Your privacy choices
Optional Google Analytics is off until you accept. Essential cookies keep sign-in and security working. Ignoring this notice does not grant consent.
Privacy policyPrivacy Policy
How we collect, use, and protect your personal information
Privacy Choices
Essential cookies support sign-in, security, session state, and saving this choice. They do not require analytics consent.
Optional Google Analytics measures visits to our public landing page. It is off until you accept. Rejecting analytics does not affect access to the application.
Your saved choice lasts up to 180 days in this browser. You can withdraw at any time. Global Privacy Control overrides acceptance.
Current analytics status: disabled.
What Information Do We Collect?
We collect account information you provide, including your name and email address, and store account identifiers and authentication/security records used for sign-in and account recovery. Football-pool information includes memberships, invitations, picks, display names, messages, and reminder preferences.
Requests also provide technical information such as IP addresses and browser metadata to our hosting and security providers. Session state, timezone preferences, support requests, and operational logs support application functionality. Please do not put sensitive personal information in pool messages or support requests.
What Do We Use Your Information For?
We use information to operate accounts and pools, display picks and leaderboards, protect against abuse, deliver account and pool emails, and respond to support requests.
-
To personalize your experience
(your information helps us to better respond to your individual needs) -
To improve our website
(we continually strive to improve our website offerings based on the information and feedback we receive from you) -
To improve customer service
(your information helps us to more effectively respond to your customer service requests and support needs) -
To operate football pools
Pool features display participant information, picks, and messages to the relevant participants according to application settings. - To administer pool invitations and reminders
-
To send periodic emails
Email supports account confirmation, password-reset links, pool invitations, and reminders. Passwords are not sent by email.
How Do We Protect Your Information?
The application uses HTTPS redirection and production cookie security settings. Authentication and security cookies are HttpOnly where browser scripts do not need access.
Essential cookies support authentication, session state, request-forgery protection, and privacy choices. Different cookies have different SameSite requirements, including cross-site correlation for optional external sign-in.
Security measures reduce risk but cannot guarantee that all information or communications are completely secure.
Do We Use Cookies?
Yes. Essential cookies keep sign-in, security, session state, and privacy preferences working. Your privacy choice is stored in this browser for up to 180 days. Login cookies may last for the browser session or the configured remembered-login period; session state has an inactivity timeout.
Optional Google Analytics is blocked until you explicitly accept. Application analytics is limited to the anonymous public landing page; account and authenticated pages are excluded. The application supplies a sanitized landing-page address and no query string or referrer. Google still receives network information such as your IP address. You may reject or withdraw analytics without losing application access.
Manage privacy choices or withdraw analytics consent.
Global Privacy Control, signaled by your browser or the Sec-GPC request header, disables nonessential analytics even if you previously accepted. Absence of GPC is not consent. Analytics cannot load when JavaScript is disabled. This control is distinct from the older Do Not Track signal, which does not enable tracking or substitute for consent.
Withdrawal stops future application analytics and attempts to remove known first-party analytics cookies. It does not retroactively delete previously collected provider data or cookies the application cannot access.
You can also use browser settings to view, block, or delete cookies. Blocking essential cookies may prevent sign-in or other features from working. Deleting the privacy-choice cookie removes this browser's saved preference; analytics remains disabled until a new valid acceptance. Choices are browser-specific, not an account-wide setting. reCAPTCHA and hosting providers may use their own cookies or similar technologies, which are not all controlled by the application analytics buttons.
Third-Party Service Providers
We use providers to host, operate, secure, and improve the service. They process information to provide their services and as described in their applicable terms. Rejecting analytics does not prevent the operational disclosures described below.
Google Analytics
Optional Google Analytics measures visits to our anonymous public landing page for website analytics and service improvement. It loads only after acceptance and is disabled by Global Privacy Control. It may process visit events, timestamps, cookies and online identifiers, browser and device information, IP addresses, and approximate location derived from network information. Our application sends a sanitized landing-page address and title, without query strings or a referrer, and excludes account and authenticated pages.
The application requests that Google Signals and advertising personalization be disabled. This describes our application configuration, not a guarantee about every Google account setting or secondary use. See Google's Privacy Policy for Google's practices.
Google reCAPTCHA
reCAPTCHA helps detect automated activity, prevent abuse, and protect the website and its users. Google may process IP addresses, browser and device information, cookies, and interaction signals to assess activity. Server verification sends a response token and, when available, the client IP address. We use reCAPTCHA for abuse prevention, not as an advertising service. The analytics choices do not disable these security checks. Google's Privacy Policy also describes its information practices.
SendPulse SMTP email delivery
The application uses SendPulse's SMTP email-delivery API to send operational messages such as account confirmations, password-reset links, pool invitations, pool messages, and pick reminders. Information includes recipient email addresses and display names, message content and template variables, and delivery/routing metadata. The inspected application integration uses email delivery, not marketing campaigns or subscriber-list management. Provider-side retention and email-open/link tracking settings require separate confirmation. See SendPulse's Privacy Policy; not every product described there is used by this application.
Microsoft Azure
Azure App Service hosts the application and background WebJobs. Azure SQL Database stores account and football-pool records and application logs; logging also writes to the application console. This infrastructure processes account information, application data, technical request information, and operational records needed to run and secure the service. Hosting region, backup retention, and any additional infrastructure services have not been confirmed for this notice. See Microsoft's privacy information.
Other functional services and resources
The application includes configuration for optional Google sign-in; where available, using it exchanges authentication information with Google. Styles and scripts from jsDelivr, jQuery's CDN, and Cloudflare's cdnjs can disclose browser network/request information when loaded, even if analytics is rejected. Provider contracts, retention, and secondary uses require separate review.
Sale and Sharing of Personal Information
We do not sell your personal information for monetary consideration. We disclose information to providers for hosting, operational email delivery, security, and optional website analytics as described above. Pool features also display participant information, picks, and messages to relevant participants according to application settings.
These operational disclosures are not a statement that we never disclose personal information. Certain disclosures or provider uses can qualify as a sale, sharing for cross-context behavioral advertising, or targeted advertising under applicable law, even without a monetary payment. Provider configurations, contracts, and legal classifications remain under review; this notice does not assert that every disclosure is exempt.
You can reject or withdraw application analytics through Privacy Choices, and Global Privacy Control overrides analytics acceptance. Accepting analytics is not permission to sell or share personal information. These controls do not themselves implement every possible sale, sharing, or targeted-advertising opt-out or control providers' independent uses.
Third Party Links
Links such as the Ko-fi donation link open third-party sites only when selected. Those sites have their own privacy practices. The application does not load the Ko-fi widget automatically.
Privacy Rights and Retention
State Privacy Rights
Depending on your state and applicable law, rights may include access, correction, deletion, portability, appeal, and opting out of sale, sharing, targeted advertising, or certain profiling. Nationwide analytics preferences are available regardless of state. The application does not currently provide self-service account-data deletion or export, or a dedicated privacy-request and appeal workflow. These controls alone do not establish compliance with California, Florida, or other state privacy laws.
Retention and Sensitive Information
Privacy choices expire after 180 days. Retention should be limited to what is reasonably necessary for the disclosed purposes and applicable legal, security, and operational requirements. A verified retention/deletion schedule for account, pool, email, log, backup, and provider records is not available for this notice; cookie expiry does not delete those records. Do not submit health information or other sensitive personal information. Requirements for children's data, sensitive data, and prohibited processing require separate review and cannot always be satisfied through consent.
Your Consent
Visiting the site, ignoring the consent notice, or continuing to use the application does not grant analytics consent. Acceptance must be explicit, and you can change your choice through the Privacy Choices section at any time.
Changes to Our Privacy Policy
If we decide to change our privacy policy, we will post those changes on this page, and/or update the Privacy Policy modification date below.
Questions About This Privacy Policy?
Visit our support page for available support options. The analytics preference controls do not themselves implement account-data access, deletion, or appeals workflows.