Privacy Policy

What we collect

Your account, created when you first sign in:

• Your email address, from the account you sign in with.
• Your display name, which is shown to other members of your leagues.
• An account identifier from Microsoft Entra External ID, the sign-in service. It is what links your sign-in to your data here.
• The date you joined.

What you do in the app:

• The picks you make, when you made or changed them, and whether they were correct.
• The leagues and seasons you belong to, when you joined them, and any league you created.

Feedback, if you send any. Alongside your message we also record:

• The screen you were on when you opened the feedback form.
• Your browser and device type, taken from your browser rather than typed by you. It is the detail that makes a bug report reproducible.

Pick reminders, only if you turn them on for a device. We store that device's push subscription: an address issued by your browser's notification service, and the keys that encrypt what is sent to it. It identifies the device to that service, not to us, and we keep it only until you turn reminders off, sign out on that device, or delete your account. We also record which reminders were sent, so none is sent twice.

Ordinary server logs, kept by the services that host the app. These include your IP address and the requests your browser made, and are used to keep the app running and secure.

If something breaks in your browser, a report of what went wrong: the error message, the technical trace that goes with it, the screen you were on, and your browser and device type. It is sent automatically rather than at your request, because an app that fails silently stays broken. It carries no name, no email, and nothing you typed.

A count of page views, so we can tell whether anyone is using the app. Vercel records the page, where you arrived from, and your rough location and device type. It sets no cookie, stores no name or email against it, and cannot follow you to other sites. It is a tally of visits, not a profile of you, and it is not linked to your account.

What we do not do

• We run no advertising. We do count page views, described above — no cookie, no profile, and nothing that follows you off this site.
• We use no third-party trackers, tracking pixels, or advertising cookies.
• We never sell your personal data, and we never share it for advertising.
• We set one cookie of our own, which keeps you signed in. There is nothing else to consent to, which is why this app has no cookie banner.
• The app stores its own files on your device so it works offline, and remembers on the device if you said “Not now” to reminders. That is app code and one preference, not a record of you, and clearing your browser data removes it.

How your data is used

To run the app, and nothing else: to sign you in, to record your picks, to score them, to show leaderboards to the other members of your leagues, to answer feedback you send, and to keep the service working and secure.

Other members of a league you join can see your display name, the picks you have made in that league once they are revealed, and your record in its standings. Picks stay hidden from other members until the game they are on has started.

Who else processes your data

The app runs on services that necessarily handle this data on our behalf:

• Microsoft Entra External ID — sign-in. Your email address and display name live in that directory, which is what you actually sign in to.
• Microsoft Azure — the application server and the database, in the East US 2 region.
• Vercel — serving the website itself, and the page-view count described above.
• Your browser's notification service — only if you turn on pick reminders. Reminders reach your device through the service your browser or phone uses for notifications (Google for Chrome and Android, Apple for Safari and iPhone, Mozilla for Firefox). What we send it is encrypted for your device: it carries the reminder, never your email or picks.

Each of these keeps its own operational logs of the requests it handles. Your data is stored in the United States. There are no other recipients.

How long we keep it

Your account and the data listed above are kept for as long as your account exists. When data is deleted from the database, encrypted backups may still contain it for up to 7 days, after which those copies expire on their own.

Your choices

You can delete your account yourself, at any time, from your profile screen. It takes effect immediately and cannot be undone.

Deleting removes your email address and your name from your account, and erases the reminder subscriptions of every device you turned reminders on for. Your past picks and results remain in the leagues you played, shown as “Deleted user” rather than under your name, so that the seasons other members played still add up. Any league you run passes to its longest-standing member; a league nobody else has joined is deleted along with the picks in it.

Your sign-in account is not deleted by this, because it does not belong to VersusPicks — it lives with Microsoft, holds your email address and name, and is what you would use to sign in again. Signing in again after deleting starts a new account with no history. To remove the sign-in account itself, contact Microsoft.

You can also ask for a copy of what is held about you, ask for a correction, or ask us to delete your account for you, by emailing info@versuspicks.com. You do not need to be able to sign in to make a request, and we will respond within 30 days.

Children

VersusPicks is not intended for children under 13, and accounts are not knowingly created for them. If you believe a child under 13 has an account, email us and it will be removed.

Changes to this policy

If this policy changes, the date at the top changes with it. If a change materially affects what is collected or who receives it, we will say so in the app rather than relying on you to re-read this page.

Contact

Questions about privacy, or a request about your data, go to info@versuspicks.com.