Privacy Policy
Last updated: October 2026
The short version. We collect what we need to run your account and your leagues. We don't sell your information, we don't show ads, and we don't use tracking or analytics cookies. You can delete your account at any time from Settings.
This policy explains what information PitchSide Footy ("we", "us") collects when you use pitchsidefooty.us (the "site"), how we use it, who we share it with, and the choices you have. Using the site means you've read this policy and our Terms of Use.
1. Information we collect
Information you give us
- Account details: your email address, the username you choose, and your password. Your password is stored only in scrambled (hashed) form; we can't see it.
- Two-factor login: if you turn it on, a link to your authenticator app, or one-time codes sent to your email.
- What you play: your predictions, weekly picks, draft teams, lineups, trades, mini-game scores and league settings.
- What you post: chat messages, GIFs you choose, profile pictures and league logos you upload, and the badges, titles and items you display.
- Support requests: what you write to us, plus the page you were on, your screen size and your browser, so we can see the problem.
- Reports: if you report a chat message, the report and a copy of the message.
Purchases
Payments for Premium and coins are handled by Stripe. Your card details go straight to Stripe and never reach us. We keep a record of what you bought, the amount, the date, and the Stripe customer and subscription IDs that link your account to its billing.
Information collected automatically
- Anti-abuse checks: to stop people creating many accounts to claim rewards more than once, we keep a one-way scrambled (hashed) form of your IP address and of a random ID stored in your browser. We can't turn these back into the original values.
- Service logs: our hosting and database providers keep standard technical logs, such as IP addresses and request times, for security and troubleshooting.
Cookies and browser storage
We don't use advertising, tracking or analytics cookies. The site stores a small amount of information in your browser that it needs to work:
- your login session, so you stay signed in;
- your preferences, such as light or dark mode and the tabs you last had open;
- when you were last active, so the site can sign you out after 30 minutes away;
- the random ID used for the anti-abuse check above.
The bot check on our sign-up and login forms (Cloudflare Turnstile) may also use browser storage to tell people from bots.
2. How we use your information
- to run your account, your leagues and the games, and to score them;
- to show your username, picture, badges and picks to the other players in your leagues, as the games require;
- to process purchases and Premium renewals;
- to send the emails the site needs to send, such as login codes, password resets, league invites and league updates;
- to keep the site safe: stopping cheating, spam, abuse and fake accounts, and acting on reports;
- to answer support requests and fix problems.
We don't sell your personal information, and we don't share it for advertising.
3. What other players can see
Your username, profile picture, badges, titles, displayed items and Trophy Room can be seen by other signed-in players. Messages you post in global chat can be seen by everyone signed in, and league chat by that league's members. Your predictions and picks can be seen by members of the leagues you play them in, as each game's rules allow. Your email address is never shown to other players.
4. Who we share it with
We use these service providers to run the site. Each one only gets the information it needs to do its job for us:
| Provider | What it does |
|---|---|
| Supabase | Database, login and file storage: holds your account and game data. |
| Vercel | Hosts and delivers the website. |
| Stripe | Takes payments and manages Premium renewals. |
| Resend | Sends the site's emails. |
| Cloudflare Turnstile | Checks that sign-ups and logins come from people, not bots. |
| GIPHY | GIF search in chat. When you search for a GIF, your search goes to GIPHY. |
| API-Football | Football results and data. Player photos and club crests load from its servers. |
| Google Fonts | Supplies the site's fonts. |
When your browser loads GIFs, player photos, crests or fonts from these services, they receive your IP address, as any website you load files from does. We may also share information if the law requires it, to protect people's safety, or if the site is ever transferred to someone else, in which case this policy would continue to apply.
5. How long we keep it
- Your account and game data: until you delete your account.
- Chat messages: deleted automatically 48 hours after they're posted. A copy of a reported message is kept while we review the report, and for 90 days after.
- Support requests: until you delete your account.
- Payment records: Stripe keeps its own records of payments as the law requires, even after you delete your account.
6. Your choices and rights
- See and change your information: most of it is in your profile and Settings. For anything else, contact us.
- Delete your account: go to Settings and choose Delete my account. This deletes your account and the information linked to it, and cancels any Premium renewal. Leagues you own are handed to another member, or deleted if no one else is in them.
- Emails: login codes, password resets and similar emails are part of the service. If you don't want league update emails, contact us.
- Do Not Track: we don't track you across other sites, so there's nothing for a Do Not Track signal to switch off.
California residents: you have the right to know what personal information we collect and how we use it (this policy), to ask for a copy of it, to have it corrected or deleted, and not to be treated differently for using these rights. We don't sell or share personal information as California law defines those terms. To make a request, use Delete my account or contact us below.
7. Children
PitchSide Footy is not for children under 13. You must be 13 or older to create an account. We don't knowingly collect information from children under 13. If we find out that we have, we'll delete that account and its information. If you believe a child under 13 has signed up, please contact us.
If you're under 18, you need a parent or guardian's permission to buy Premium or coins.
8. Security
We protect your information with encrypted connections (HTTPS), hashed passwords, optional two-factor login, and database rules that let each player see and change only what they're allowed to. No website can be perfectly secure, so please use a strong password that you don't use anywhere else.
9. Where your information is processed
PitchSide Footy is run from the United States. Our providers may store and process information in the United States and in other countries.
10. Changes to this policy
If we change this policy, we'll update the date at the top. If a change is significant, we'll let you know on the site before it takes effect.
11. Contact us
Questions or requests about your privacy: email support@pitchsidefooty.us, or use Contact support on the site.