• Email address — used only to sign you in (Top Spot uses passwordless magic-link sign-in, so we never store a password).
• Username — the public name shown on the leaderboard and pick board.
• Pick history — which game you picked each day, the side you took, and (for score-guess games) your predicted final score, plus the points that pick earned once the game is final.
• IP address — logged transiently to enforce rate limits (e.g. capping how many sign-in links or pick changes one IP can request in a short window) and to slow down abuse. It is not tied to your profile or shown to other users.

We don't collect payment information, government IDs, or any data beyond what's listed above — there's no purchase or wagering flow in Top Spot to begin with.

Each piece of data above exists for one specific purpose: your email is how you get back into your account (no password to forget, no third-party login to trust); your username and pick history are what make the leaderboard and scoring work at all; and IP-based rate limiting exists purely to stop scripted abuse of the sign-in and pick endpoints — not to track or profile you.

Your email, username, and pick history stick around for as long as your account is active, so the leaderboard and your own pick record stay accurate season over season. Rate-limit records are short-lived by design — each one only matters for the specific time window it was measuring (a minute, a day) and is cleaned up automatically once that window passes. If you delete your account (see below), your email and username are removed immediately; your historical pick results are kept only in anonymized form, indefinitely, because the leaderboard and season standings for other players depend on them.

You can delete your account at any time from Settings → Account. This is a soft-delete/anonymization, not a full erasure of every record — chosen deliberately so that deleting your account can't be used to rewrite a season's standings for everyone else (see app/api/account/route.ts in the codebase for the exact mechanics). Concretely, deleting your account:

• Immediately removes your email from our auth system and blocks future sign-in.
• Replaces your username with a generic anonymous placeholder (e.g. deleted_user_ab12cd) that no longer identifies you.
• Keeps your past pick results attached to that anonymized name only, so the season leaderboard and other players' standings remain accurate.

This can't be undone. Questions about what specifically happens to your data on deletion can be sent to the contact address below.

Top Spot's database (Postgres, via Supabase) and application hosting (Vercel) are both run by third-party infrastructure providers — we don't operate our own servers. Your data is subject to those providers' own security and infrastructure practices in addition to ours. Game schedules and scores come from ESPN's public scoreboard feed, and betting-market moneylines come from The Odds API; neither of those integrations sends any of your personal data out — they're one-way, read-only feeds we pull sports data from.

We don't sell, rent, or share your personal data (email, username, pick history, or IP) with any third party for marketing or advertising purposes. There are no ad networks or analytics trackers collecting personal data in Top Spot today. If that ever changes, this page will be updated first.

Questions about this policy or a request about your own data can be sent to playtopspot@gmail.com.