Privacy

PicksLeague is a pick'em game for friends, on this website and in the PicksLeague app for iPhone. This page says what it keeps about you, why, and how to remove it.

Last updated October 25, 2026.

What we keep

• Your account: your email address, your handle, and your password, which is stored scrambled so nobody here can read it.
• How you play: the leagues you're in, your picks, and the standings and trophies that come from them.
• Invites: when a commissioner invites someone to a league, the email address they typed is kept with the invite. An invite nobody takes up is removed 30 days after it expires.
• Requests to join: when you ask to join a private league, the request is kept until a commissioner answers it, and a note that you asked is kept for a week, since a league can be asked twice a week.
• Reports: when you report a player, your report and anything you write in it are kept and emailed to the site's owner. If the owner removes an account after reports, its email address is kept so it can't sign up again.
• Notifications: the ones the site makes for you, and whether you've read them. One you've read is removed 90 days later, or when its season ends if that's later.
• Your phone, if you use the app and allow notifications: a token from Apple that lets a notification reach that phone. It's removed when you log out of the app or change your password.
• Your phone, if you turn on Log In with Face ID: a login key, which the app keeps on that phone behind Face ID. We keep only a scrambled copy, to recognize it. Your face never leaves the phone, and the app never sees it. The key ends when you turn Face ID off, change your password or delete your account.
• Sign-in records: each login and failed login, with the email typed, the IP address and the browser or app it came from. They're there to lock out someone guessing passwords, and they're removed after 90 days.
• Cookies: only what the site needs to work. One keeps you signed in, one protects its forms, and a short-lived one carries a message like "Picks saved" to the next page. Your light or dark setting is kept in your browser, not sent to us.

What we don't do

• No advertising, no analytics, and no tracking of you across other sites or apps.
• Your information isn't sold, and isn't shared with anyone for marketing.

What other players see

Your handle, your record, your trophies, and your picks once your league shows them. Your email address is never shown to other players.

If your profile is public, anyone signed in can see it, and you're ranked against everyone in PicksLeague. If it's private, only you can see it and you're left off those rankings, though your handle, picks and standings still show in your leagues: to their members, and to anyone for a public league. You choose when you sign up and can change it in your settings. On the Everyone boards, you show with your handle, flair and record, never your league's name.

Who else handles it

• Railway hosts the site and its database.
• Resend delivers the site's email, so it handles your address and what each email says.
• Cloudflare checks that whoever fills in the sign-up form is a person, so it sees that visitor's browser and internet address.
• Apple delivers the app's notifications, so it handles your phone's token and what each notification says.
• Schedules and scores come from balldontlie, and sportsbook lines from The Odds API. Nothing about you is sent to either.

How long

• For as long as you have an account.
• A sign-up that's never confirmed is removed after 30 days.
• Sign-in records are removed after 90 days.
• A notification you've read is removed 90 days later, or when its season ends if that's later.
• An invite nobody takes up is removed 30 days after it expires.
• The database is backed up daily, and backups are kept for about 30 days.

Your choices

• Change your handle or password, and turn the email digest off, from the Account list on your profile.
• Mute a league's notifications on its page. Turn the app's notifications off in your phone's Settings.
• Delete your account with Delete account, on your profile here or in the app. Your email, handle and password are erased at once. Your picks, standings and trophies stay in each league's history under a name like "Deleted player 12", with nothing connecting them to you, so nobody else's results change. Backups hold the older copy for about 30 days.

Changes and questions

If this page changes, the date at the top changes with it. Questions, or a request about your information: help@picks-app.com. For anything else, see Help.