Privacy Policy

This policy explains what personal information Pot Rivals collects, why, and what your rights are. It applies to anyone with a Pot Rivals account, and to anyone on our picks email list.

• Account information: your email address, a hashed version of your password (we never store your actual password), your display name, and an optional avatar.
• Gameplay information: the leagues you're in, bets you place, your credit balance, and your full credit history.
• Picks email list: if you sign up for “The Model's Picks” without an account, your email address, whether you've confirmed it, and which page you signed up on.
• Technical information: standard hosting and request logs collected automatically by our infrastructure providers.

To create and run your account, let you play in leagues, settle your bets, send you account-related emails (verifying your email address, resetting your password), keep the app secure, and fix problems. If you've signed up and confirmed your address, we also send you the weekly picks email; every one has an unsubscribe link.

We process account and gameplay data because it's necessary to provide the service you've signed up for, and technical/security data under our legitimate interest in keeping Pot Rivals running and free of abuse. We send the picks email only with your consent, which you give by confirming your address and can withdraw at any time by unsubscribing.

We don't sell your personal information. We use a small number of processors to run the app:

• Neon — hosts our database (your account and gameplay data).
• Resend — sends verification, password reset, account, and picks emails on our behalf, which requires your email address.
• Vercel — hosts the app, runs our scheduled jobs (fetching fixtures, settling bets), and provides our privacy-friendly page-view analytics (see section 10).
• football-data.org — supplies fixture and result data to us. We only send it requests for match data; no personal information is sent to it.

Some of the providers above may process data outside your home country. Where that happens, we rely on their own safeguards for handling data internationally.

We keep your data while your account is active. If you ask us to delete your account, we'll remove or anonymize your personal information within a reasonable time, though some ledger records may be kept longer to preserve the integrity of leagues you've played in with others. Picks-list addresses are kept until you unsubscribe; unconfirmed sign-ups are removed after 30 days.

Passwords are hashed, never stored in plain text. Email verification and password reset links use single-use, time-limited tokens that are themselves stored hashed. No system is perfectly secure, but we take reasonable technical measures to protect your data.

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, or object to how we use it. You can export or delete your own data at any time from Profile → Download my data / Delete account. For anything else, contact us.

We use an essential cookie to keep you signed in. If you open a league invite link before logging in, a second short-lived cookie (up to 7 days) remembers that invite so we can take you back to it once you're signed in. We don't use advertising cookies. We count page visits and where they came from with Vercel Web Analytics, which doesn't use cookies and doesn't identify you or track you across other sites.

Pot Rivals isn't intended for anyone under 18 — see our Terms & Conditions.

We may update this policy from time to time. We'll update the date at the top of this page when we do.

Questions about your data? See Contact Us.