Privacy policy
Last updated: Sep 23
Endzoned is a free, ad-free fan project. This page explains which personal data we process, why, and what your rights are under the GDPR.
Data controller
The site is published by Olivier Leonardi (France). Contact: nflpredictions@olileo.fr.
Data we collect
Account: email address, username, password (stored hashed), preferred language, optional avatar and favorite teams. Activity: your picks, bonus answers, group memberships, chat messages and achievements. Technical: IP address and user agent in server logs and session records, kept to secure the service.
Why we process it
To run the game (scores, standings, groups), to authenticate you, to send transactional emails (account verification, password reset, pick reminders you can disable), and to keep the service secure. The legal basis is the performance of the service you asked for and our legitimate interest in keeping it safe.
Who can see what
Your username, avatar, favorite teams, points, achievements and, once a game has started, your picks are visible to other players. Your email address is never shown to other players. We do not sell or share your data with advertisers.
Third parties
The site is hosted on Hetzner servers in Germany (EU). Emails are sent through OVH (France). Team logos, scores and news are loaded from ESPN, whose servers may receive your IP address when your browser fetches those images. If analytics are enabled, we use a privacy-friendly, cookie-less tool hosted by us.
Cookies
We only use strictly necessary cookies: your session, your language, your theme and your time zone. No advertising or tracking cookies.
Retention
Account data is kept while your account exists. When you delete it (account page, “Danger zone”), it is erased immediately; your chat messages stay in their groups, signed “Deleted account”, and backup copies disappear within 30 days. An account whose email address was never verified is deleted after 30 days. Sessions (IP address, browser) are erased when they expire, server logs after 30 days, the history of sent emails and notifications after one year (one season), invitations 30 days after they expire, handled join requests and rejected feedback after 6 months, and push subscriptions that keep failing after 30 days. If an administrator suspends your account or excludes you from the open league, the date and the reason are kept while the measure lasts, and in the moderation log for one year.
Your rights
You can access, rectify, export or delete your data, object to processing, and lodge a complaint with the CNIL. It all happens on your account page: “Your data” downloads everything we keep about you (JSON file, one export per hour) and “Danger zone” deletes your account for good. For anything else, or if your account is suspended, write to nflpredictions@olileo.fr. We answer within one month.
Minors
The service is intended for people aged 15 and over.
Error tracking
To fix crashes we send technical error reports (message, stack trace, page URL without its parameters, browser version) to GlitchTip, an open-source tool we host ourselves in the EU. No cookie is set, your email address and your session are never included, and the reports are deleted after 90 days.