Privacy Policy

1. Information We Collect

Account information: When you create an account we collect your email address. We use your email to authenticate your account, associate your submitted picks with your entry, and send you transactional notifications (e.g., pick confirmations, round-result emails sent by your commissioner).

Picks and contest data: We store the score predictions you submit for each game, your entry name (chosen by you), and the league(s) you participate in.

Payment information: Commissioners pay a one-time league activation fee via Stripe. We do not see or store your full card number — Stripe handles all payment processing. We receive a confirmation of payment success only.

Usage data: We collect standard server logs including IP addresses, browser type, and pages visited. This data is used for security, debugging, and aggregate analytics. We do not sell or share this data.

How you found us: When you arrive from an ad or a link, we save the campaign details in the address (such as ad click identifiers and campaign names), the website that referred you, and the first page you visited, in a first-party cookie for up to 90 days. If you create an account, we attach those details to your account record so we can tell which ads lead to real leagues.

2. How We Use Your Information

• To provide and operate the Platform (scoring, standings, league management)
• To authenticate you and protect your account
• To send you transactional emails related to your picks or league
• To process the one-time commissioner activation fee
• To improve the Platform through aggregate, anonymized usage analysis
• To measure which of our ads lead to sign-ups and paid leagues
• To comply with legal obligations

We do not sell, rent, or trade your personal information to third parties. We do not sell, rent, or trade your personal information. We use the Google and Meta advertising tools described below to measure our ads, which some state laws treat as "sharing" personal information for advertising; see Section 7 for how to opt out.

3. Third-Party Services

We use the following third-party services to operate the Platform:

• Supabase — database and authentication hosting. Your account and pick data is stored on Supabase infrastructure.
• Stripe — payment processing for commissioner activation fees. Stripe's privacy policy governs their handling of your payment data.
• Vercel — web hosting and deployment. Server logs may be retained by Vercel per their data practices.
• Google Ads (Google tag) — runs on the sign-up and payment pages (and elsewhere on the Platform) and records a conversion when someone who clicked one of our Google ads signs up or activates a league. Google receives your browser and device information, the pages you visit here, and ad click identifiers.
• Meta Pixel — the same measurement for our Facebook and Instagram ads, running on the same sign-up and payment pages. Meta receives your browser and device information, the pages you visit here, and those conversion events, and may link them to your Meta account.

Each of these services has its own privacy policy governing their data practices.

4. Data Retention

We retain account information and picks data for as long as your account is active and for a reasonable period thereafter to support historical league records. If you would like your data deleted, contact us at support@overtimepools.com and we will process your request within 30 days.

5. Cookies and Local Storage

We use cookies and browser local storage for authentication (keeping you logged in) and session management, and a first-party cookie that remembers how you found us. We also use the Google tag and the Meta Pixel, which set their own cookies to measure our ads. Blocking cookies may prevent you from logging in or submitting picks; blocking only advertising cookies does not affect the Platform.

6. Children's Privacy

OvertimePools is intended for users 18 years of age or older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with information, please contact us and we will delete it.

7. California Residents (CCPA)

If you are a California resident, you have the right to know what personal information we collect about you, request deletion of your personal information, and opt out of the sale or sharing of your personal information. We do not sell personal information. Our use of the Google tag and the Meta Pixel may count as "sharing" for cross-context behavioral advertising. We honor the Global Privacy Control signal: if your browser sends it, we do not load either tool. You can also opt out, or exercise any of these rights, by contacting us at support@overtimepools.com.

8. International Users (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR) or equivalent laws, including the right to access, rectify, erase, and port your data, and to object to or restrict processing. Our legal basis for processing your data is the performance of our contract with you (providing the Platform) and our legitimate interests in operating and improving the service.

Please note that OvertimePools is operated from the United States. By using the Platform, you consent to your data being transferred to and processed in the United States.

To exercise your GDPR rights, contact us at support@overtimepools.com.

9. Security

We implement industry-standard security measures including encrypted connections (HTTPS), secure authentication via Supabase, and access controls. No system is completely secure; we cannot guarantee absolute security of your data.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will update the effective date above when changes are made. Continued use of the Platform after changes are posted constitutes your acceptance of the updated Policy.

11. Contact Us

Quantica LLC, the data controller for OvertimePools, can be reached for questions, data deletion requests, or privacy concerns at support@overtimepools.com.