Privacy Policy
Draft — last updated 2026-11-10
This policy explains what Pickline collects and why. Pickline is operated by [Operator name / contact email]. Questions or requests: [Operator name / contact email].
What we collect
Account: your email address, display name, preferred language and time zone, and a hashed (bcrypt) password. We never store your password in plain text. If you sign in with Google or Discord, we store the provider account ID and the email it gives us.
Play history: your picks, stakes, settlements, daily check-ins, task claims, crew memberships and points ledger.
IP address: used for rate limiting and abuse prevention (for example, limiting how many accounts on one network receive the sign-up bonus or check-in points). We store the IP seen at sign-up and at each check-in, plus short-term counters keyed by IP or email.
Notifications: if you enable browser push, we store the push subscription (endpoint and keys) and your browser's user-agent string; we also store your notification preferences and a log of reminders sent.
Records of your 18+ confirmation and acceptance of these terms, with timestamps.
How we use it
To run your account, settle picks, show leaderboards (display name and points only), send the notifications you turned on, send account emails (verification, password reset), and prevent abuse. We do not sell your data and we do not use it for advertising.
Service providers
Vercel (hosting; its request logs include IP addresses), Neon (Postgres database), Resend (sending account and notification emails, once email is enabled), cron-job.org (triggers scheduled jobs; it does not receive user data), Google and Discord (only if you choose to sign in with them), and your browser vendor's push service (only if you enable push). Data may be processed outside your country.
Cookies
We use only functional cookies: pickline_session (keeps you signed in, 30 days), pickline_locale (remembers your language), and a short-lived cookie during Google/Discord sign-in. We do not use analytics or advertising cookies. Embedded official streams (Twitch, YouTube, or Huya / Douyu / Bilibili where applicable) are loaded from those platforms and may set their own cookies under their policies.
Retention
Account data is kept while your account exists. When you delete your account we immediately remove your email, display name, password hash, sign-in links, IP addresses, push subscriptions, notification settings and crew memberships. Picks and points ledger entries are kept in anonymized form (not linked to any personal data) so past settlements remain consistent. Abuse-prevention counters and hosting logs are kept only as long as needed for security [retention period to be confirmed by operator].
Your rights
You can delete your account at any time from Me → Delete account. For access, correction or other requests, contact [Operator name / contact email].
Age and region
Pickline is for people aged 18 or older. Minors (under 18) may not create an account or place picks. If we learn that an account belongs to a minor we will close it. Parents and guardians should prevent underage use.
Changes
We will update the date above when this policy changes.