Privacy Policy

What Laces Out keeps, who else touches it, and what we never do with it.

Last updated August 25, 2026

The short version

We keep your username, your email, and what you do in your pools. We do not sell it, we do not run ads, and we do not follow you around the internet. Playing is free. The only money that reaches us is the commissioner pass, and Stripe handles that. Your card never touches our servers.

What we collect

When you make an account: a username, an email address, and a password. The password is stored by our sign-in provider as a one-way hash, so nobody at Laces Out can read it. Not even us.

If you sign in with Google or Meta: your name and email address from them, and nothing else. We never receive your password, your friends, or your posts.

What you do in the app: the pools you belong to, the picks you make, your tiebreaker entries, when a pick changed and what it changed to, and the team colours you picked. The pick history is deliberate. It is what settles an argument about who had what before kickoff.

If you buy a commissioner pass: Stripe takes the payment. We store that you paid, when, and for which season. We never see or store card numbers.

If you send feedback: your message, and the page you were standing on when you sent it.

Page counts: which pages get opened, and where the visit came from. To tell a first visit from a return visit, your browser keeps a random visitor id in a cookie. It is a random number, not your name, email or address, and it is never joined to your account. Clearing your cookies makes you a new visitor again.

What we do not collect

No location. No contacts. No advertising trackers, no ad networks, no data brokers. We do not sell or rent anything about you. If that ever changed, you would hear about it before it happened.

Who else touches it

Four companies, each doing one job:

  • Supabase stores the database and runs sign-in.
  • Vercel hosts the site.
  • Stripe takes the commissioner pass payment.
  • Google and Meta, only if you choose one of them to sign in with.

Scores come from the public ESPN scoreboard and kickoff weather from Open-Meteo. Those are requests we make. Nothing about you goes out with them.

What other players see

Your username and your standings, in the pools you have joined. Your picks become visible under the rules of the pool you are in, which for most pools means once the game kicks off. Your email address is never shown to other players.

Email

We use email for one thing: your account. Password resets, and the occasional note about something that affects your pools. We do not send marketing email.

Your account is yours

Change your username, your team colours, or your password any time on the Account page. Want the whole thing gone, account and picks and memberships? Email hello@lacesoutpickem.com and we will delete it within 30 days. Pools you ran stay standing for the players still in them, with your name removed.

Age

Laces Out is for adults. You must be 18 or older to have an account. We do not knowingly keep information from anyone under 18, and we delete it if we find it.

Where this applies

Laces Out is run from Texas, in the United States, and the information is stored on servers in the United States.

Changes

If this page changes, the date at the top changes with it. If we ever start doing something with your information that we do not do today, you will hear about it before it takes effect.

Questions

hello@lacesoutpickem.com. A real person reads it.