Privacy Policy

Last updated: October 17, 2026

Slate ("we") runs a football pool app at runtheslate.app and in the Slate Pools iOS app. This page explains what we collect, why, and how to get it deleted.

What we collect

• Account info: your email address and, if you give one, a display name or username.
• Pool activity: the picks you submit (pick'em, survivor, and underdog), squares you claim, which league(s) you're in, and basic usage timestamps (last seen, when a week or pick was saved).
• Sign-in: a one-time 6-digit code sent to your email, signing in with Google (which shares your name, email, and Google account ID with us), or, in the iOS app, Sign in with Apple (which shares a stable Apple user ID and, on the first sign-in, your name and either your real email or an Apple private-relay address that forwards to you). For Sign in with Apple we also keep a token from Apple, used only to revoke Slate's access when you delete your account. Once you're signed in we set a session cookie. We don't use passwords.
• Screenshots you scan: a commissioner can upload a screenshot or photo of a group-chat message to build a week. The image is read on our server and deleted as soon as the text is extracted, within seconds. It is never stored. Only the text you then choose to import is saved, as part of that week. Screenshots can include other people's names or messages, so only upload what you're comfortable sharing with your league.
• Notifications: an in-app list of your recent alerts (a week going up, results posted, deadline nudges, a pick receipt) with read/unread state. If you use the iOS app and allow notifications, we also store a device token so we can send push alerts, plus your per-channel (email, push), per-event, and per-league notification preferences. Alerts you've read are cleared after about 60 days. The in-app list is always available, and you control email and push from Notification settings in the account menu.
• Logs: we don't keep web access logs. Your IP address is held briefly in memory for rate limiting and isn't stored.

We do not run ads, ad trackers, or third-party analytics, and we do not sell or rent your information to anyone.

Who else sees it

• Resend delivers our email (sign-in codes, week announcements, reminders). They see your email address and the message content.
• DigitalOcean hosts the server and database.
• Google handles sign-in if you choose "Continue with Google" instead of an email code.
• Apple handles Sign in with Apple, and delivers push notifications to the iOS app (Apple Push Notification service receives your device token and the alert text).
• Support email: mail to our support address is forwarded by our domain registrar, Porkbun, to a Gmail inbox, so Porkbun and Google handle those messages.
• League data: your picks, squares, and pick history are visible to other members of the same league(s), the way a shared pool naturally works. Public sports data (odds, scores, schedules) is pulled from CollegeFootballData.com and ESPN's public endpoints. No personal data is sent to them.
• Slate's operator can access account and league data for support and moderation purposes.

Cookies and local storage

One cookie: your session token. It's httpOnly (client-side scripts can't read it) and used only to keep you signed in. The app also uses your browser's local storage, on your device only, to remember your theme, which league and week you last opened, a cached copy of the week and your picks so they appear instantly, a draft of any week text you're importing, and whether you've seen the "how it works" guide. In the iOS app it also holds your push device token. Deleting your account clears it. No advertising or cross-site tracking cookies.

How long we keep it, and deleting it

We keep your data for as long as your account exists. Delete your account any time from the account menu in the app or on the website. That permanently removes your account and personal info: your email and name, your picks in every pool type, squares you claimed (they become open again), league memberships, notifications and notification settings, push device tokens, sign-in sessions, and any pending league invites to your email. If you're the only member of a league you own, that league and everything in it is deleted too. If you own a league that has other members, move ownership to someone else first. If you signed in with Apple, we also ask Apple to revoke Slate's access. Deleted data can remain in our nightly server backups until they roll off, within 14 days.

Children

Slate is for adults 18 and older. It isn't directed at children, and we don't knowingly collect data from anyone under 13.

Changes

If this policy changes materially, we'll update the date above and, where practical, tell you directly.

Contact

Questions or a deletion request we can help with directly: support@runtheslate.app