Privacy Policy
Last updated: February 8, 2026
1. Information We Collect
Account Data
When you create an account, we collect information you provide directly, including your email address, display name, and profile avatar. If you sign in using a third-party provider (such as Google or Apple), we receive your name and email address from that provider. We do not store your third-party passwords.
Usage Data
We collect information about how you interact with the Service, including bracket picks, pool membership, chat messages, emoji reactions, leaderboard rankings, and activity feed events. This data is necessary to provide the core features of the Service.
Device and Analytics Data
We automatically collect certain information when you access the Service, including your IP address, browser type, operating system, device type, referring URL, pages visited, and the dates and times of your visits. We use this data to improve the Service, diagnose technical issues, and understand usage patterns. We use PostHog for product analytics and Sentry for error monitoring.
2. How We Use Information
We use the information we collect to:
- Provide, maintain, and improve the Service
- Create and manage your account and authenticate your identity
- Enable bracket pool features including leaderboards, chat, and bracket comparisons
- Send you transactional emails (pool invitations, score updates) that you have opted into
- Monitor and analyze usage trends and preferences to improve user experience
- Detect, investigate, and prevent fraudulent transactions and other illegal activities
- Respond to your comments, questions, and support requests
3. Information Sharing
We do NOT sell your personal information.
We share information only with the following categories of service providers that are necessary to operate the Service:
- Supabase — Database hosting, user authentication, and real-time functionality
- Vercel — Web application hosting and edge network delivery
- PostHog — Product analytics to understand how users interact with the Service
- Resend — Transactional email delivery (pool invitations, notifications)
- Sentry — Error monitoring and performance tracking to maintain Service reliability
We may also disclose your information if required to do so by law, or if we believe in good faith that such action is necessary to comply with applicable law, respond to a court order, or protect the rights, property, or safety of SuperBrackets, its users, or the public.
4. Data Retention
We retain your personal information for as long as your account is active or as needed to provide you the Service. If you delete your account, we will delete your personal information within 30 days, except where we are required to retain it for legal, regulatory, or legitimate business purposes. Aggregated and anonymized data that cannot be used to identify you may be retained indefinitely for analytics and Service improvement purposes.
5. Your Rights
You have the following rights regarding your personal information:
- Access: You can request a copy of the personal information we hold about you.
- Correction: You can update your account information at any time through your profile settings.
- Deletion: You can request that we delete your account and personal information.
- Opt-out: You can opt out of non-essential emails at any time by clicking the unsubscribe link in any email or updating your notification preferences.
California Consumer Privacy Act (CCPA) Rights
If you are a California resident, you have the right to:
- Know what personal information is being collected about you
- Know whether your personal information is sold or shared
- Say no to the sale of your personal information
- Access your personal information
- Request deletion of your personal information
- Not be discriminated against for exercising your privacy rights
To exercise any of these rights, please contact us at privacy@superbrackets.com. We will respond to your request within 45 days.
6. Do Not Sell My Personal Information
SuperBrackets does not sell, rent, or trade your personal information to third parties for monetary or other valuable consideration. We have never sold personal information and have no plans to do so. If this practice ever changes, we will update this policy and provide you with the ability to opt out before any sale occurs.
7. Children's Privacy
SuperBrackets is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information as quickly as possible. If you believe we may have collected information from a child under 18, please contact us at privacy@superbrackets.com.
8. Security
We take reasonable measures to help protect your personal information from loss, theft, misuse, unauthorized access, disclosure, alteration, and destruction. These measures include encryption of data in transit (TLS/SSL), encryption of data at rest, row-level security policies on our database, and regular security reviews. However, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee the absolute security of your information.
9. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by posting the new policy on the Service and updating the "Last updated" date above. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of the Service after any changes to this policy constitutes your acceptance of those changes.
10. Contact
If you have questions or concerns about this Privacy Policy or our data practices, please contact us at: