Legal
Privacy Policy
Effective 13 August 2026
Poolr runs football and other sports pools for private groups. This policy explains what we collect, why we collect it, who processes it on our behalf, and the choices you have. We have tried to write it in plain language rather than legal boilerplate.
1. Who we are
Poolr LLC (“Poolr”, “we”, “us”) is a Pennsylvania limited liability company and provides the pool management service at poolrpicks.com. Poolr LLC is the controller of the personal information described in this policy.
Poolr LLC
502 W 7th St Ste 100
Erie, PA 16502
United States
privacy@poolrpicks.com
A note on pools: when you join a pool, the person who created it acts as its commissioner. They can see the information described under Pool activity below for the members of their own pool. They cannot see your password, your payment card details, or anything about pools you belong to elsewhere.
2. What we collect
Information you give us
- Your email address, which we use to identify your account and contact you.
- A username and, if you choose, a display name and a profile picture.
- A password, if you register with one. Passwords are stored only as a salted hash. We never store and cannot read your actual password.
- The contents of any support ticket you open, including the messages in it.
Information from signing in with Google
If you choose Sign in with Google, Google tells us your email address, your name and your profile picture, and gives us a token that confirms the sign in. We do not receive your Google password and we do not get access to anything else in your Google account.
Pool activity
- The pools you belong to, your role in them, and the team name you use in each.
- Your picks, squares claims, bracket entries and the results, standings and awards calculated from them.
- Announcements and notifications sent to you inside a pool.
- Whether your pool commissioner has marked you as having paid your entry fee, the method they recorded (for example Venmo, Cash App, Zelle, PayPal or cash) and the date. This is a note the commissioner types. No card or bank details are involved.
Payments to us
If a pool grows past the free member limit, the commissioner pays a one time hosting fee. That payment is processed by Stripe. Stripe receives your card details directly and we never see or store them. We keep a reference to the Stripe session, the payment identifier and the date it was paid.
Entry fees for a pool are a separate matter. They are paid directly between members and their commissioner. Poolr does not collect, hold, transfer or pay out pool money at any point.
Notification settings
If you turn on push notifications we store the subscription your browser gives us, which lets your device receive a message from us. We also store your email and push preferences and, if an email to you bounces or you unsubscribe, a record so we stop sending.
Technical information
Our hosting and infrastructure providers record standard server logs, which include IP addresses, browser type and the pages requested. These are used to keep the service running and secure.
Usage statistics
We keep a count of which pages are visited, roughly how many people visit them, which site linked you to us, and how often a few things happen across the whole platform — an account being created, a pool being created, a pick being saved. We use this to understand whether the site is working and which parts of it people actually use.
This is our own counter, running on our own servers. It is not Google Analytics or any other outside service, no data about your visit is sent to anyone else, and it sets no cookie.
It is built so that it cannot identify you, and we want to be specific about how. We do not store your IP address in it. Instead, on the day of your visit, your IP address and browser type are combined with a secret value and turned into a fingerprint that cannot be turned back into either of them. That is what lets us count you as one visitor rather than three. The date is part of the recipe and the recipe changes daily, so the record of your visit today and the record of your visit tomorrow cannot be connected to each other — not by us and not by anyone who obtained the data. We do not record which account was signed in, so nothing in it is linked to your name, your email or your picks. Pages are recorded without their web address query strings, so invite codes and sign-in links are never written down.
If you would rather not be counted at all, there is a switch for it in your settings under Privacy. See your choices below.
3. Why we use it
| What for | Legal basis (EEA and UK) |
|---|---|
| Creating your account and running your pools | Performance of a contract |
| Scoring picks and producing standings and awards | Performance of a contract |
| Sending service email such as password resets and pool announcements | Performance of a contract |
| Sending pick reminders and weekly recaps | Legitimate interests, and consent for push |
| Taking the pool hosting fee | Performance of a contract |
| Keeping the service secure and preventing abuse | Legitimate interests |
| Counting page visits and feature use, in a form that cannot identify you | Legitimate interests |
| Meeting tax, accounting and other legal duties | Legal obligation |
6. What we never do
- We do not sell your personal information, and never have.
- We do not share it for cross context behavioural advertising.
- We do not show ads, so no advertiser receives anything about you.
- We do not use your picks or pool activity to build a profile for marketing.
- We do not sell or rent your email address to anyone.
- We do not follow you from one visit to the next. Our own page counter is built so that it cannot, and nothing else on the site attempts to.
7. How long we keep it
We keep your account information for as long as your account exists. If you delete your account, we erase your email address, name, username, profile picture, password, push subscriptions and support tickets.
Your picks and results are kept but detached from you, so they no longer identify anyone. We do this because deleting them would rewrite the season for every other member of your pools and would break the record of a pool that has already paid out. After deletion, nobody can tell which anonymised entries were yours.
Records of hosting fee payments are kept for as long as tax and accounting law requires. Records of email unsubscribes are kept indefinitely, because we need them to keep honouring your choice not to be emailed.
The usage statistics described above are kept until we clear them. They are not tied to your account, so deleting your account neither removes them nor needs to — there is nothing in them that points back to you.
8. Security
Traffic to the site is encrypted in transit. Passwords are stored only as salted hashes. Access to the production database is restricted to those who need it. No service can promise perfect security, but we take it seriously and will tell you without unnecessary delay if a breach affects your information.
9. Your choices
- You can edit your name, username and profile picture at any time in your profile.
- You can turn pick reminders and weekly recaps on or off for email and push separately, in your settings.
- Every bulk email we send includes an unsubscribe link.
- You can turn off push notifications in your browser or in your settings.
- You can tell us not to count your visits, in your settings under Privacy. Because the counter does not know who you are, the switch is remembered by your browser rather than by your account — so it applies to the browser you set it in, and you would need to set it again on another device or in a private window.
- You can leave a pool, and you can delete your account.
10. If you are in the EEA or the UK
You have the right to:
- Ask what personal information we hold about you and get a copy.
- Have inaccurate information corrected.
- Have your information erased.
- Ask us to restrict how we use it.
- Receive your information in a portable format, or have it sent to another provider.
- Object to processing we carry out on the basis of legitimate interests.
- Withdraw consent at any time, where we rely on consent.
To exercise any of these, email privacy@poolrpicks.com. We will respond within one month. You also have the right to complain to your local data protection authority, and in the UK to the Information Commissioner’s Office.
11. If you are in California
Under the CCPA as amended by the CPRA, we have collected the following categories of personal information in the past twelve months: identifiers (such as your email address and username), internet activity (such as server logs), and commercial information (such as whether a hosting fee was paid). The sources, purposes and recipients are described in sections 2, 3 and 5.
We have not sold personal information, and we have not shared it for cross context behavioural advertising, in the past twelve months or at any other time. We do not use or disclose sensitive personal information for purposes that require an opt out.
You have the right to know, delete, and correct your personal information, and the right not to be discriminated against for exercising any of these rights. To make a request, email privacy@poolrpicks.com. You may use an authorised agent, and we will verify the request against your account before acting on it.
12. If you are in another US state with a privacy law
Residents of Virginia, Colorado, Connecticut, Utah and other states with comparable laws have the right to confirm whether we process their personal information, to obtain a copy, to correct it, to delete it, and to opt out of targeted advertising, the sale of personal information and profiling with legal effects. We do none of those three things for anyone.
Requests go to the same address. If we decline a request, you may appeal by replying to our decision, and we will respond to the appeal in writing within the period your state’s law allows.
13. International transfers
Poolr is operated from the United States and our providers store and process information there. If you use the service from outside the United States, your information is transferred to and processed in the United States, which may have different data protection laws than your own country.
Where we transfer personal information out of the EEA or the UK, we rely on the European Commission’s Standard Contractual Clauses, and the UK Addendum where applicable, in our agreements with those providers.
14. Automated decisions
We do not make decisions about you by automated means that produce legal effects or similarly significant effects.
Picks are graded, standings ranked and awards granted automatically from published game results. That is arithmetic applied to a public score, it is the service you signed up for, and a commissioner can correct any result inside their own pool.
15. Children
Poolr is not directed to children under 13 and we do not knowingly collect information from them. If you believe a child under 13 has given us information, email us and we will delete it.
Pools that charge an entry fee may be restricted by the law where you live. Meeting any minimum age or legality requirement is the responsibility of the person running the pool and the people joining it.
16. Changes to this policy
If we change this policy we will update the effective date at the top. If the change is significant we will tell you in the app or by email before it takes effect.
17. Contact us
For anything in this policy, or to make a request about your information, email privacy@poolrpicks.com.
If you already have an account, you can also open a ticket from Help and Support inside the app and we will pick it up there.
Poolr LLC
502 W 7th St Ste 100
Erie, PA 16502
United States