Privacy Policy

Gridiron Reads is operated by RVScript LLC ("we", "us"). This policy explains what personal information we collect through the website gridironreads.com, the Gridiron Reads Android app and the Gridiron Reads API, how we use it, who helps us process it, and the choices you have.

What we collect

We collect only what we need to run your account and the service:

• Account details: your email address and password. Passwords are stored scrambled (hashed) by our sign-in provider, and we never see them. If you sign in with Google, we receive the name, email address and profile picture Google shares.
• Your picks: the teams you pick and your pick record.
• Pass status: whether you have a pass, when you bought it and when it ends. Payments are handled by Stripe. We never see or store your card number; Stripe tells us the email, amount and whether the payment went through.
• API keys: the keys you create, their names, and the requests made with them.
• Support messages: what you send to our support address.
• Server logs: your IP address, browser or device type, the page or API address requested, and the time. We use them to keep the service secure and fix problems.

On your device

The website keeps your sign-in session and a copy of your picks in your browser's storage so pages load quickly. The Android app keeps your sign-in session and a copy of your profile and picks on your phone. Both are cleared when you sign out. The app turns off Android backup, so this data isn't copied to other devices.

How we use it

We use your information to:

• sign you in and keep your account working;
• unlock the paid features you bought;
• save your picks and show your record;
• send account emails, such as sign-up confirmation, password reset and receipts;
• answer your support messages;
• keep the service secure and stop abuse, such as shared accounts, scraping or reselling paid content;
• meet our legal, tax and accounting duties.

What we don't do

We don't sell your personal information, and we don't share it for advertising. There are no ads on Gridiron Reads, and we don't use tracking or advertising cookies or third-party analytics. We don't send marketing email today; if we start, every email will let you opt out. If any of this changes, we will update this policy first.

Who processes it for us

These companies process personal information on our behalf, only to provide their service to us:

• Supabase: accounts, sign-in and our database.
• Fly.io: the servers that run our API.
• Cloudflare: website hosting and network security.
• Stripe: payments.
• Resend: sending account email.
• Google: sign-in, only if you choose Sign in with Google.

Other times we share information

Our sports data providers never receive your personal information. We may disclose information if the law requires it, to protect the rights or safety of our users or others, or as part of a sale or merger of the business, in which case this policy keeps applying to your information.

Cookies and Do Not Track

The website doesn't set tracking cookies. It uses browser storage only for your sign-in and your picks. Cloudflare may set a strictly necessary security cookie, and Stripe's checkout page, which runs on Stripe's site, sets its own cookies for payments and fraud prevention under Stripe's privacy policy. Because we don't track you across sites, we don't change anything in response to Do Not Track signals.

How long we keep it

We keep your account, picks and API keys while your account exists. When you delete your account, we delete them within 30 days. Payment records are kept as long as tax and accounting law requires. Server logs are kept for a limited time, normally no more than 30 days. Copies in backups are removed as the backups expire.

Deleting your account

You can delete your account at any time, whether you use the website or the Android app. Email support@gridironreads.com from the address on your account and ask us to delete it. We'll delete your account, picks and API keys within 30 days and reply when it's done. Deleting your account ends any pass on it. In-app deletion is coming, and this section will describe it when it ships.

Your choices and rights

You can ask to see, correct, download or delete the personal information we hold about you by emailing support@gridironreads.com. We may need to confirm the request comes from the account's email address. Depending on where you live, including California, you may have more rights under state law. We will answer within the time that law requires and won't treat you differently for asking.

Security

Everything travels over encrypted connections (HTTPS), passwords are hashed, and access to our systems is limited to the people who run the service. No system is perfectly secure, so we can't promise that information will never be exposed. If a breach affects you, we will tell you as the law requires.

Age

Gridiron Reads is for people 18 and older. It isn't meant for children, and we don't knowingly collect information from anyone under 18. If we learn we have, we will delete it.

Where your information is kept

Gridiron Reads is a United States service, and our providers store and process information in the United States.

Changes to this policy

When we change this policy, we update the date at the top. Before a material change takes effect, we will tell you by email or with a notice on the website and in the app.

Contact

Questions or requests: support@gridironreads.com. RVScript LLC, New York, United States.