Privacy Policy

What we collect

• Account details: your email address, a securely hashed password (or your Google sign-in), your display name, team name and time zone.
• League activity: leagues you create or join, invitations, your weekly picks, MVP and Team Challenge choices, scores and standings.
• Season finances, if your league turns them on: bookkeeping records of buy-in and prize amounts and payment status. We never collect card or bank details.
• Family profiles: the display name a commissioner enters for a family member who plays under their account.
• Notifications: if you allow them, a push notification token for your device.
• Usage analytics: page views and basic events (for example, “signed in” or “submitted a lineup”) without your picks, invitation codes or personal details in the page addresses we record.

How we use it

To run the game: sign you in, run your leagues, lock and reveal lineups, calculate scores and standings, send account emails and the notifications you ask for, keep the service secure, and understand which features people use so we can improve them. We do not sell your personal information or use it for advertising.

Who can see what

Your picks stay hidden from everyone, including your commissioner, until your league’s lineups are revealed at the weekly deadline. After that, members of your league can see your picks, scores and standings. A commissioner can see whether each member has submitted before the deadline, but not what they picked.

People outside your league can’t see your league or your activity.

Service providers

We use a small number of providers to run The Sunday Six: Supabase (database, sign-in and account email), Vercel (hosting and privacy-preserving analytics), Google (only if you choose Google sign-in), and an NFL statistics provider (we send it no personal information). They process data only to provide their services to us.

Cookies

We use cookies only to keep you signed in and to remember small preferences, such as which family profile you’re playing as. Our analytics don’t use cookies, and we don’t use advertising or cross-site tracking cookies.

Where your data is stored

Your data is stored and processed in the United States.

How long we keep it

We keep your account and league history while your account is open, because past weeks make up each season’s official results. If you leave a league, your past results stay in its history. If you delete your account, we remove or anonymize your personal details; league results others rely on may be kept with your name removed.

Your choices

You can update your name, team name and time zone in Settings, turn notifications off in your device or browser settings, and ask us to send you a copy of your data or delete your account by emailing us.

Children

The Sunday Six is not directed to children under 13, and they may not create accounts. A parent who adds a child as a family profile controls that profile and can ask us to delete it at any time.

Security

We use encrypted connections, hashed passwords and invitation codes, and database rules that limit each person to their own leagues. No system is perfectly secure, so please use a strong, unique password.

Changes to this policy

If we change this policy, we will update the date at the top of this page and, for meaningful changes, tell signed-in members in the app.