Legal

Privacy policy

Last updated: August 16, 2026

FFSurvivor is alpha software, provided as is. Features and data handling may change while we build. If anything in this policy matters to your decision to use the site, email us before you sign up.

Who we are

FFSurvivor is a free decision-support tool for NFL survivor pools. This policy explains what we collect when you use the site at ffsurvivor.com, why we collect it, and what you can do about it. It covers the website and nothing else.

What we collect

We keep the set small on purpose. There are three groups.

Account profile, from Auth0: You sign in through Auth0, our identity provider. When you do, we receive and store your email address, your name as it appears on the account you signed in with, your avatar image URL, and the identifier Auth0 uses for you. We never see or store your password.
Pool and pick data: The pools you create, their week-by-week settings, the picks you make or plan, any win probability overrides you enter, and the simulation runs you start. This is the content of the product, and it is stored against your account so it is there when you come back.
Technical logs: Our servers record ordinary request logs: IP address, browser user agent, the page requested, and a timestamp. We use these to keep the site running and to debug errors.

We do not collect payment details, because FFSurvivor is free. We do not ask for a physical address or a phone number. We do not buy data about you from anyone.

How we use it

To sign you in and keep you signed in.
To show you your pools, picks, and simulation results, and to keep them separate from other users' data.
To run the simulations you request and cache their results so a repeated run is fast.
To send you occasional service email about your account or a significant change to the product. We do not send marketing email.
To find and fix bugs, and to understand load so the site stays up.

We do not sell your personal information, and we do not share it with advertisers.

Third parties we rely on

Running FFSurvivor takes a few outside services. Each one is listed here with what it sees.

Auth0 (Okta): Handles sign-in. Auth0 receives your login credentials and holds your identity profile. Their privacy terms govern what happens on their side.
The Odds API: Supplies NFL moneyline odds on a daily schedule. Requests go out from our servers on a timer and contain no information about you. The Odds API never receives your data.
Hosting and storage: Our application servers, database, and static image storage are run by cloud infrastructure providers on our behalf. They process data only to host the service.

Cookies and session

FFSurvivor sets one cookie: a signed session cookie that records that you are logged in and carries the token that protects forms against cross-site request forgery. It is required for the site to work, and clearing it signs you out.

We do not run advertising cookies, third-party trackers, or cross-site analytics pixels. Auth0 may set its own cookies on its own domain during the sign-in redirect.

Retention and deletion

We keep your account and pool data for as long as your account exists. Request logs are kept for a short operational window and then rotated out. Cached simulation results are discarded when the inputs behind them change.

You can ask us to delete your account at any time by emailing support@ffsurvivor.com from the address on your account. We will remove your profile, pools, picks, and overrides. Deletion is permanent and we cannot restore the data afterward. You should also delete your Auth0 login separately if you want it gone from their side too. If you would rather have a copy of your data than delete it, ask and we will send it to you.

Security

Traffic runs over HTTPS, sessions are signed, and authentication is delegated to Auth0 so we never hold a password. That said, FFSurvivor is an alpha project run by a small team. No service can promise perfect security, and you should not store anything sensitive here beyond your survivor picks.

Children

FFSurvivor is not directed at children and is not intended for anyone under 13. If you believe a child has created an account, contact us and we will delete it.

Changes to this policy

The product is moving quickly, so this policy will change. When it does we update the date at the top of this page. If a change materially affects what we collect or how we use it, we will tell account holders by email before it takes effect.

Contact

Questions, deletion requests, or anything else about privacy go to support@ffsurvivor.com. We read every message.