Privacy policy
Short version: bubble (PlayBubble, at playbubble.app) collects as little as it can, never sells or shares your information for advertising, runs no ads and no tracking cookies, and you can delete your account and everything in it any time.
This policy covers playbubble.app and the older lastfourin.com address, which now forwards here. "We" means the person who runs bubble as a free hobby site in the United States.
What we collect
- Sign-in: your email address. If you sign in with Google, Google also gives us your name and profile picture. We never see your Google password.
- Profile: the handle, name and bio you choose, and a picture if you sign in with Google. These are public.
- What you do on the site: your picks, brackets, polls, trivia and draft results, pretend-money bets in the $1,000 Challenge, pools and challenges you start or join, friends, posts, comments, and any blocks or reports you make.
- Age check: we ask your birth month and year once to confirm you're 13 or older. We keep only the date you passed the check, never your birthday.
- Page views: our own counter records the page, the website that linked you here, and an anonymous daily code made from your connection. The code is scrambled with a secret that is thrown away after two days, so it can't be traced back to you. We never store your IP address in this counter, and it uses no cookies.
- Messages you send us: if you email us, we keep the email so we can answer it.
We don't collect payment details (nothing on bubble costs money), precise location, contacts, or anything from your device beyond what a normal web visit sends.
Why we use it
Only to run the site: sign you in, save and grade your picks, show leaderboards, pools, friends and challenges, keep the community safe (moderation, blocks and reports), count visits so we know which pages people use, fix bugs and answer you. We don't use it for advertising, we don't build profiles of you for anyone else, and we don't make automated decisions about you that have legal or similar effects.
What's public
Your handle, name, picture, bio, pick'em record and streaks, leaderboard spots, anything you post to your profile, and your comments. Other people's picks show only after their games kick off. Your email address is never shown.
Who handles it for us
We don't sell your personal information and we don't "share" it for cross-context behavioral advertising, as California law uses those words. We have never done either. A few service providers handle data only so the site works:
- Supabase stores accounts and site data and sends sign-in emails. Like most sign-in systems, it keeps short-lived security logs (such as the IP address used to sign in).
- Google handles "Continue with Google", and serves the site's fonts (Google Fonts sees your IP address, like any web request).
- GitHub Pages hosts the website and, like any web host, sees standard request information such as your IP address.
- ESPN's public score feeds are loaded straight from your browser for live scores and schedules, so ESPN sees a normal web request.
We may also disclose information if the law requires it, to protect people from harm, or to stop abuse of the site.
Cookies and storage on your device
bubble uses no advertising or tracking cookies and no third-party analytics. Your browser's own storage keeps a few things so the site works: your light or dark mode choice, a fast copy of your picks, your sign-in session (so you stay signed in), and, if someone under 13 tried to sign up on this device, a note so the sign-up form isn't shown again. You can clear these any time in your browser settings; signing out also clears your picks from that device.
Because we don't sell or share data or track you across sites, there's nothing to opt out of. We still treat a Global Privacy Control signal as an opt-out request.
How long we keep it
Account information stays until you delete your account. Page-view records are anonymous. Emails to us are kept as long as needed to deal with them.
Your choices and rights
Everyone gets the same rights, wherever you live:
- Delete: go to My picks, then Delete account. That permanently removes your account, picks, entries, posts, comments, friends, challenges, $1,000 Challenge bets, pool memberships, blocks and reports. A pool you started stays for its other members, without your name on it. You can also email us.
- Correct: change your handle, name and bio any time from My picks.
- Know and get a copy: email us and we'll tell you what we hold about you and send you a copy.
- No penalty: using any of these rights never changes how the site treats you.
California residents have these rights under the CCPA and CPRA, and residents of other states with privacy laws have similar ones. To make a request, email us from the address on your account so we can confirm it's you. You can let someone act for you if they show us your signed permission. We'll answer within 45 days.
Children
bubble is not for children under 13, and accounts are only for people 13 and older. The age question is neutral and nothing is pre-picked. If someone under 13 tries to sign up, the account is deleted on the spot and nothing they entered is kept. If you believe a child under 13 has an account, email us and we'll delete it. If you're under 18, please check with a parent or guardian before making an account.
Security
Data travels over encrypted connections and the database only lets each person change their own things. No system is perfectly secure, so please don't put anything sensitive in your profile or posts. If we ever learn of a breach that affects you, we'll tell you as the law requires.
Changes
If we change this policy we'll update the date at the top, and if the change is significant we'll say so on the site.
Contact
Privacy questions and requests: hello@playbubble.app.