Privacy Policy

Pigskin Pick'em is operated by an individual, not a company, and is currently in a private beta. Questions, requests, and deletion requests go to support@collegeteamhub.com.

When you sign in with Google, Google sends this app:

• Your email address
• Your display name
• Your Google profile photo URL

That is the entire set of Google permissions requested. This app does not request, and cannot access, your Gmail, Drive, contacts, calendar, or anything else in your Google account.

Everything else stored is created by using the app:

• Which leagues you belong to and your role in each
• The picks you make and the points they score
• Messages and emoji reactions you post in a league chat
• Your email notification preferences

No payment details are collected, because nothing is for sale. No advertising or analytics trackers are used, and your data is never sold or shared for advertising.

Your email and name identify your account and address emails to you. Your picks and league membership are the product — without them there is no pick'em. Notification preferences exist so you can turn email off.

Other members of your leaguescan see your display name, profile photo, and your picks. Picks stay hidden until each game kicks off, then become visible to the league — that is deliberate, and it is how a pick'em works. Anything you post in a league chat is visible to that league.

People outside your leagues cannot see any of it. Leagues are invite-only and there is no public directory.

The operator can see stored data in order to run and support the app.

These third parties process data on this app's behalf:

• Supabase — database, authentication, and file storage
• Vercel — application hosting
• Google — sign-in only
• Resend — sending the emails you have not turned off
• CollegeFootballData.com — schedules, scores, and betting lines. No personal data is ever sent to it
• Team news feeds — headlines on each team page are collected hourly from public RSS feeds published by fan sites, news outlets, and Google News. This app reads those feeds from its own server, and nothing about you is sent to them

One thing worth stating plainly, because it is the kind of detail policies usually leave out: story thumbnails and team logos are loaded straight from the publisher's or provider's own servers rather than copied onto this app's. So when a team page renders, your browser contacts those hosts directly and they can see your IP address — the same as if you had opened the article yourself. Those requests carry nothing that identifies your account, and this app cannot control what the other end logs.

Transactional email is on by default: pick reminders, weekly results, and league notices. Every one of them is individually switchable from your Profile page, and every one carries a one-click unsubscribe link. Turning all of them off is supported and will not break your account.

Account and league data is kept while your account exists. Ask for deletion and your account, picks, and chat messages are removed. Because standings are a shared record, deleting a mid-season account will change what other members of your leagues see.

• Turn off any or all email from the Profile page
• Leave a league at any time
• Request a copy of your data, or its deletion, by email
• Revoke this app's Google access from your Google account settings

Access is enforced at the database level with row-level security, so one league cannot read another's data even if the application layer has a bug. Traffic is encrypted in transit. That said, this is a beta run by one person — it is not audited, not certified, and you should not put anything sensitive into a league chat.

This app is not intended for children under 13, and accounts are not knowingly created for them.

If this policy changes in a way that affects what is collected or who can see it, the date at the top will change and material changes will be emailed to registered users.