Last updated: October 9, 2026
This Privacy Policy explains what information is collected through this Football Squares site (the "Site") and how it's used. The Site lets people create and run squares pools for private groups, family, friends, coworkers, and similar.
If you sign in with Google, we receive:
If you create a local account (a username and password) instead, we store your chosen username, first and last name, and a securely hashed version of your password, we never store your password itself. If that account is created as part of setting up a brand-new pool, we also require an email address at that point, used only to send the one-time welcome email described below, joining an existing pool as a player never requires an email. A local account only exists within the one pool it was created on, unless a pool admin links it to a Google account for that same pool (see "Linked accounts" below).
When you sign in with Google on a specific pool's page, that pool keeps a small log of your name, email, and when you first and most recently accessed it, visible only to that pool's own admins. This log is separate for every pool, a pool's admins can only see who has accessed that particular pool, not any other pool you may have used the Site for. A pool's admins can also restrict ("ban") a specific Google account from signing in to or making changes on that pool.
We also store the display name you choose for a squares board and which squares you select. If you create a pool, we record when it was created and which account created it.
By default, anyone with a pool's link can view that pool's board, the grid, team names, scores, and pot totals, without signing in or entering a passphrase. Everyone sees the display name a player chose for themselves; real names, email addresses, and a pool's payment handle are only shown to that pool's own admins. A pool's admin can also choose to require signing in, entering the pool's passphrase, or both, before the board can be viewed at all.
When a pool is created, we send a one-time welcome email to the creator, either your Google email or the email you provided when creating a local account as described above, with that pool's link and passphrase, and a link to help documentation. This email is sent through Resend, a third-party email delivery service; Resend receives the message content and your email address solely to deliver it. See Resend's Privacy Policy for details.
A pool's admin can link one of that pool's local accounts to a Google account, so that either sign-in method is recognized as the same person within that pool: the same claimed squares, the same admin access (if either identity has it), and the same restriction if either identity is banned from that pool. This link is scoped to a single pool and stores only the two identities being paired (the local username and the Google email) and when the link was made.
Creating a pool requires payment, processed through Stripe, a third-party payment processor. When you pay, your card details are entered directly on Stripe's own checkout page and go straight to Stripe, this Site never receives, sees, or stores your card number or other payment details. We only receive confirmation from Stripe that a payment succeeded, along with which pricing plan you paid for, and we store that confirmation (plan and timestamp) against your account so we know what you're entitled to. For more on how Stripe handles your payment information, see Stripe's Privacy Policy.
Separately, a pool's admin can choose to display a Venmo, Cash App, Zelle, or PayPal handle on that pool's page so players can pay them directly for the squares they've claimed. That handle is provided by the admin and shown to that pool's visitors, this Site never processes, receives, or has any visibility into those payments, it only displays the handle the admin entered and links out to the relevant payment app.
Information is used only to:
The Site uses a session cookie to keep you signed in, whether you signed in with Google or a local account. If a pool requires its passphrase just to view the board (see "Board Visibility" above), entering it correctly sets a second, pool-specific cookie so you aren't asked again for a period of time. Neither cookie tracks you across other websites or is used for advertising.
The Site also saves your light/dark theme choice in your browser's own local storage, so it stays applied when you come back. This stays on your device, is never sent to us, and isn't used for tracking.
We do not sell your information. It's shared only as needed to run the Site: Google is used to verify Google sign-in, Stripe is used to process payments (see "Payments" above), and Resend is used to send the welcome email when a pool is created (see "Welcome Email" above). GitHub also stores backup copies of the Site's data (see "Data Retention" below). We do not otherwise share your information with third parties.
Information is kept for as long as the squares pool is active. We also maintain frequent automated backups for reliability. These backups include the account and pool information described above, and are stored in a private repository hosted by GitHub, a third-party service that holds them solely to keep the Site recoverable. A backup copy of information may persist for some time after it's removed from the live Site. You can ask a pool's admin, or the Site's operator, to remove your information at any time using the contact information below.
This Site is not directed at children under 13, and we do not knowingly collect information from children under 13.
This policy may be updated from time to time. The "Last updated" date above will reflect the most recent change.
Questions about this policy or your information can be sent to [email protected].