Privacy

What we store

• Your account: email, display name, and a hashed password. Passwords are hashed with bcrypt; we cannot read them.
• Payment handles you save: a Venmo handle, Zelle contact, PayPal.me link and Cash App tag. These are shown to players on your boards — that is their whole purpose.
• Player entries: the name, and optionally the email or phone, that someone typed when claiming squares.
• Payment records: amount, method, the reference number a player pasted, and who confirmed it. We never see card numbers.
• Server logs and an audit trail of privileged actions such as locking a board, confirming a payment or rotating a join code.

What we do not collect

We do not collect or store payment card numbers or bank details. Host Pass purchases are processed by Whop, our billing provider; Whop handles card data and we receive only what we need to confirm a purchase (such as your email address).

Cookies

Two kinds, both necessary to use the product. Whop's analytics pixel and Google's advertising cookies are the only other cookies — see Third-party services and Advertising below.

• A session cookie that keeps you signed in.
• A cookie recording that you entered a board's join code, and one recording which participant you are on a given board so your squares are highlighted for you.

Advertising (Google AdSense)

We may display advertising served by Google AdSense. Google, as a third-party vendor, uses cookies to serve ads based on your prior visits to this website and other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits to this site and/or other sites on the internet.

You may opt out of personalized advertising by visiting Google Ads Settings or, for some third-party vendors' use of cookies for personalized advertising, by visiting www.aboutads.info.

Where required by law (for example, in the EEA and the UK), we will obtain your consent before serving personalized ads, through a consent management platform.

Third-party services

• Whop processes Host Pass payments, provides the receipt and license key, and runs an analytics pixel that records page views and conversion events such as sign-ups.
• ESPN provides the scores, standings and news shown on the site.
• Our email provider sends account and notification emails.
• Google AdSense serves advertising and may use cookies as described under Advertising above.

Who can see what

On a public board, the squares and who owns them are visible to anyone with the link. On a private board they are visible to people you gave the code to. Hosts can hide owner names from other players.

We do not sell your data or share it with advertisers. Email is sent through our transactional email provider, which sees the minimum needed to do its job.

Getting your data out, or deleted

Ask the host of any pool you played in, or contact the operator of this deployment, and your entry and its payment records will be removed. Hosts can export a board's data at any time to keep their own records for tax purposes.

Data retention

We keep account and pool data as long as needed to run the service and meet legal obligations. Pool data stays available to the host for their own records.

Children

The service is not directed to anyone under 18, and we do not knowingly collect information from children.

Contact

Questions about this policy: support@superbowlboxes.net.

Not legal advice

This page describes what the software does. It is not a substitute for legal advice about your own obligations.