Privacy

Fieldhouse is a private app for running NFL pools between friends. It keeps the minimum it needs to do that: who you are, which leagues you are in, and what you picked. There is no advertising, no analytics, no tracking, and nothing is sold or shared with anyone outside the companies that host it.

You can delete your account yourself, from your account page, and it takes your picks with it.

• —Your profile. Your name, your email address, and — if you sign in with Google — the URL of the profile picture Google publishes for you. Nothing else comes across from Google, and no picture file is copied here.
• —A Venmo or PayPal handle, if you give one. Optional and blank by default. Their only job is to let a pool pay you when you win, and — if you run a league — to say where its entry fees should be sent. No payment ever runs through this app.
• —Your leagues. Which leagues you belong to, the name you go by inside each one, whether you are a commissioner, whether the commissioner has marked you as paid, and any note they left with that.
• —Your picks and results. Every pick you make, when you made it, when it was last changed, whether it won, and any correction a commissioner applied to it. Season results and a champions board keep the winner’s name.
• —Commissioner actions. An audit log of things commissioners do — posting a card, changing a line, marking someone paid, overriding a result, adding or removing a member.
• —Notification subscriptions. Only if you switch them on: a push endpoint URL for each browser you register, the two keys that browser needs for the message to be encrypted, a short description of the device from its user-agent string, and which kinds of reminder you want. A record of which reminders were already sent to you is kept so you are not told the same thing twice.
• —Feedback you send. Only if you use the feedback form: what you wrote, any screenshots you attached, which league you named, and — captured without being asked for, so that “it’s broken” is still actionable — the screen you came from, the few screens before it, the build you were on and your browser’s user-agent string. Screenshots are kept in private storage and are never public; the reports are kept, so a fixed bug has a record of having been reported.
• —One preference cookie. fh_theme remembers whether you chose the light or dark edition. It is not an identifier and is not sent anywhere.

There is no location data, no contacts, no address book, no phone number, and no payment information, because none of it is asked for.

• —Other members of your leagues. Your name, and your picks once the league reveals them. A league that keeps cards face down until kickoff keeps them face down here too — including in notifications.
• —Your commissioners. Everything above for their league, plus whether you have paid, plus the ability to open your card before the rest of the league can see it.
• —That last one is written down. When a commissioner opens a named player’s card while any of it is still sealed from the league, the audit log records it: who looked, whose card, which week, and how many picks were still secret. Reading a sealed card is a deliberate act with a receipt, not a quiet one.
• —Whoever runs the site. A site administrator can see the list of accounts and leagues, and can delete either. They are not automatically a commissioner of any league.
• —Feedback you send is read. That is the point of sending it. Whoever runs the site sees every report; if you name a league on the form, that league’s commissioners see it too. Screenshots follow the same rule and are served only to those people, signed in — the storage they sit in is private and there is no public link to them.
• —Nobody else. Leagues are separate. Someone in one league sees nothing about a league you are in that they are not.

• —No analytics, of any kind. No page-view counting, no session recording.
• —No advertising and no ad networks.
• —No third-party trackers, tag managers, pixels or embedded widgets.
• —Nothing is sold, rented, or handed to a data broker.
• —No profiling, no scoring you as a customer, no automated decisions about you.
• —No marketing email. The only email this app sends you is a sign-in link you asked for. Sending a feedback report mails the report to whoever runs the site, and nothing else does.

Fieldhouse runs on other people’s computers, and those companies necessarily hold some of this. There are five, and no others.

• —Supabase. The database and the sign-in system. Everything described above is stored there, along with your authentication record — your email address, and the sign-in links or Google connection attached to it. Supabase sends the sign-in emails.
• —Vercel. Hosting. Vercel handles every request and keeps ordinary server logs, which include IP addresses and the URLs requested, for a short period.
• —Google. Only if you choose “Continue with Google”. Google tells this app your email, your name, and your profile picture URL, and knows that you signed in here.
• —Resend. Only if you send a feedback report. The report is emailed to whoever runs the site, so Resend handles that message — your name, your email address as the reply-to, and what you wrote. Screenshots are linked rather than attached, so the picture itself never goes through the mail.
• —Your browser’s push service. Only if you turn on notifications. That is Apple, Google or Mozilla, depending on the browser. They deliver the notification and can see that a message was sent to your device; the contents are encrypted to your browser and never contain anyone’s picks.

Scores come from ESPN’s public scoreboard. That is a request going out for game results, and it carries nothing about you.

Data is kept for as long as your account exists, because a pool is a record of seasons and last year’s standings are the point of having them.

• —Delete your own account. Your account page has a delete option. It shows what will go, in numbers, before you confirm it. It removes your profile, your memberships, your entries, every pick and result attached to them, and every notification device you registered.
• —It cannot be undone. There is no undelete and no grace period. Your history is gone, not hidden.
• —Two things survive on purpose. The audit log keeps what commissioners did, with your name taken off it, so a league’s record of its own decisions does not disappear with a person. A champions board keeps the name of whoever won a season, because that is the league’s history rather than your account.
• —Signing in again gives you a new, empty account. The sign-in record at Supabase is separate from your Fieldhouse profile, and deleting your account here does not delete it there. If you sign in again with the same email you get a fresh, empty profile — not your old one back. To have the sign-in record removed too, ask.
• —Leaving one league. Deleting your account is all-or-nothing. To leave a single league and stay in the others, ask that league’s commissioner to remove you.
• —A copy of your data. Your account page has a download link. It gives you one JSON file holding your profile, every league you are in and your standing in it, every pick you have made and how it went, your notification settings and devices, any feedback you have sent, and the audit rows recording what you did as a commissioner. It contains nobody else’s picks — not even ones a league has already revealed — and none of a league’s own settings or invite codes, because those belong to the league rather than to you. If something you expected is not in it, ask.

Sign-in is handled by Supabase; there is no password to steal because there is no password. Every request that touches a league checks your membership on the server, and hiding a button is never treated as the thing that stops someone. Connections are encrypted in transit.

This is a pool app run by one person for a few dozen friends, not a bank. It is built carefully, and it is not audited or certified by anyone.

If this changes, the date under the headline changes with it. There is no mailing list to announce it on.

Questions, corrections, a copy of your data, or a request to remove the sign-in record as well — hello@fieldhousepools.com.