What we keep, and what we don't.

1 · The short version

Box Office Wars is a free hobby game. We collect the little we need to sign you in, run the game, and — if you want — remind you before the Friday lock. No ads, no third-party trackers or analytics, no selling your data, ever. There's no money and no marketing machine here; just a game.

2 · What we collect

Account. Your email address and a display name. Sign in with a password and we store it only as a salted hash — never in plain text. Sign in with Google and Google confirms your email and name for us; we never see your Google password.

Gameplay. Your weekly picks, scores, ratings, achievements, and any leagues you create or join. This is the game itself — shown to you and, where it matters, to your league-mates and on leaderboards under your display name.

Notifications (optional). If you turn on browser push, we store the subscription your browser hands us (an endpoint and two keys) so we can send lock reminders. Turn it off and we delete it.

Session. One cookie that keeps you logged in. Google sign-in also sets its own cookies to complete the sign-in. We don't collect payment information (nothing costs money) and we don't build advertising profiles or track you across other sites.

3 · How we use it

Only to run the game: sign you in, save your roster, score the weekend, show leaderboards and league standings, and send the emails and push notifications you've opted into. Game emails like lock reminders are optional — ignore or turn them off anytime. The sign-in email itself is essential to having an account.

4 · Who touches your data

We keep the vendor list short, and each one only gets what it needs to do its job:

• Neon — our database host; stores your account and game data. Google sign-in is brokered through Neon Auth.
• Netlify — hosts and serves the site; like any web host, its servers process requests (including IP addresses) to deliver pages.
• Google — only if you choose “Continue with Google,” to verify who you are.
• Resend — delivers the game's emails (like lock reminders) to your address.
• Your browser's push service (Google, Apple, Mozilla, and the like) — only if you enable push, to deliver notifications.

Film titles, posters, and trailers come from TMDB — that's data we pull in, not data about you that we send out. We never sell or rent your data to anyone.

5 · Your choices

Turn off game emails anytime (sign-in email stays, since it's core to the account). Toggle browser notifications off on the Play screen and the subscription is deleted. Want to see, correct, or delete your account and its data? Email us — deleting your account removes your email, picks, scores, and league memberships.

6 · How we protect it

Passwords are stored only as salted hashes, and session tokens are stored hashed too. Your data lives in a managed Postgres database with access limited to the game's operator. No system is perfectly secure — but there's very little here to steal, and we treat what there is with care.

7 · Kids

This game is for ages 13 and up. It isn't directed at children under 13, and we don't knowingly collect their information.

8 · Changes & contact

We'll update this page as the game changes; the “last updated” date above will move when we do. Questions, requests, or “please delete my account”: reminders@boxofficewars.com.