Privacy

What we store

• Your account: email, display name, and a hashed password. Passwords are hashed with bcrypt; we cannot read them.
• Payment handles you save: a Venmo handle, Zelle contact, PayPal.me link and Cash App tag. These are shown to players on your boards — that is their whole purpose.
• Player entries: the name, and optionally the email or phone, that someone typed when claiming squares.
• Payment records: amount, method, the reference number a player pasted, and who confirmed it. For card payments, a Stripe reference and receipt URL — we never see card numbers.
• Server logs and an audit trail of privileged actions such as locking a board, confirming a payment or rotating a join code.

Cookies

Two kinds, both necessary to use the product and neither used for advertising:

• A session cookie that keeps you signed in.
• A cookie recording that you entered a board's join code, and one recording which participant you are on a given board so your squares are highlighted for you.

Who can see what

On a public board, the squares and who owns them are visible to anyone with the link. On a private board they are visible to people you gave the code to. Hosts can hide owner names from other players.

We do not sell your data or share it with advertisers. Email is sent through our transactional email provider, and card payments go through Stripe, so both see the minimum needed to do their job.

Getting your data out, or deleted

Ask the host of any pool you played in, or contact the operator of this deployment, and your entry and its payment records will be removed. Hosts can export a board's data at any time to keep their own records for tax purposes.

Not legal advice

This page describes what the software does. It is not a substitute for legal advice about your own obligations.