Your privacy at The Chop Pot.

Effective date: October 5, 2026

This policy explains what information The Chop Pot (“we”, “us”) collects when you use thechoppot.com and its league room, how we use it, who can see it, and the choices you have.

The short version

We collect what the game needs: the name you choose, your sign-in identifiers and your league activity.
Other members of your leagues see your display name, picks and results. Your email address is never shown to them.
The Chop Pot is play money only. We never ask for or collect payment information.
We don’t sell your information, show ads, or use advertising or analytics trackers.

1. Information you give us

Display name. The name you enter or confirm. Members of leagues you create or join see it. Each league also keeps the player name you chose when you joined it.
League information. If you create a league: its name and settings. Commissioners can also add players by name; those players exist only as names in that league.
Messages to us. If you contact us, the content of your message and the contact details you use.

2. Sign-in and account identifiers

Email and password. When you create an account we collect your email address, a password and the display name you choose. We use your email address only to sign you in and to let you open the same account on other devices; we show it only to you, in your Account panel. We don’t send you email today. Your password goes to our sign-in provider (Supabase), which stores only a one-way hash of it; we never store, log or see it after you submit it.
Name-only accounts. If you continue without an account, we create an account identifier with no email or password. It is held only in a session cookie in that browser, which is why such an account can’t be recovered if the cookie is lost. Securing it adds your email address and a password to that same account, so its leagues, picks and history stay with it.

3. League memberships, picks and game records

To run the game we store, for each league: its members and commissioner, invite code, game mode and spread option, rounds and deadlines, each pick (the team or total, line and price, points bought, sportsbook, kickoff and when it was submitted), Pick Priority rankings and fallback choices, each round’s Pick Audit, parlay tickets, final scores and grades, simulated returns, simulated play balances, Slice Chop rebuys, Point Bank balances, pot distributions, standings and the league’s activity log, which records commissioner actions.

These are records of a simulated game. They are not financial accounts and have no cash value.

4. Invites

Each league has an invite link that you share yourself; we don’t send invitations or collect contact details for the people you invite. Anyone who has a league’s link can see the league’s name, the commissioner’s display name, how many seats are filled and when signup closes.

5. Cookies, browser storage and logs

Cookies. We use only cookies needed to run the service: sign-in session cookies that keep you signed in. They are HttpOnly, so page scripts can’t read them. We don’t use advertising or analytics cookies.
Browser storage. The odds board saves your unsubmitted pick and whether you last looked at NFL or college football in your browser’s local storage. That stays on your device, and signing out of The Chop Pot in that browser clears it.
Network and server logs. Like most websites, our hosting and database providers process technical information with each request, such as your IP address, browser type, the page requested and the time. Our sign-in provider records the IP address and browser type of each sign-in session and keeps a log of sign-in events. We use IP addresses to apply limits that stop automated abuse; those counters are deleted after about two days. Our own error logs are designed to leave out personal information.
Browser assistants. If your browser has an AI assistant that supports the experimental Web Model Context API, the league room lets that assistant read the league you are viewing and open a pick form when you ask it to. This runs in your browser; what your assistant reads is handled by the assistant’s provider under its terms.

6. Odds and other third-party content

Sportsbook lines come from The Odds API, an odds-data service. Our server requests the lines; we don’t send your personal information to The Odds API or to any sportsbook.
Team logos and rankings come from ESPN’s public scoreboard. Logos load in your browser directly from ESPN’s image servers, so ESPN receives your IP address and browser information when the odds board shows them.
Fonts load from Google Fonts, so Google receives your IP address and browser information when our pages load.

7. How we use information

To provide the game: accounts, leagues, invites, picks, grading, standings and history.
To keep secured accounts recoverable on other devices.
To protect the service and its players, including preventing abuse and investigating misuse.
To answer you when you contact us.
To comply with the law.

We don’t sell personal information or share it for targeted advertising.

9. Service providers

Supabase: Database and sign-in service. Stores accounts and league records in the United States.
Vercel: Hosts the website and processes each request.
The Odds API: Sportsbook lines (receives no personal information from us).
ESPN: Team logos and rankings, loaded by your browser.
Google Fonts: Typefaces, loaded by your browser.

Each provider handles information under its own terms and privacy policy.

10. Data security

Connections use HTTPS, sign-in cookies are HttpOnly and Secure, and league data is reachable only through our server, which checks who you are on every request. No method of transmitting or storing information is completely secure, so we can’t guarantee absolute security. Choose a password you don’t use elsewhere. A name-only account depends on its browser: anyone using that browser can use the account, and clearing the browser’s data loses it.

11. How long we keep information

Accounts and league records: while your account or the league exists, or until you ask us to delete them (section 12).
Abuse-limit counters that include IP addresses: about two days.
Server and sign-in logs: for limited periods set by our providers.
Deleted information can remain in backups for a limited time.

12. Your choices and requests

See your account. The Account panel in the league room shows your display name, your sign-in email and whether your account is secured.
Sign out at any time from the Account panel. Signing out of a name-only account ends it on that browser for good.
Deletion and other requests. To ask us to delete your account, or to access or correct your information, contact us at support@thechoppot.com. When we delete an account we remove the sign-in account and remove your name from league records or replace it with a placeholder. Game records that other members rely on, such as a league’s ledger, may be kept without your name. Depending on where you live, you may have additional rights over your information; contact us to use them. We may need to confirm the request comes from the account holder, for example by asking you to sign in.
Commissioners. If a commissioner asks us to delete a league, its other members lose access to it too.

13. Children’s privacy

The Chop Pot is not directed to children. Players must be at least 18 (see the Terms of Use). We don’t knowingly collect personal information from children under 13. If you believe a child has given us information, contact us and we will delete it.

14. Where information is processed

The Chop Pot is run from the United States, and our providers process information in the United States. If you use it from elsewhere, your information is transferred to and processed in the United States.

15. Changes to this policy

We will post any changes here and update the effective date. If a change is significant, we will also give notice on the site or in the league room before it takes effect.

16. Contact

Privacy questions and requests: support@thechoppot.com. See also our Contact page.