Privacy

Draft, pending legal review before launch.

Seven Rounds collects what you give us to run your account and the games, plus limited, privacy-first analytics and error reports. We don't sell your personal information or share it for advertising, and there are no ads. You can delete your account and its data at any time in Settings.

What we collect

  • Your email address and how you signed in (Google, Apple or an emailed code). We never receive your password.
  • The display name and favorite team you choose.
  • What you create: mocks, boards, contest entries, pick'em and survivor picks, leagues and league settings.
  • Whether you opted in to marketing email, and when.
  • For signed-in users, the dates you used the app (one record per day, nothing else), to count weekly active and returning users.
  • Anonymous page views and page-speed data (Vercel Web Analytics and Speed Insights): no cookies, nothing that identifies you. Query strings are removed and league ids, share links and invite codes are replaced with a placeholder before anything is sent.
  • When you open an article or play a video or podcast from a feed, a daily count per item (not linked to you). To stop scripts inflating those counts, your IP address is stored only as a salted hash (it can't be turned back into the address) for up to 2 days, then deleted.
  • Error reports (Sentry) when something breaks: the error, the page and browser details, with no IP address, cookies, request contents or user identity.

Cookies

Only the ones the app needs: sign-in session cookies, preferences (favorite team, theme), and one that holds today's date so activity is recorded at most once a day, and a session cookie listing the feed items you opened in this browser session so each is counted once. No advertising or cross-site tracking cookies.

How we use it

To run your account, contests and leagues; to send sign-in codes and reminders for leagues you joined; to send marketing email only if you opted in (every one has an unsubscribe link); and to understand usage in aggregate and fix errors and slow pages.

What others can see

League members see your display name, standings, and your picks once each game kicks off. Anyone with a share link you create sees that content and your display name. Your email is never shown to other users.

Service providers

Supabase (database and sign-in), Vercel (hosting, Web Analytics, Speed Insights), Sentry (error monitoring), Mailgun (sign-in and service email), Customer.io (marketing email), GitHub (scheduled data jobs), and Google or Apple if you sign in with them. They process data on our behalf. We never sell your personal information.

Keeping and deleting data

Your data stays until you delete your account in Settings, which removes it from our database right away (leagues you commission pass to their longest-standing member). Salted IP hashes used for feed counts are deleted after at most 2 days. Database backups are kept for up to 7 days; email providers keep delivery logs for a limited time.

Children

Seven Rounds isn't for children under 13, and we don't knowingly collect their information.