The Picks Project is a free NFL pick'em and survivor pool platform at thepicksproject.com and in our mobile app, operated by nineteen87 LLC ("we", "us"), an Illinois limited liability company. This policy explains what personal information we collect, why, who else sees it, and what you can do about it. nineteen87 LLC is the controller of that information.

Questions, requests, or complaints: privacy@thepicksproject.com.

From your Google account, when you sign in

We only offer Google sign-in, so creating an account means Google shares a limited profile with us: your name, your email address, and your profile picture. We never see or store your Google password.

What you give us

• Profile details you choose to fill in: display name, username, location, phone number.
• Your communication preferences — whether you want pick reminder emails, and (when we launch it) text notifications.
• Anything you send us by email.

What you create by playing

• Your weekly picks, event picks, and survivor picks, and the results of them.
• The pools you create, join, or leave, and your standing in them.
• Achievements and an activity history of what you did and when.

What we record automatically

• A log of emails we have sent you: type, subject, and when.
• Your last sign-in time, kept to roughly the nearest hour.
• Aggregated, cookie-free page analytics from Vercel Web Analytics, plus anonymous counts of events like "someone clicked create pool". These are not linked to your account.
• Ordinary server and security logs kept by our hosting provider, which include IP addresses.

We do not collect payment information, we do not ask for a date of birth, and we do not track your precise location.

We do not use your personal information to make decisions about you by automated means that have legal or similarly significant effects.

This is a game you play with other people, so some of your information is deliberately public inside the product. Your display name, username, profile picture, location if you set one, your picks once a week's deadline has passed, your results, and your achievements are visible to other members of the pools you join, and on public leaderboards and profile pages.

Your email address and phone number are not shown to other players. If you would rather not be identifiable, use a display name and username that are not your real name — you can change both on your profile page.

We use a small number of strictly necessary cookies to keep you signed in and to protect sign-in forms, plus your browser's local storage to remember your theme. Our analytics are cookieless. We do not use advertising cookies or cross-site trackers.

The full list, cookie by cookie, is in our Cookie Policy.

We do not sell your personal information, and we do not share it for advertising. We do rely on a handful of vendors to run the platform. Each one only receives what it needs, and each is bound by its own contract with us.

We may also disclose information if the law requires it, to enforce our terms, or to protect the rights and safety of our users. If the platform is ever acquired or merged, account data would transfer as part of that business, and we would tell you before it happened.

We and our providers are based in the United States, and your information is stored and processed there. If you are in the UK, EEA, or Switzerland, that means your data is transferred outside your home country; our providers rely on Standard Contractual Clauses or equivalent safeguards for those transfers.

We keep your account information for as long as your account exists. Picks, pool history, and activity records are kept for the same period, because they are what the leaderboards and season history are made of.

When you delete your account, we delete your profile, sign-in records and sessions, all of your picks, your activity records, your email log, and your pool memberships. Pools that you created are deleted along with them. This happens immediately and cannot be undone. Backups held by our database provider roll off on that provider's own schedule, normally within 30 days.

Two things survive an account deletion by design: aggregate analytics, which were never tied to you in the first place, and records we are required to keep for legal or security reasons, such as abuse reports.

Stop the emails

Every email we send has an unsubscribe link in its footer, and it works without signing in. You can also turn "Communication emails" off on your profile page, or email support@thepicksproject.com and we will do it for you. We will still send occasional messages about your account's security or something that materially affects your account.

Delete your account

Go to your profile page and use Delete Account. You will see exactly how many records are about to be removed before you confirm.

Correct your information

Your display name, username, location, and phone number are editable on your profile page. Your name and email come from Google and change when you change them there.

Access, portability, objection, and restriction

Depending on where you live — in particular under UK/EU GDPR, and under California's CCPA as amended by the CPRA — you have the right to ask for a copy of the personal information we hold about you, to have it corrected or deleted, to object to or restrict certain processing, to withdraw consent, and to receive your data in a portable format. Email privacy@thepicksproject.com and we will respond within the time the applicable law allows, normally 30 days. Exercising these rights will never cost you anything or get you worse service. California residents: we do not sell or share personal information as those terms are defined by the CCPA, and we have not done so in the preceding 12 months.

If you are in the UK or EEA and think we have handled your data badly, you can complain to your national data protection authority. We would rather you told us first.

Traffic to the site is encrypted in transit, data is encrypted at rest by our database provider, sign-in is delegated to Google so we never hold a password, and access to production data is limited to people who need it. No system is perfectly secure; if a breach ever affects your personal information, we will notify you and the relevant regulators as the law requires.

This service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has created an account, email privacy@thepicksproject.com and we will delete it.

When we change this policy we will update the date at the top of the page. If a change materially affects how we use your personal information, we will tell you in the product or by email before it takes effect.

Privacy questions and rights requests: privacy@thepicksproject.com. Anything else: support@thepicksproject.com.