Privacy Policy

Effective date: August 28, 2026

1. Scope and operator

This Privacy Policy explains how Pro Football Models ("PFM," "we," "us," or "our"), collects, uses, discloses, and retains personal information through profootballmodels.com and related services (the "Service"). It does not govern third-party sites or services linked from the Service.

2. Information we collect

Information you provide

  • Account information: email address, optional display name, account identifier, verification status, and account-creation date.
  • Subscription information: subscription status and identifiers associated with Stripe. Stripe collects payment and billing details through its hosted checkout and billing tools; PFM does not intend to receive or store complete payment-card numbers.
  • Activity you choose to save: game picks, survivor selections, timestamps, leaderboard results, and related account history.
  • Communications: information included in support, privacy, legal, or other messages you send us.
  • Launch or marketing signup: an email address if you affirmatively ask for updates.

Information collected automatically

  • Technical and security information: IP address, request timestamps, browser or device type, operating system, referring page, requested URL, and diagnostic or security logs that may be processed by our hosting and infrastructure providers.
  • Authentication and session data: session identifiers, verification tokens, and essential cookie data used to sign you in, protect accounts, and operate restricted preview access.
  • Usage information: page views and general device, browser, referral, and approximate-location information if privacy-focused analytics is enabled. As of this draft, the codebase includes Vercel's analytics package but does not mount its analytics component; this paragraph must be updated if deployment configuration differs.

Information from other sources

We may receive transaction and subscription status from Stripe; email delivery and verification events from Resend; infrastructure information from Vercel and Neon; and public or licensed football, schedule, injury, roster, statistics, and odds data. Football data generally does not identify users of the Service.

3. How we use information

We use personal information to:

  • create, authenticate, maintain, and secure accounts;
  • provide saved picks, survivor tools, leaderboards, premium access, and other requested features;
  • process subscriptions, manage billing status, and prevent fraud;
  • deliver verification links, service notices, support, and opted-in communications;
  • operate, troubleshoot, analyze, and improve the Service;
  • enforce our Terms and protect users, PFM, and the public; and
  • comply with law, valid legal process, and accounting obligations.

We will not use payment information, account picks, or support communications to make decisions about employment, credit, housing, insurance, or other legally protected eligibility.

4. Cookies and similar technologies

The Privacy Policy currently serves as PFM's cookie notice. The Service uses cookies or comparable browser storage that are necessary to provide requested functionality.

Technology Purpose Category Typical duration
Auth.js/NextAuth session and security cookies Maintain sign-in state, protect authentication, and route verification Strictly necessary Session or configured account-session period
pfm_preview_ok Remember authorized access while the site is in preview mode Strictly necessary 7 days
Vercel Web Analytics, if enabled Aggregate traffic and performance measurement Analytics Vercel states that standard Web Analytics does not use third-party cookies and discards its visitor-identification hash after 24 hours

Browser settings may delete or block cookies, but blocking necessary cookies can prevent sign-in and other features. PFM does not currently identify advertising cookies, cross-site behavioral advertising, or Google Analytics in the reviewed application code.

If PFM adds advertising, pixels, session replay, cross-site tracking, or other nonessential technologies, we will update this policy and implement consent or opt-out controls where required before activating them.

5. How we disclose information

We may disclose information to:

  • Service providers: Vercel for hosting and infrastructure; Neon for database hosting; Auth.js and Resend for authentication and email delivery; Stripe for checkout, payments, billing, fraud prevention, and subscription management; and other vendors added to the production service after this policy is updated.
  • Legal and safety recipients: courts, regulators, law enforcement, professional advisers, or other parties when reasonably necessary to comply with law, protect rights and safety, investigate abuse, or enforce agreements.
  • Business-transfer recipients: a buyer, investor, successor, or adviser in connection with a financing, merger, reorganization, sale, or similar transaction, subject to appropriate safeguards.
  • At your direction: when you request or consent to a disclosure. A chosen display name and leaderboard statistics may be visible to other users or the public.

We do not sell complete payment-card information. PFM does not sell personal information or share it for cross-context behavioral advertising. If that changes, we will provide notices and opt-out methods required by law.

6. Retention

We retain information only as reasonably necessary for the purposes described above, including:

  • account and saved-pick data while the account remains active;
  • verification tokens until expiration;
  • transaction and subscription records for the period required for billing, tax, accounting, dispute, and fraud-prevention purposes;
  • security and infrastructure logs according to provider and security schedules; and
  • backup copies for a limited period after deletion.

Before launch, adopt and insert concrete retention periods for inactive accounts, user picks, support requests, security logs, waitlist emails, and backups. We may retain information longer when required by law, necessary to resolve a dispute, or needed to enforce an agreement.

7. Security

We use reasonable administrative, technical, and organizational safeguards appropriate to the nature of the information. No transmission or storage system is completely secure, and we cannot guarantee absolute security. Users should protect access to the email account used for passwordless sign-in.

8. Your choices and privacy rights

You may:

  • manage subscription billing through the account billing portal;
  • update an eligible display name through account settings;
  • unsubscribe from marketing using the link in a marketing email, when applicable;
  • control cookies through browser settings; and
  • request access, correction, deletion, or a copy of personal information by contacting Profootballmodels@proton.me

Depending on where you live, law may provide additional rights, including the right to know, correct, delete, or obtain personal information; opt out of certain sales, sharing, targeted advertising, or profiling; restrict or object to certain processing; and appeal our response. We may verify your identity before completing a request. Authorized agents may submit requests where permitted by law. We will not unlawfully discriminate against you for exercising a privacy right.

Because PFM does not presently identify a sale or sharing of personal information for cross-context behavioral advertising, it does not currently offer a "Do Not Sell or Share" link. We will honor legally recognized browser signals, such as Global Privacy Control, for processing to which they apply if such processing is introduced.

9. Children's privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Account and subscription features are intended for adults. Betting-related content is intended only for users who meet the legal gambling age in their jurisdiction. Contact Profootballmodels@proton.me if you believe a child provided personal information to PFM.

10. United States operation and international users

PFM is operated from the United States, and information may be processed and stored in the United States. If users outside the United States will be actively served or marketed to, obtain counsel regarding international transfer mechanisms, lawful bases, and region-specific notices before launch.

11. Third-party privacy information

Third-party services process information under their own terms and privacy notices. Relevant notices include Stripe's Privacy Policy, Vercel's Privacy Notice, Resend's Privacy Policy, and Neon's Privacy Policy. Links should be checked and added to the production page before launch.

12. Changes to this policy

We may update this policy to reflect legal, technical, or business changes. We will post the revised policy with a new effective date and provide additional notice when required.

13. Contact

Profootballmodels@proton.me

If applicable, residents may appeal a denied privacy request by replying to our decision and writing "Privacy Appeal" in the subject line.