Privacy Policy

1. Introduction

Pool Addicts ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform. By using Pool Addicts, you consent to the practices described in this policy.

2. Information We Collect

Information you provide

• Account information: full name, email address, and password when you create an account
• Date of birth: used to verify you meet the minimum age requirement (18+)
• Pool data: pool settings, picks, rankings, and predictions you submit
• Communications: messages you send through the Platform or to our support team

Information collected automatically

• Usage data: pages visited, features used, time spent on the Platform
• Device information: browser type, operating system, screen resolution
• IP address and approximate geolocation: derived from your IP address (city / region / country level) and used to enforce age and regional eligibility, prevent abuse, and meet legal obligations. We do not collect precise GPS-level location.
• Cookies and similar technologies: see our Cookie Notice for a full breakdown.

Eligibility verification

To comply with our age and geographic restrictions, we use your date-of-birth and IP-derived geolocation as eligibility signals. We may also, in limited circumstances, request additional identity information (for example, to investigate suspected fraud, multi-account abuse, or attempts to circumvent regional blocks). We do not perform formal Know-Your-Customer (KYC) checks because we do not handle pool money; however, we treat any identity information we do collect with the same care as other sensitive personal data described in this policy.

3. How We Use Your Information

• To create and manage your account
• To provide pool management and scoring functionality
• To process subscription payments (via Stripe)
• To send transactional emails (invitations, deadline reminders, scoring updates)
• To enforce age and geographic eligibility requirements
• To improve the Platform and develop new features
• To detect and prevent fraud, abuse, or security incidents
• To comply with legal obligations

4. Third-Party Services

We use the following third-party services to operate the Platform:

• Supabase: database hosting, user authentication, and real-time features (hosted in North America)
• Stripe: subscription payment processing. We do not store your credit card information — it is handled entirely by Stripe.
• Vercel: application hosting and content delivery
• Resend: transactional email delivery
• NHL API: publicly available sports data for scoring and standings (no personal data is shared)

Each third-party service operates under its own privacy policy. We encourage you to review their policies.

5. Data Sharing

We do not sell, rent, or trade your personal information to third parties. We may share information in the following circumstances:

• Within pools: your name and pool activity (picks, rankings, standings) are visible to other members of pools you join, subject to visibility settings configured by the pool admin
• Service providers: with third-party services listed above, solely to operate the Platform
• Legal, regulatory, and fraud-prevention purposes: we may share account information, geolocation, device data, and activity history with our legal advisors, auditors, third-party fraud-prevention and anti-abuse providers, law enforcement, regulators, and other competent authorities where we reasonably believe doing so is necessary to comply with applicable law (including anti-money-laundering laws), respond to lawful requests, enforce our Terms of Service, investigate suspected fraud or abuse, or protect the rights, property, or safety of Pool Addicts, our users, or the public
• Business transfers: if Pool Addicts is involved in a merger, acquisition, financing, reorganisation, bankruptcy, or sale of assets, personal information may be transferred as part of that transaction, subject to standard confidentiality obligations

6. Data Retention

We retain your account information for as long as your account is active. Pool data (picks, rankings, standings) is retained for the duration of the pool and for historical reference. If you delete your account, your personal information will be removed within 30 days. Some anonymized data may be retained for analytics purposes.

7. Your Rights

You have the right to:

• Access: request a copy of the personal information we hold about you
• Correction: update or correct inaccurate personal information
• Deletion: request deletion of your account and personal information
• Portability: request your data in a portable format
• Withdraw consent: withdraw consent for optional data processing at any time

To exercise any of these rights, contact us at privacy@pooladdicts.com.

8. Cookies

Pool Addicts uses essential cookies required for authentication and session management. These cookies are necessary for the Platform to function and cannot be disabled. We do not use advertising cookies or third-party behavioural tracking cookies. Full details, including third-party cookies set by services such as Stripe and Vercel, are available in our Cookie Notice.

9. Security

We implement appropriate technical and organizational measures to protect your personal information, including encryption in transit (HTTPS), secure authentication via Supabase Auth, and row-level security on our database. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

10. Children's Privacy

Pool Addicts is not intended for users under 18 years of age. We do not knowingly collect personal information from anyone under 18. If we become aware that we have collected information from a user under 18, we will take steps to delete that information promptly.

11. Canadian Privacy Law

Pool Addicts is operated from Canada and complies with the federal Personal Information Protection and Electronic Documents Act (PIPEDA). Canadian users have the right to access, correct, and request deletion of their personal information, and to withdraw consent for optional processing at any time. We collect and use personal information only for identified purposes with your knowledge and consent.

Residents of Québec. Pool Addicts also complies with Québec's Act respecting the protection of personal information in the private sector, as amended by Law 25. Our designated person responsible for the protection of personal information can be reached at privacy@pooladdicts.com. Québec residents may request a French-language version of this Privacy Policy at the same address.

12. United States — State Privacy Rights

Depending on your state of residence, you may have additional rights under laws such as the California Consumer Privacy Act (CCPA/CPRA), the Virginia Consumer Data Protection Act (VCDPA), the Colorado Privacy Act (CPA), or similar state privacy laws. These rights generally include the right to know what personal information we hold about you, to request access or deletion, to correct inaccuracies, to opt out of the sale or sharing of personal information for targeted advertising, and to be free from discrimination for exercising your rights.

Pool Addicts does not sell personal information and does not share personal information for cross-context behavioural advertising. To exercise any applicable state privacy right, contact privacy@pooladdicts.com. We will verify your identity using information already associated with your account before fulfilling a request.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the Platform or via email. Your continued use of the Platform after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at privacy@pooladdicts.com.