are at least 21.
• Profile photo: optional photo uploaded to and hosted by Clerk.
• Contest activity: drafts, official entry versions, selections, tiebreakers, receipts, scores, and results.
• Email notifications: your reminder choices and delivery receipts for contest reminders and account-approval messages. The app resolves your verified address from Clerk only when sending and does not copy the address into Postgres delivery records.
• Push notifications: if you opt in on a device, the app stores that browser’s encrypted push endpoint, public encryption keys, limited browser identification, and delivery receipts. The endpoint is used only to deliver the four contest alerts described in Profile.
• iPhone alerts: if enabled in the native app, we store an installation identifier, Apple device token and delivery environment, your sign-in session identifier, alert preferences, and delivery status. These are used for the same four contest alerts. Sign-out unregisters the device; account deletion removes its native registrations and delivery records.
• Operations: account-access and eligibility audit events, rate-limit counters keyed by a one-way hash, and error records designed not to contain birth dates, photos, email addresses, or pick selections.

Why we use it

We use this information to authenticate accounts, enforce manual beta approval, notify administrators when an account needs review, confirm approval to the account holder, calculate age eligibility, save and score entries, deliver requested contest reminders and receipts, prevent abuse, answer support requests, investigate errors, and maintain contest integrity.

Your display name and autosaved team selections are visible to other approved active players on the live board while a published week is open. Your email address, birth date, and tiebreaker prediction are not included in that board.

Service providers

Vercel hosts the app, Neon hosts Postgres data, Clerk manages authentication and profile photos, ESPN supplies public schedule and score data, Resend delivers account-status messages and email, and your browser’s push service or Apple Push Notification service delivers opted-in device alerts. Providers process data only for their service role.

Retention and deletion

Birth date, profile, and identity mappings remain while the account is active. Indiana location verification was disabled on August 20, 2026, and the app no longer requests or processes new coordinates. Legacy state-level check records and official entry eligibility snapshots may remain for contest integrity until deletion or anonymization. Rate-limit buckets expire automatically and are periodically deleted.

From Profile, an authenticated user can request account deletion and anonymization. The account becomes read-only while pending. Completion deletes the Clerk identity and profile photo, removes identity mappings, display-name history, and location-check history, and replaces the player card with non-personal placeholders. Official submitted picks may remain under an anonymous label so past results remain accurate.

Encrypted database recovery history may contain an earlier copy until the configured backup-retention period expires. Recovery copies are restricted to incident restoration and are not used for ordinary app activity.

Your choices and requests

In the native iPhone app, use Profile → Notification settings to choose alert categories or turn off alerts on that iPhone. You can also change notification permission in iPhone Settings. iPhone preferences do not change your email or web push preferences.

You may decline the optional profile photo. You can turn optional email categories on or off and enable or disable Web Push for each device from Profile → Notifications. Disabling push unsubscribes that browser; account deletion removes all remaining device endpoints. Approval-request and approval-confirmation messages are transactional account notices and are not controlled by those reminder settings. You may request access, correction, a portable summary, deletion, or an appeal by emailing brian@Droidan1.dev. We accept authenticated privacy requests for beta users regardless of whether a particular privacy statute applies.

Security and children

The beta uses access controls, server-side authorization, encrypted provider connections, hashed identifiers, rate limits, append-only audit events, monitoring, and recovery procedures. No system is perfectly secure. The service is intended only for adults 21 and older and is not directed to children.

Changes and contact

Material changes will update the effective date on this page. Privacy questions and incident reports go to brian@Droidan1.dev.