Privacy policy
Last updated: Oct 8
Endzoned is a free pick'em run by one fan. This page explains what personal data we keep, why, who else handles it and what you can do about it, under the GDPR in Europe and the privacy laws of the US, the UK and Canada.
1. Who is responsible
Endzoned is published by Olivier Leonardi, a private individual living in France who runs it as a non-commercial fan project. He decides how your data is used (the “controller” under the GDPR). Contact: contact@endzoned.app. Full details are in the legal notice.
2. What we collect
Your account: email address, username, password (stored hashed, never readable), language, time zone, avatar, favorite teams and notification settings. If you sign in with Google or Apple, we receive your email address (with Apple, possibly a “Hide My Email” relay address), your account identifier with them and, if they share it, your name (and your picture with Google). We only keep the address and the identifier: the first name is only used to suggest a username. With Apple, we also keep the sign-in token Apple hands us, to revoke it when you delete your account. With a sign-in link by email, we only use your address. What you do in the game: picks, bonus answers, tier lists, brackets, Survivor and player-of-the-week picks, the groups you join, your franchise names, chat messages and reactions, achievements, and the feedback you send us. Referrals: if you sign up through another player's link, we record who invited you so they can earn their achievements (they only see your username); until you sign up, their link is kept for 30 days in an “nfl_ref” cookie. Supporter badge: the date it was granted, if you support the project and ask for it. Technical data: IP address and browser in your sessions and in the server logs, the push subscription of each browser where you turned on notifications, in the app the notification token of each device along with its platform (iOS or Android) and model (e.g. “iPhone 15”), and anonymous error reports.
3. Why we use it, and on what legal basis
• Running the game and your account (picks, scores, standings, groups, chat, account emails, the reminders you can turn off): to provide the service you signed up for (GDPR art. 6(1)(b)). • Keeping the site secure, fighting spam and abuse, moderating, fixing bugs (logs, error reports, moderation records): our legitimate interest in a safe, working site (art. 6(1)(f)). • Audience statistics: only if you accept them in the cookie banner (art. 6(1)(a)). You can change your mind at any time in the “Cookies” section below. • Supporter badge: because you asked for it (art. 6(1)(b)). We show no ads, build no advertising profile and never sell your data.
4. Who can see what
Other players see your username, avatar, favorite teams, franchise names, points, achievements, your Supporter badge if you have one and, once a game has kicked off, your picks for it. Nobody sees your picks for a game that has not started. Your email address is never shown to other players. Group chat is visible to the members of that group only.
5. Service providers
• Hetzner Online GmbH (Germany, EU) hosts our servers, the database and its backups. • OVH SAS (France, EU) sends our emails. • Umami, an open-source statistics tool we host ourselves on the same servers: it runs only if you accept statistics, sets no cookie and does not store your IP address. • DeepL SE (Germany, EU) machine-translates the bonus questions a group admin writes, so friends who play in another language can read them. Only the text of the question and of its answer choices is sent, never your name, your email address or anything else about you. • Your browser's push service (Google, Mozilla, Apple or Microsoft, depending on your browser) delivers notifications if you turn them on. They are encrypted, so the push service cannot read them. • Expo (650 Industries, Inc., USA) delivers the notifications of the Endzoned iOS and Android app, through Apple and Google: it receives your device's notification token and the text of each notification, never your email address or your password. • Google (Google LLC, USA / Google Ireland Ltd) and Apple (Apple Inc., USA / Apple Distribution International, Ireland), only if you choose “Continue with Google” or “Continue with Apple”: they verify your identity and send us your email address, possibly your name, and your account identifier. They are independent identity providers, bound by their own privacy policies; we send them nothing else, except the request to revoke the Apple token when you delete your account. The other providers only act on our instructions. We do not use any advertising or social media tracker.
6. Error tracking
To fix crashes we send technical error reports (message, stack trace, page URL without its parameters, browser version) to GlitchTip, an open-source tool we host ourselves in the EU. No cookie is set, your email address and your session are never included, and the reports are deleted after 90 days.
7. Data outside the EU
Our servers, database and emails stay in the EU. Scores, schedules and news are fetched by our server from ESPN's public feeds: no personal data is sent to ESPN that way. However, team logos, player photos and news pictures are loaded by your browser straight from ESPN's image servers (in the US), which therefore receive your IP address and browser details, like any website you visit. Other transfers only happen if you choose them: signing in with Google or Apple, turning on push notifications, or making a donation through the platform behind the Support button (for example Ko-fi). Each of these companies handles your data under its own privacy policy.
8. Cookies and local storage
We only use first-party cookies needed for the site to work: • the Better Auth session cookies (“better-auth.session_token” and a short-lived “better-auth.session_data” copy) keep you signed in, up to 30 days; • “nfl_lang” (language), “nfl_theme” (theme) and “nfl_tz” (time zone) remember your settings for one year; • “nfl_consent” remembers your cookie banner choice for six months; • “nfl_ref” keeps the referral link you arrived through, for 30 days or until you sign up; • “nfl_join” keeps the invite code of a group you opened before signing up, for 10 minutes, so you join it once your account exists; • “nfl_invited” remembers which group invited you during the guided tour, up to 30 days, and is deleted when the tour ends. Your browser's local storage also keeps a few settings: selected franchise, list density, folded sections, the teams chosen on the News page, the last chat message read, when you hid the Android beta card, and a marker so your time zone is only sent to your account once. They never leave your device. In the app: your session is kept in the iOS Keychain or the Android Keystore. The app's storage on your phone keeps your language, theme and team colors, your logo display choice, a cache of the latest data (24 hours at most, emptied when you sign out) so the app opens without a network, the last chat message read, an invite code opened before signing in, the notification token, which intro screens you have seen, and the referral link the app was opened with, for 30 days. No advertising or tracking cookie or identifier, ever.
Your statistics choice
You have not made a choice yet: statistics stay off until you accept them.
9. Retention
Account data is kept while your account exists. When you delete it (account page, “Danger zone”), it is erased immediately; your chat messages stay in their groups, signed “Deleted account”, and backup copies disappear within 30 days. An account whose email address was never verified is deleted after 30 days. Sessions (IP address, browser) are erased when they expire, server logs after 30 days, the history of sent emails and notifications after one year (one season), invitations 30 days after they expire, handled join requests and rejected feedback after 6 months, and push subscriptions that keep failing after 30 days. If an administrator suspends your account or excludes you from the Open League, the date and the reason are kept while the measure lasts, and in the moderation log for one year. The Supporter badge stays until you ask us to remove it or delete your account; the donation platform keeps its own records.
10. Your rights
You can access, rectify, export or delete your data, object to processing, and lodge a complaint with the CNIL. It all happens on your account page: “Your data” downloads everything we keep about you (JSON file, one export per hour) and “Danger zone” deletes your account for good. For anything else, or if your account is suspended, write to contact@endzoned.app. We answer within one month. You can also restrict processing and withdraw your consent to statistics at any time. The supervisory authority is the CNIL (France, cnil.fr), and you can also contact the authority of the country where you live.
11. Players in the US, the UK and Canada
United States (California and other states): you have the right to know what personal information we collect and why (this page), to get a copy, to have it corrected or deleted, and not to be treated differently for using these rights. We do not sell or share your personal information, we do not use it for targeted advertising and we collect no sensitive information. Endzoned is a small non-commercial project that is most likely below the thresholds of these laws, but these rights apply to everyone anyway. United Kingdom: you have the same rights under the UK GDPR and can complain to the ICO (ico.org.uk). Canada: you can access and correct your information and complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca). To use any of these rights, use your account page or write to contact@endzoned.app; someone acting for you can do it too if they show us they are allowed to.
12. Age
Endzoned is for people aged 13 and over. If you are younger, please do not sign up. If you are under the age of digital consent in your country (15 in France, for example), use Endzoned with a parent's okay. If we learn that an account belongs to someone under 13, we delete it. Parents can write to contact@endzoned.app.
13. Changes
We will update this page when what we do with your data changes, and change the date at the top. For an important change (a new purpose, a new kind of provider), we will also tell players on the site or by email before it applies. Advertising is not on the table today; if that ever changes, it will be announced here first and any ad tracking will need your consent.