What we store, and what we don’t

What we store

Pool and entry names, the picks you make, and — only if you choose to sign in — your email address. The admin link that controls a pool is a token we store as a one-way hash, so we can check it without ever holding the plain link ourselves.

What we don’t store

No passwords — sign-in is a one-time email link, so there’s no password to leak. No payment information, because we never handle money. We don’t sell your data or share it with data brokers. We do measure how the site gets used — see below.

How we use your email

To sign you in, recover the pools and entries tied to your account, and send occasional reminders about your pools. If we ever email you anything beyond that, it will have an unsubscribe link, and unsubscribing won’t affect your pools. We don’t sell your address or share it with data brokers.

How we measure the site

To understand what people actually use, we run analytics from a few services: Google Analytics and Google Tag Manager, Clicky, Microsoft Clarity, and Cloudflare (which also hosts and protects the site). We keep our own first-party counts too, like how many pools get created.

Between them these see the pages you visit, roughly when, the referring link, your device and browser, and an approximate location derived from your IP address. Microsoft Clarity goes further than the others: it records a replay of how a page was used — pointer movement, scrolling, taps and clicks — so we can see where a layout confuses people. We ask it to mask text you type.

We use this only to improve Comped and never to build a profile to sell. Each of these companies handles the data it receives under its own privacy policy. If you’d rather not be measured, browser settings and tracker-blocking extensions block all of it, and nothing about Comped stops working when you do.

Deleting your data

A pool’s commissioner can delete their own pool at any time. To delete your account or any data tied to your email, contact us and we’ll take care of it.

Cookies

Two kinds. Ours: one cookie that keeps you signed in, and only once you’ve chosen to sign in — playing anonymously never sets it. Theirs: the analytics services above set their own cookies (or similar browser storage) to tell a returning visit from a new one, and those are set whether or not you sign in.

Your pools and entries are also remembered in this browser’s local storage, which is what lets you come back to a pool without an account. That stays on your device — clearing your browser data clears it, which is why signing in is the way to keep access to a pool for good.