Privacy Policy

Effective July 30, 2026

Feldman Family Pool (“FFP”, “we”, “us”) is operated by Lavin Advisory, LLC. This policy explains what information we collect when you use the service, why we collect it, and what choices you have. We collect as little as the service needs to work.

Information we collect

• Account information. When you sign in with Google or Facebook, we receive your name, email address, and profile picture from that provider. If you sign in with an email link instead, we collect only your email address. We never receive or store your password for any provider.
• Pool activity. The display name you choose, the leagues you belong to, the picks you submit, and the scores and standings calculated from them.
• Technical data. A session cookie that keeps you signed in, plus standard server logs (IP address, browser type, timestamps) kept for security and troubleshooting.

We do not collect payment card details. Any entry fee for a pool is arranged and settled directly between you and your pool administrator, outside this service.

How we use it

• To create your account and keep you signed in.
• To run the pool: show you the weekly slate, record your picks, grade them, and publish standings to your league.
• To send service email you have asked for, such as sign-in links.
• To keep the service secure and diagnose problems.

We do not sell or rent your information. We do not show advertising and we do not use your information for advertising or profiling.

What other people can see

A pool is a shared game, so some information is visible to others by design. Your display name, your picks, and your scores are visible to other members of any league you join. Picks become visible to other members only after the relevant game has locked at kickoff — never before.

The public standings page

Every league has a public standings page at a long, unguessable web address, so that an administrator can share the week’s results into a group chat without everyone having to sign in. Anyone holding that link can open the page, and the link is the only thing protecting it. The page is marked “noindex”, so search engines are asked not to list it, and it is not linked from anywhere else on this site — but once a link has been shared you should treat what is on the page as public.

That page shows, for the league it belongs to:

• each member’s display name;
• points for each scored week, total points for the season, number of weeks won, and the current rank;
• the picks each member made — but only for games that have already kicked off. A pick on a game that has not started is never shown there, to anyone.

It shows nothing else about you. No email address, no name from your sign-in provider, no profile picture, no account identifier, and nothing about which leagues you belong to beyond this one. The page is read-only: nobody can make a pick, join, or change anything through it. If you would prefer not to appear on it, ask your league administrator — they choose whether to share the link.

Service providers

We rely on a small number of providers to operate the service. They process data only on our instructions:

• Vercel— application hosting and delivery.
• Neon— database hosting.
• Resend— delivery of sign-in and service email.
• Google and Facebook— only if you choose to sign in with them.

Sports schedules, point spreads, and final scores come from third-party data sources. No information about you is sent to them.

Retention

We keep your account and pool history for as long as your account exists, so that past seasons remain viewable. Server logs are kept for a short period and then discarded. If you delete your account we remove your personal information; scores already recorded in a league’s historical standings may be retained in anonymized form so past results stay intact.

Your choices

• Access or correct your information from your account settings.
• Delete your account at any time, or by emailing us.
• Disconnect a provider by revoking access from your Google or Facebook account settings.

To make any of these requests, contact us at brian@lavin-advisory.com.

Children

This service is not directed to children under 13, and we do not knowingly collect information from them. If you believe a child has provided us information, contact us and we will delete it.

Security

Data is encrypted in transit, and access to the production database is restricted. No service can promise perfect security, but we take reasonable measures appropriate to the sensitivity of what we hold — which is deliberately very little.

Changes

If we change this policy we will update the effective date above and, for significant changes, notify you by email or in the app.