Last updated: May 17, 2026
This Privacy Policy explains how Pick The Stick collects, uses, discloses, and safeguards information when you use our website, mobile apps, and related services.
1. Information we collect
We collect information you provide directly and certain information automatically:
- Account and profile details. Email address, password, team name, invite/league codes, and account settings.
- Gameplay data. League memberships, picks, scores, standings-related records, and stat preference overrides.
- Chat messages. Messages you send in league chat are transmitted to and stored by Stream.io on our behalf. Other members of your league can read these messages.
- AI chat interactions. If you use the in-app AI assistant, the messages you submit are sent to Anthropic's API to generate a response. We do not permanently store AI conversation history on our servers.
- Notification data. Device token, platform, activity timestamp, and notification preferences (global, per-type, and per-league controls).
- Session and device storage. Authentication cookies, refresh tokens, browser local storage, and native app preferences used to keep you signed in and retain app settings.
- Security and anti-abuse data. Short-lived Redis keys derived from IP and email data to enforce registration rate limits.
- Usage and technical data. Log and request metadata used for operations, troubleshooting, and abuse detection.
2. How we use information
- Provide, maintain, and improve the Service.
- Authenticate accounts and administer leagues and gameplay.
- Score picks and display standings.
- Send optional push notifications and apply your notification preference settings.
- Power real-time league chat via Stream.io.
- Provide AI-assisted strategy responses via Anthropic's API.
- Prevent abuse, monitor reliability, and protect the Service.
- Process account deletion requests and related data removal workflows.
3. How we share information
We do not sell personal information. We may share information in the following ways:
- With other users. Certain gameplay information (such as team names, standings, and league activity) is visible to members of your leagues.
- With service providers. For example, Supabase (hosting, database, authentication, and Edge Functions), Stream.io (real-time league chat), Anthropic (AI assistant responses), Redis (rate limiting), Vercel (hosting and analytics), Apple Push Notification service (iOS push delivery), and Google Firebase Cloud Messaging (Android push delivery).
- For legal and safety reasons. When required by law, legal process, or to protect the rights, property, and safety of Pick The Stick, our users, or others.
- Business transfers. In connection with a merger, financing, reorganization, or sale of all or part of our business.
3a. Google Analytics and Google Ads measurement features
We may use Google Analytics and, when enabled by us, link Analytics data with Google Ads accounts to measure campaign performance and improve conversion measurement.
- User-ID. We may send a pseudonymous identifier that we assign to your account or session so Analytics can better understand activity across sessions, devices, and platforms. We do not send directly identifying information (such as your name or raw email address) as User-ID.
- User-provided data (where enabled). If you provide consent where required by law, we may share limited customer data with Google in a transformed privacy-safe format (for example, hashed identifiers) to support enhanced measurement, attribution, and audience capabilities.
- Ads features controls. Certain Google Ads capabilities (including audience sharing and ads personalization features) may depend on account-link settings and your region-specific consent choices.
We use these features in accordance with Google policies and applicable law, and we do not use them for prohibited sensitive-category purposes.
4. Data retention
We retain account, league, and gameplay records until you delete your account or request deletion, unless a longer period is required for legal, security, or legitimate business needs. Rate-limit keys are short-lived and expire automatically. Device tokens are removed when you log out, delete your account, or are reported invalid.
5. Data security
We use reasonable administrative, technical, and organizational measures to protect personal information. No internet transmission or storage system is completely secure, so we cannot guarantee absolute security.
6. Your choices
- Account information. You can update information in-app and can request deletion via in-app settings or by emailing us.
- Cookies and storage. You can control cookies and local storage through browser or device settings.
- Push notifications. You can disable push notifications in device settings at any time.
- Analytics and ads measurement controls. On our website, you can manage analytics preferences via the cookie consent banner. On our native iOS and Android apps, analytics are active by default; to opt out, email support@pickthestick.co. You can also use Google's ad/privacy controls to limit personalization where available.
7. U.S. state privacy rights
Depending on where you live, you may have rights to request access, correction, deletion, or portability of certain personal information. Pick The Stick does not sell personal information and does not share personal information for cross-context behavioral advertising.
To exercise applicable rights, email support@pickthestick.co from the email tied to your account. We may verify your request before fulfilling it.
8. Children's privacy
The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us and we will investigate and remove it where appropriate.
9. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. When changes are material, we will post the updated version in the Service and may provide additional notice.
10. Contact
Questions about this Privacy Policy? Email support@pickthestick.co.
