Privacy

Fieldhouse is a private app for running NFL pools between friends. It keeps the minimum it needs to do that: who you are, which leagues you are in, and what you picked. There is no advertising, no analytics, no tracking, and nothing is sold or shared with anyone outside the companies that host it.

You can delete your account yourself, from your account page, and it takes your picks with it.

• —Your profile. Your name, your email address, and — if you sign in with Google — the URL of the profile picture Google publishes for you. Nothing else comes across from Google, and no picture file is copied here.
• —A Venmo or PayPal handle, if you give one. Optional and blank by default. Their only job is to let a pool pay you when you win, and — if you run a league — to say where its entry fees should be sent. No payment ever runs through this app.
• —Your leagues. Which leagues you belong to, the name you go by inside each one, whether you are a commissioner, whether the commissioner has marked you as paid, and any note they left with that.
• —Your picks and results. Every pick you make, when you made it, when it was last changed, whether it won, and any correction a commissioner applied to it. Season results and a champions board keep the winner’s name.
• —Commissioner actions. An audit log of things commissioners do — posting a card, changing a line, marking someone paid, overriding a result, adding or removing a member.
• —Notification subscriptions. Only if you switch them on: a push endpoint URL for each browser you register, the two keys that browser needs for the message to be encrypted, a short description of the device from its user-agent string, and which kinds of reminder you want. A record of which reminders were already sent to you is kept so you are not told the same thing twice.
• —One preference cookie. fh_theme remembers whether you chose the light or dark edition. It is not an identifier and is not sent anywhere.

There is no location data, no contacts, no address book, no phone number, and no payment information, because none of it is asked for.

• —Other members of your leagues. Your name, and your picks once the league reveals them. A league that keeps cards face down until kickoff keeps them face down here too — including in notifications.
• —Your commissioners. Everything above for their league, plus whether you have paid, plus the ability to open your card before the rest of the league can see it.
• —That last one is written down. When a commissioner opens a named player’s card while any of it is still sealed from the league, the audit log records it: who looked, whose card, which week, and how many picks were still secret. Reading a sealed card is a deliberate act with a receipt, not a quiet one.
• —Whoever runs the site. A site administrator can see the list of accounts and leagues, and can delete either. They are not automatically a commissioner of any league.
• —Nobody else. Leagues are separate. Someone in one league sees nothing about a league you are in that they are not.

• —No analytics, of any kind. No page-view counting, no session recording.
• —No advertising and no ad networks.
• —No third-party trackers, tag managers, pixels or embedded widgets.
• —Nothing is sold, rented, or handed to a data broker.
• —No profiling, no scoring you as a customer, no automated decisions about you.
• —No marketing email. The only email this app causes is a sign-in link you asked for.

Fieldhouse runs on other people’s computers, and those companies necessarily hold some of this. There are four, and no others.

• —Supabase. The database and the sign-in system. Everything described above is stored there, along with your authentication record — your email address, and the sign-in links or Google connection attached to it. Supabase sends the sign-in emails.
• —Vercel. Hosting. Vercel handles every request and keeps ordinary server logs, which include IP addresses and the URLs requested, for a short period.
• —Google. Only if you choose “Continue with Google”. Google tells this app your email, your name, and your profile picture URL, and knows that you signed in here.
• —Your browser’s push service. Only if you turn on notifications. That is Apple, Google or Mozilla, depending on the browser. They deliver the notification and can see that a message was sent to your device; the contents are encrypted to your browser and never contain anyone’s picks.

Scores come from ESPN’s public scoreboard. That is a request going out for game results, and it carries nothing about you.

Data is kept for as long as your account exists, because a pool is a record of seasons and last year’s standings are the point of having them.

• —Delete your own account. Your account page has a delete option. It shows what will go, in numbers, before you confirm it. It removes your profile, your memberships, your entries, every pick and result attached to them, and every notification device you registered.
• —It cannot be undone. There is no undelete and no grace period. Your history is gone, not hidden.
• —Two things survive on purpose. The audit log keeps what commissioners did, with your name taken off it, so a league’s record of its own decisions does not disappear with a person. A champions board keeps the name of whoever won a season, because that is the league’s history rather than your account.
• —Signing in again gives you a new, empty account. The sign-in record at Supabase is separate from your Fieldhouse profile, and deleting your account here does not delete it there. If you sign in again with the same email you get a fresh, empty profile — not your old one back. To have the sign-in record removed too, ask.
• —Leaving one league. Deleting your account is all-or-nothing. To leave a single league and stay in the others, ask that league’s commissioner to remove you.
• —A copy of your data. Ask and you will get one. There is no self-serve export yet.

Sign-in is handled by Supabase; there is no password to steal because there is no password. Every request that touches a league checks your membership on the server, and hiding a button is never treated as the thing that stops someone. Connections are encrypted in transit.

This is a pool app run by one person for a few dozen friends, not a bank. It is built carefully, and it is not audited or certified by anyone.

If this changes, the date under the headline changes with it. There is no mailing list to announce it on.

Questions, corrections, a copy of your data, or a request to remove the sign-in record as well — hello@fieldhousepools.com.