Privacy policy

Who we are

FFSurvivor is a free decision-support tool for NFL survivor pools. This policy explains what we collect when you use the site at ffsurvivor.com, why we collect it, and what you can do about it. It covers the website and nothing else.

What we collect

We keep the set small on purpose. There are three groups.

Account profile, from Auth0

You sign in through Auth0, our identity provider. When you do, we receive and store your email address, your name as it appears on the account you signed in with, your avatar image URL, and the identifier Auth0 uses for you. We never see or store your password.

Pool and pick data

The pools you create, their week-by-week settings, the picks you make or plan, any win probability overrides you enter, and the simulation runs you start. This is the content of the product, and it is stored against your account so it is there when you come back.

Technical logs

Our servers record ordinary request logs: IP address, browser user agent, the page requested, and a timestamp. We use these to keep the site running and to debug errors.

We do not collect payment details, because FFSurvivor is free during the beta. When paid plans launch, this policy will be updated before any payment is taken. We do not ask for a physical address or a phone number. We do not buy data about you from anyone.

How we use it

• To sign you in and keep you signed in.
• To show you your pools, picks, and simulation results, and to keep them separate from other users' data.
• To run the simulations you request and cache their results so a repeated run is fast.
• To send you occasional service email about your account or a significant change to the product. We do not send marketing email.
• To find and fix bugs, and to understand load so the site stays up.

We do not sell your personal information. We do not hand your account profile, your pools, or your picks to an advertiser. We do show ads, and the ad network that fills them collects its own data about your visit — see advertising and affiliate links below for exactly what that means.

Third parties we rely on

Running FFSurvivor takes a few outside services. Each one is listed here with what it sees.

Auth0 (Okta)

Handles sign-in. Auth0 receives your login credentials and holds your identity profile. Their privacy terms govern what happens on their side.

The Odds API

Supplies NFL moneyline odds on a daily schedule. Requests go out from our servers on a timer and contain no information about you. The Odds API never receives your data.

Google AdSense

Serves the ads on our blog pages. Google's script runs in your browser on those pages and receives your IP address, user agent, and the page you are reading, and may set or read its own cookies and advertising identifiers. We do not send it your email address, your account profile, or anything about your pools and picks.

Sportsbook affiliate partners

Some placements are our own HTML linking to a sportsbook with a referral tag. Nothing loads from the sportsbook and nothing is sent until you click; if you do, they see the referral and their own privacy policy takes over from there.

Hosting and storage

Our application servers, database, and static image storage are run by cloud infrastructure providers on our behalf. They process data only to host the service.

Cookies and session

FFSurvivor itself sets one cookie: a signed session cookie that records that you are logged in and carries the token that protects forms against cross-site request forgery. It is required for the site to work, and clearing it signs you out.

On the blog pages, Google AdSense may set advertising cookies or use similar identifiers to choose and measure ads. We run no analytics product and no tracking pixel of our own, and the ad script is not loaded on the rest of the site. Auth0 may set its own cookies on its own domain during the sign-in redirect.

You can turn off personalized advertising for your Google account at My Ad Center, and read how Google uses data from sites that use its products at policies.google.com/technologies/partner-sites. Blocking cookies in your browser also works; nothing on FFSurvivor depends on an advertising cookie.

Advertising and affiliate links

FFSurvivor is free during the beta, and ads are how it pays for itself. There are two kinds, and they behave differently.

Ads on the blog

Filled by Google AdSense, which means Google's code runs on those pages and may use cookies or advertising identifiers as described above. Where the law requires consent we serve non-personalized ads instead, using Google's own consent tooling.

Partner offers elsewhere on the site

Written and served by us, with no third-party code involved. When one links to a sportsbook it carries a referral tag, and we may earn a commission if you sign up. Every paid placement on the site is labelled "Ad" and names the advertiser.

A placement is never an endorsement, and being paid does not buy anyone a mention in our analysis. Sports betting is legal only in some states and only for adults — sportsbook offers are for people 21 or older in an eligible state. If gambling is a problem for you or someone you know, call 1-800-GAMBLER.

Retention and deletion

We keep your account and pool data for as long as your account exists. Request logs are kept for a short operational window and then rotated out. Cached simulation results are discarded when the inputs behind them change.

You can ask us to delete your account at any time by emailing support@ffsurvivor.com from the address on your account. We will remove your profile, pools, picks, and overrides. Deletion is permanent and we cannot restore the data afterward. You should also delete your Auth0 login separately if you want it gone from their side too. If you would rather have a copy of your data than delete it, ask and we will send it to you.

Security

Traffic runs over HTTPS, sessions are signed, and authentication is delegated to Auth0 so we never hold a password. That said, FFSurvivor is a beta project run by a small team. No service can promise perfect security, and you should not store anything sensitive here beyond your survivor picks.

Children

FFSurvivor is not directed at children and is not intended for anyone under 13. If you believe a child has created an account, contact us and we will delete it.

Changes to this policy

The product is moving quickly, so this policy will change. When it does we update the date at the top of this page. If a change materially affects what we collect or how we use it, we will tell account holders by email before it takes effect.

Contact

Questions, deletion requests, or anything else about privacy go to support@ffsurvivor.com. We read every message.

See also our terms of service .