Privacy

Your account

When you sign in with Google, Supabase Auth receives your Google account identifier, name, email address, and profile photo if available. We use these details to sign you in, save your daily challenge progress, and connect your scores to your account across devices. Google handles your password; PlayNFL does not receive it.

Your games and public scores

Your chosen leaderboard name and completed daily score appear publicly on the leaderboard. Your email address and Google profile details are not published there. Daily answers and saved progress are used to resume your challenge and calculate your score; they are not published on the leaderboard.

Practice works without an account. Personal practice and daily statistics are stored in your browser. We also save anonymous practice round results, including score, lineup settings, and round duration, without linking them to your Google account.

Cookies and browser storage

We use essential cookies to keep you signed in and complete the sign-in process. Account cookies are HTTPOnly, which prevents page scripts from reading them. Browser storage remembers personal stats and your chosen leaderboard name. Clearing that storage removes those browser records; signing out ends your current sign-in session.

Services that help run PlayNFL

Supabase provides authentication and the shared database. Vercel hosts the website. These services process requests and may keep operational logs, such as IP addresses and request information, to operate their infrastructure. Player headshots can load from external image providers, which receive your browser’s image requests.

You can read the privacy policies for Google, Supabase, and Vercel.

Advertising and your choices

PlayNFL uses Google AdSense Auto ads on the live site, subject to Google's approval. When ads are served, Google and other advertising partners may use cookies or similar technologies and receive information such as your IP address, browser details, and the pages you visit. They use this information to deliver and measure ads and help prevent fraud. Depending on your consent and settings, ads may be personalized using visits to this site and other websites.

Where a consent message appears, you can accept, decline, or manage your choices. Use the advertising privacy settings link provided with that message to revisit your choices. You can also manage personalized advertising in Google Ads Settings and opt out of participating third-party advertisers through YourAdChoices. These choices do not remove all advertising.

Learn how Google uses information from sites that use its services. Advertising partners and their data uses are also described in the consent message where one is shown.

Keeping and deleting records

Account and game records are retained until deleted. Browser-stored stats remain until you clear the site’s browser storage. Infrastructure providers handle their operational logs under their own retention policies.

To request deletion of your account and associated game records, email quentin@nassaulabs.com from the address you use to sign in. You can also use that address for questions about your information.