Privacy Policy

• Account information. When you sign up — by email and password, or with Google — we collect your email address, and the display name, username, and profile photo you provide or that Google shares. We never receive your Google password.
• Content you create. Your score predictions, the private leagues you create or join, and related activity (e.g. league membership and standings).
• Usage and device data. Basic technical information such as your browser type, approximate location from your IP address, and pages visited, used to operate and secure the service.

• To create and manage your account and authenticate you.
• To run the core product: scoring your predictions, computing standings, and operating leagues.
• To maintain security, prevent abuse, and debug problems.
• To communicate with you about your account or important service changes.

We do not sell your personal information.

We use cookies that are strictly necessary to keep you signed in (your authentication session) and to remember preferences such as your theme and language. We do not use advertising cookies.

We share data only with service providers that help us run Punditz, and only as needed:

• Supabase — authentication and database hosting (stores your account and content).
• Google — if you choose to sign in with Google.
• Hosting providers — Vercel (web) and Render (API) host the application.

We may also disclose information if required by law, or to protect the rights, safety, and security of Punditz and its users.

We keep your information for as long as your account is active. If you delete your account, we delete or anonymize your personal data, except where we must retain it to comply with legal obligations or resolve disputes.

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, contact us at support@punditz.app.

We use reasonable technical and organizational measures to protect your data, including encrypted connections and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Punditz is not directed to children under 13 (or the minimum age required in your country), and we do not knowingly collect their personal data. If you believe a child has provided us information, please contact us and we will delete it.

We may update this policy from time to time. When we do, we will revise the “Last updated” date above, and for material changes we will provide a more prominent notice.

Questions about this policy or your data? Email us at support@punditz.app.