Privacy Policy

This policy explains what personal information Pot Rivals collects, why, and what your rights are. It applies to anyone with a Pot Rivals account.

• Account information: your email address, a hashed version of your password (we never store your actual password), your display name, and an optional avatar.
• Gameplay information: the leagues you're in, bets you place, your credit balance, and your full credit history.
• Technical information: standard hosting and request logs collected automatically by our infrastructure providers.

To create and run your account, let you play in leagues, settle your bets, send you account-related emails (verifying your email address, resetting your password), keep the app secure, and fix problems. We don't send marketing emails today.

We process account and gameplay data because it's necessary to provide the service you've signed up for, and technical/security data under our legitimate interest in keeping Pot Rivals running and free of abuse.

We don't sell your personal information. We use a small number of processors to run the app:

• Neon — hosts our database (your account and gameplay data).
• Resend — sends verification, password reset, and account emails on our behalf, which requires your email address.
• Vercel — hosts the app and runs our scheduled jobs (fetching fixtures, settling bets).
• football-data.org — supplies fixture and result data to us. We only send it requests for match data; no personal information is sent to it.

Some of the providers above may process data outside your home country. Where that happens, we rely on their own safeguards for handling data internationally.

We keep your data while your account is active. If you ask us to delete your account, we'll remove or anonymize your personal information within a reasonable time, though some ledger records may be kept longer to preserve the integrity of leagues you've played in with others.

Passwords are hashed, never stored in plain text. Email verification and password reset links use single-use, time-limited tokens that are themselves stored hashed. No system is perfectly secure, but we take reasonable technical measures to protect your data.

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, or object to how we use it. To exercise any of these, contact us.

We use a single essential cookie to keep you signed in. We don't use third-party advertising or analytics trackers today.

Pot Rivals isn't intended for anyone under 18 — see our Terms & Conditions.

We may update this policy from time to time. We'll update the date at the top of this page when we do.

Questions about your data? See Contact Us.