Last updated: August 13, 2026
LeagueLocks is operated by League Locks LLC (“LeagueLocks,” “we,” “us”). This Privacy Policy explains what personal information we collect through the LeagueLocks website and applications (the “Service”), how we use and share it, and the choices and rights you have. Privacy questions and requests: contact@leaguelocks.com.
Account information: email address, display name, and password credentials (handled by our authentication provider; we never see your password in plain text). League activity: leagues you join, picks, votes, chat messages, prize-pool ledger entries, roles, and bet-slip images your league uploads. Optional profile data: marketing preferences, preferred sportsbook, and state, if you choose to provide them. Usage and device data: log data, IP address, browser type, pages viewed, and approximate (city-level) location inferred from IP, collected automatically to operate and secure the Service. Cookies and similar technologies: described in Section 6.
We use personal information to: provide and operate the Service (showing your league its picks, votes, chat, ledger, and history); send transactional notifications you've enabled (on-the-clock alerts, voting reminders, results); secure the Service and prevent abuse; understand aggregate usage and improve the product; display advertising as described below; comply with legal obligations; and, only if you opted in, send occasional marketing relevant to sports fans (you can withdraw consent anytime in your profile or via the unsubscribe link).
We do not sell your personal information, and we do not share your account information, league data, or betting activity with advertisers. We share information only with: service providers that process data on our behalf to run the Service — currently Supabase (database, authentication, storage), Vercel (hosting and privacy-respecting analytics), and Resend (transactional email) — under agreements limiting their use of your data; advertising partners, only in the form of cookie-based identifiers they collect themselves as described in Section 7; parties to a corporate transaction (merger, acquisition, or asset sale), in which case this policy continues to apply until amended; and authorities, when required by law or to protect rights, safety, or the integrity of the Service.
Data is stored with our infrastructure providers in the United States. If you access the Service from outside the U.S., you consent to processing in the U.S. Bet-slip images live in private storage visible only to your league. We retain personal information while your account is active and as needed for the purposes above; when you delete your account (or ask us to), we delete or de-identify your personal information within a reasonable period, except records we must keep for legal, security, or accounting reasons. Chat messages you posted may remain visible to your league in de-identified form.
We use first-party cookies that are strictly necessary for authentication and session management — they keep you signed in and the Service cannot function without them. We use privacy-respecting, cookie-light analytics from our hosting provider to measure aggregate page views and performance; this does not build advertising profiles. Third-party advertising cookies are described in Section 7. You can clear or block cookies in your browser settings; blocking essential cookies will prevent sign-in.
We display advertising on parts of the Service, served by third-party vendors including Google. Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website and other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits to this and other sites. You may opt out of personalized advertising by visiting Google Ads Settings at adssettings.google.com, and you can opt out of many other third-party vendors' use of cookies for personalized advertising at aboutads.info/choices (US) or youronlinechoices.com (EU). Where required by law (for example, for visitors from the EEA, UK, or Switzerland), we will request consent before advertising cookies are set. We never pass advertisers your name, email, league data, or betting activity.
Everyone: you can access and update your profile in the app, and you can request a copy, correction, or deletion of your personal data by emailing contact@leaguelocks.com with the subject “Privacy Request.” We respond within 30 days (or sooner where the law requires) and will verify your identity via your account email. We will never discriminate against you for exercising privacy rights.
In the last 12 months we collected the categories of personal information described in Section 2 (identifiers, internet activity, and user-provided content), for the purposes in Section 3, shared as described in Section 4. We do not sell personal information, and we do not “share” it for cross-context behavioral advertising as those terms are defined by the CPRA — third-party ad cookies operate under their own notices as described in Section 7. California residents have the rights to know, access, correct, delete, and limit use of sensitive personal information (we do not collect sensitive personal information as defined by the CPRA), and to non-discrimination. Submit requests to contact@leaguelocks.com; authorized agents may submit requests with proof of authorization. We honor Global Privacy Control signals for opting out where applicable.
If you are in the European Economic Area or the United Kingdom, we process your personal data on these legal bases: performance of our contract with you (operating the Service), legitimate interests (security, product improvement, non-personalized measurement), consent (marketing and, where required, advertising cookies), and legal obligation. You additionally have the rights of access, rectification, erasure, restriction, portability, and objection, and the right to lodge a complaint with your supervisory authority. Data is processed in the United States under appropriate safeguards.
We use industry-standard safeguards: encrypted connections (TLS), encrypted storage with our infrastructure providers, row-level access controls so league data is visible only to that league's members, and private storage for uploaded images. No method of transmission or storage is 100% secure; if a breach affecting your personal information occurs, we will notify you as required by law.
LeagueLocks is strictly for adults — you must be at least 21 (or the legal sports-wagering age in your jurisdiction, whichever is higher). The Service is not directed at children, and we do not knowingly collect personal information from anyone under 18. If we learn we have collected information from a minor, we will delete it promptly. Parents or guardians who believe a minor has provided us information should contact contact@leaguelocks.com.
Some browsers send “Do Not Track” signals. There is no common standard for interpreting them, so the Service does not respond to DNT signals, though we do honor Global Privacy Control signals as described in Section 9.
If this policy changes materially, we will notify you in the app or by email before the changes take effect. The “Last updated” date always reflects the current version. Continued use of the Service after the effective date constitutes acceptance.
Privacy questions, requests, or complaints: contact@leaguelocks.com (subject “Privacy Request”). LeagueLocks is operated by League Locks LLC, a United States limited liability company.