Privacy

What is kept

• Email addressSign-in, confirmations and password resets. Not shown to anyone else.
• Username and profile iconShown next to anything you share.
• Teams and conferences you followFriends you have accepted can see these. One switch in the friends panel turns that off, including for what you shared before.
• Games you markFriends can see these, in the app and in their Discord channels, and so can people in the Discord servers you're in that have CFB Planner, on those servers' boards and reminders. Each server has its own switch under Your servers in your account settings, all on to start. One switch in the friends panel makes them private everywhere, including games you marked before.
• Community picksWho you think will win each game. To the crowd only the totals are ever shown. Signed in and sharing your picks, they show by name after kickoff to friends and on the pick'em board of each Discord server you are on: one you picked in, or, with Discord linked, one you share with the bot (asked of Discord once an hour). Signed in, a pick is kept with your account; signed out, with a one-way hash of a random ID your browser keeps — never the ID itself, and nothing that identifies you.
• Your bracket, if you make oneThe twelve teams you chose, your picks, and whether it is private or public. Private, only you see it. Public, anybody with its link sees it and it is listed under Community with your username and avatar, never your email or account. Delete it any time from My bracket.
• Recent activity, for the friends' feedTeams you followed, games you marked, favourite team you picked. Only friends see it, only while you are still sharing that thing, and it is deleted after 60 days.
• Watch-party invites you were sentWho invited you, to what, and whether the email or Discord message about it went out — so nobody is told twice. Deleted 30 days later, and both messages can be switched off in your account settings.
• Discord servers, if you connect themStored as hashes, never the server ids. Enough to spot that you and somebody else share a server, not enough to work out which. Turning suggestions off deletes them.
• FriendshipsRequests you have sent and accepted.
• Messages to friendsEncrypted in storage. Readable by you and the friend you wrote to, and may be reviewed for moderation — for example, when one is reported. A message alert emails you the text, so that copy is in your inbox.
• Forum posts and threadsPublic: anyone can read them, signed in or not, with your username and icon. A post you delete, or one a moderator removes, is hidden from everyone but kept so moderators can review reports and restore mistakes.
• Your public cardAnyone can see your username, icon, the month you joined, how many forum posts you have made and how many thumbs up they got. Nothing else: your favourite team, follows and marked games stay for friends only.
• Forum thumbs up and reportsThumbs are shown only as totals. A report, its reason and who made it are seen only by forum moderators and helpers.
• Forum mentionsWhen somebody @mentions you in a thread you've posted in: who, which post, and whether you've seen it — for your mentions list and the alert. Seen ones are deleted after 60 days. Your friends can mention you in any thread; anybody else only in a thread you've posted in — and never somebody you've blocked.
• Forum moderationWho is a moderator or helper is public. Bans, their reasons and a log of each moderation step are seen only by moderators.
• Time zone and view settingsSo kickoffs read correctly and the page opens where you left it.
• Discord account, if you link oneYour Discord id and handle, so a reminder can mention you instead of printing your name.
• Discord channels you connectThe server and channel the bot posts in for you, by their ids and names, so it knows where your game days, events and buttons belong.
• Servers the bot is inEach server's id and name, as Discord lists them for the bot — server configuration, nothing about the people in it. A server that removes the bot is marked as gone.
• Calendar feed addressesStored as a hash and cannot be read back, so revoking is the only fix for one that leaks.

What is not

• Your passwordHandled by the authentication service and never stored in readable form.
• Advertising and cross-site trackingNone. Nothing here follows you to other sites, and no advertising network is involved.
• Anything sold or sharedNo advertising, no data brokers.

Who else sees it

• CollegeFootballData.comWhere the schedule comes from. Nothing about you is sent there.
• DiscordOnly if you link an account, add a channel, or connect your servers. Your Discord id and the usernames of whoever marked a game appear in that channel. Your server list is read once when you connect it; no access to any message is requested.
• The hosting providerRuns the database and serves the page.
• GoogleOnly if you sign in with Google. It tells us your name and email address — the name to suggest a username, the address to sign you in. Nothing else is asked for.
• Cloudflare Web AnalyticsCounts page views and measures how fast pages load. It uses no cookies and does not follow anyone between sites; what it reports is aggregate — views, load times, browsers, countries.
• Cloudflare TurnstileThe bot check on sign-up and on picks made without an account. It runs in your browser and tells us only whether the check passed.
• GIPHYOnly in the forums. A GIF search is sent to GIPHY by our server, so GIPHY sees the words but not you. Opening a thread with a GIF in it loads that image from GIPHY's servers, which see your IP address and browser, as any image host does.
• The email providerSends confirmations, resets, invites and message alerts, so it sees your address and the text of a message alert.

Deleting it

Deleting your account removes all of the above at once: the profile, the follows, the marks, the friendships, your messages and the conversations they are in, the Discord channels you connected, your bracket and the feed hashes. It is in your account settings and takes effect immediately. Anything already posted to a Discord channel belongs to that channel and has to be deleted there. Forum posts are the exception here: they stay in their threads, shown as by "[deleted]" with your name and icon gone, so conversations keep making sense — delete the posts you want hidden first.