Privacy Policy

Last updated October 22, 2026

The short version: pools are saved online so players can pick squares from their own phones. That means the names, squares and scores in a pool are stored with our database provider, Supabase. There are no accounts, no passwords, and no analytics or advertising.

What’s saved, and why

When a commissioner starts a pool, the site saves what’s on the sheet so everyone with a link sees the same thing:

• The pool’s name, host name, teams, price per square and payouts.
• Each player’s name and initials as the commissioner enters them, how many squares they bought, and whether the commissioner has marked them paid. Payment itself happens outside the site; no payment details are ever entered or stored.
• Which player holds which square, the drawn numbers, and the scores.
• The secret keys inside commissioner and player links, which decide who can change what.

Anyone with a link to a pool can see that pool’s sheet, including player names. Share links only with the people in your pool.

Your browser

To connect to a pool, your browser signs in anonymously: it gets a random ID, kept in your browser’s local storage, that isn’t tied to your name, email or phone. A device that opens a pool’s link is recorded as able to view that pool. On the commissioner’s device, the site also remembers the pools started there, so they can be reopened. There are no cookies, analytics or tracking pixels.

Supabase

Pools are stored by Supabase, which runs the site’s database. Supabase receives your IP address and browser information when your browser connects, and handles the data under its own privacy policy.

Code libraries

Two code libraries load from public content networks (jsDelivr and unpkg), which receive your IP address and basic browser information, as they would for any web request.

Google Fonts

The site’s typefaces are loaded from Google Fonts. When a page loads, your browser requests the font files from Google’s servers, so Google receives your IP address and basic browser information, as it would for any web request. Google says it doesn’t use this to build profiles or target ads. See Google Fonts’ privacy FAQ and Google’s Privacy Policy.

Hosting

Like nearly every website, the company that hosts the site may keep standard server logs for security and reliability: your IP address, the page requested, the time, and your browser type. Those logs are kept under the host’s own policies, and we don’t use them to identify anyone.

Children

The site isn’t aimed at children under 13, and it doesn’t knowingly collect information from children.

Deleting a pool

A commissioner can remove any player, which also removes their squares. To have a whole pool deleted, or a name removed from one, get in touch using the details below. We’ll delete it.

Changes

If this policy changes, the date at the top will change and the new policy will say exactly what’s collected and why.

Contact

TODO-NAME · paulyddesign@gmail.com