Privacy Policy
This policy explains what Pool Duel collects, why we collect it, who helps us operate the service, and the choices available to you.
Effective and last updated: July 18, 2026Who is responsible
Pool Duel is founded and operated by Ryan Hache in Kitchener, Ontario, Canada. In this policy, “Pool Duel,” “we,” “us,” and “our” refer to the Pool Duel service and its operator.
Privacy questions, access requests, correction requests, and deletion requests can be sent to support@poolduel.app.
Information we collect
- Account information: email address, account identifiers, authentication status, and password-reset activity. Passwords are processed by our authentication provider and are not available to Pool Duel in readable form.
- Profile information: your chosen username, profile photo, and any other profile details you voluntarily provide.
- Contest information: pools you create or join, entry names, lineups, picks, commissioner settings, invitations, and contest activity.
- Usage and technical information: sign-in and activity timestamps, registration source, referring page, browser or device information, IP address, and security or server logs generated when you use the service.
- Communications: messages and information you send when you contact support.
How we use information
- Provide accounts, profiles, private pools, lineups, live scoring, ownership percentages, standings, and commissioner tools.
- Authenticate users, preserve sessions, recover accounts, and prevent unauthorized access.
- Remember which pools you created, joined, or followed and complete an invite flow after email confirmation.
- Operate, troubleshoot, secure, and improve Pool Duel, including aggregated product analytics.
- Send transactional messages such as confirmation, recovery, and service emails.
- Comply with law, enforce our Terms of Use, and protect users and the service.
Public and pool-visible data
Your username, profile photo, entry name, lineup, score, and contest activity may be visible to people who can access the relevant pool. Salary-draft lineups are designed to remain hidden from competing entrants and commissioners until the lineup lock, then become visible for scoring and standings.
Do not use a username or upload a photo that you do not want other pool participants to see.
Service providers
We use service providers only as needed to operate Pool Duel. These currently include Supabase for authentication, database, and file storage; Vercel for application hosting and delivery; and Resend or another email provider for service emails. Sports-data providers supply event, player, and scoring information but do not need your Pool Duel account password.
These providers process information under their own terms and privacy commitments, and information may be processed outside your province or country.
Cookies and sessions
Pool Duel uses essential browser storage and cookies to keep you signed in, protect authentication flows, and remember pending invite actions. We do not currently use third-party advertising cookies, and we do not sell personal information.
Retention and deletion
We retain account and contest information while your account is active and as reasonably needed to operate completed pools, resolve disputes, enforce agreements, maintain security, and meet legal obligations. Commissioners can remove participants and soft-delete pools, but some records may remain in backups or audit logs for a limited period.
You may request account deletion or deletion of eligible profile information by emailing support@poolduel.app. We may need to verify your identity before completing the request.
Your choices and rights
You may update your username and profile photo in your profile. You may also ask us to provide access to, correct, or delete personal information, or withdraw consent where applicable. Some information may need to be retained when permitted or required by law.
Canadian users may also contact the Office of the Privacy Commissioner of Canada or their provincial privacy authority if a concern is not resolved.
Security
We use reasonable administrative and technical safeguards, including managed authentication, access controls, encrypted network connections, and restricted database policies. No online service can guarantee absolute security. Use a unique password and contact us promptly if you believe your account has been compromised.
Children
Pool Duel is not directed to children under 13. If you believe a child has provided personal information without appropriate consent, contact us so we can review and remove it.
Policy changes
We may update this policy as the service and legal requirements change. The effective date above will change when material revisions are published. Continued use after an update means the revised policy applies to future use.