Privacy Policy

1. Information We Collect

When you register, we collect:

• Your first and last name, username, and email address.
• A password, which is never stored in plain text — only a one-way, salted hash of it is kept.
• An optional profile photo, if you choose to upload one.

As you use the contest, we also store the picks you submit each week, tied to your account, so weekly and yearly standings can be calculated.

2. Cookies

The site uses a single essential cookie to keep you signed in between visits. It only holds a random session token — never your password or other personal details — and is marked httpOnly so it can't be read by page scripts. PEPF does not use advertising, analytics, or third-party tracking cookies.

3. How We Use Your Information

Your information is used only to run the contest itself:

• Creating and securing your account, and keeping you signed in.
• Recording your picks and computing weekly and yearly standings.
• Displaying your username, rank, and profile photo (if you've added one) to other players wherever standings and picks are shown.
• Contacting you about your account, if needed.

4. What Other Players Can See

Because this is a shared contest, your username, profile photo, weekly and yearly records, and (once a game locks) your picks are visible to other players on the standings and picks pages. Your email address, real name, and password are never shown to other players.

5. Sharing of Information

We don't sell, rent, or share your personal information with third parties for marketing or advertising. Information is only ever used to operate the contest described above.

6. Data Security

Passwords are hashed (never stored or logged in plain text), sessions are managed through a secure, httpOnly cookie, and account access is required to view or change account details. No method of storing data is 100% guaranteed secure, but we take reasonable steps to protect your information.

7. Data Retention and Deletion

We keep your account information for as long as your account is active. If you'd like your account and associated data removed, contact us through the Contact page.

8. Children's Privacy

PEPF is not directed at children under 13, and we don't knowingly collect information from anyone under 13. If you believe a child has registered an account, please contact us so we can remove it.

9. Changes to This Policy

If this policy changes, we'll update the “Last updated” date above. Continued use of the site after a change means you accept the update.

10. Contact

Questions about this policy or your data can be sent through the Contact page. See also our Terms of Use.