Privacy Policy

This policy explains what Gameday Empires ("we") collects when you use Gameday Empires, why, and your choices. The short version: you can browse the map without an account; if you make one, we keep what's needed to run it and send your alerts, and we don't sell your data.

What we collect

• Account: your email address and a scrambled (hashed) version of your password. We never store the password itself.
• Google sign-in (optional): if you use it, Google tells us your email address and an account ID. We don't get your Google password, contacts or anything else.
• Your picks: the team you pledge to, the counties you follow and their labels, your alert settings, and your display name if you set one.
• Location (only when you ask): if you press "Use my location", your browser sends your approximate position to our server once, to find your county. We use it for that lookup only and don't store or log the coordinates; only the county you choose to save is kept.
• Security records: failed sign-in attempts and password-reset requests, kept for one day so we can stop abuse.
• How the site is used: the pages you view, what you click, errors, and recordings of how pages are used, so we can see what works and fix what doesn't. Everything typed into forms is masked in recordings. If you're signed in, this is linked to your account and email address. Pages reached from emailed links (password resets, email confirmation, unsubscribe) and invite links collect none of it.
• Server logs: the pages requested and whether they loaded, kept to run and fix the Service. Our hosting provider may also log IP addresses for security.
• Payments (when available): processed by Stripe. We receive what you bought and whether payment succeeded, never your card number.

How we use it

• To run your account and sign you in.
• To email you the alerts you've turned on (your team or counties changing hands, the weekly recap) and account emails such as password resets and email confirmation.
• To keep the Service secure and working.
• To understand how people use the site, so we can improve it.

We don't sell your personal information, and we don't use it for third-party advertising.

Cookies

We use one cookie to keep you signed in, and a short-lived cookie during Google sign-in. Both are needed for the Service to work. We also use analytics cookies from PostHog and Google Analytics to understand how the site is used. We don't use cookies for advertising.

Who we share it with

Only service providers that help us run Gameday Empires, under contracts limiting their use of it:

• Resend, to send email;
• PostHog and Google Analytics, for the usage analytics and error reports described above, and a cookieless page-view counter;
• our hosting and database providers;
• Google, if you choose Google sign-in;
• Stripe, if you make a purchase.

We may also disclose information if the law requires it.

Your choices

• Change your team, counties and alerts anytime on your profile page. Every alert email has a one-click unsubscribe link.
• Delete your account from your profile page; your picks, counties and alert settings are deleted with it.
• Ask for a copy of your data, or for help deleting it, by emailing [email protected]. Depending on where you live, you may have additional rights, which we'll honor.

How long we keep it

Account data is kept until you delete your account. Security records are deleted after a day. Records of purchases are kept as long as tax and accounting law requires.

Children

The Service isn't directed to children under 13, and we don't knowingly collect their information. If you believe a child has an account, contact us and we'll delete it.

Changes and contact

If we change this policy significantly, we'll tell you by email or on the site. Questions: [email protected]. See also our Terms of Service.