Small game, limited data.
This notice explains the information UNSPOOLS needs to run private prediction leagues and the controls available in your account.
What we store
- Your email address, display name and a password hash.
- Private-league memberships, predictions, awarded points and league settings.
- Short-lived verification and reset-token hashes, session state and abuse-prevention counters.
- Basic request information needed for security, reliability and rate limiting. UNSPOOLS does not build advertising profiles.
Why it is used
Data is used to authenticate you, keep each friend group private, lock and score predictions, operate leaderboards, recover accounts and protect the service from abuse.
Service providers
Production hosting is provided by Vercel, database storage by Neon and transactional account email by Resend. They process only the data required to deliver those services under their own security and privacy terms. UNSPOOLS does not sell personal data.
Cookies and local storage
An essential authentication cookie keeps you signed in. Your light, dark or system theme choice is stored locally in your browser. There are no advertising or cross-site tracking cookies.
Your controls
The Profile page lets you update your display name and password, revoke sessions, download a machine-readable copy of your account data and permanently delete a standard player account. Deleting an owner account also deletes the private leagues it owns. Administrator accounts must first be demoted through a controlled administrative operation before self-service deletion is available; this prevents the service from accidentally losing its administrator.
Retention and visibility
League data remains while the account or league exists. Expired verification and reset links cannot be used. Their records are removed when the associated account is deleted and may otherwise remain after expiry until a later cleanup operation. Expired abuse counters are eligible for best-effort, opportunistic cleanup and can remain longer in a serverless environment; their stored key is a keyed one-way identifier rather than the underlying network address. Your display name, calls and points are visible only to members of the same private league; other private leagues are not discoverable.