Privacy

The site runs game nights for leagues. It is run by one person, not a company, and it collects as little as it can.

Players

A player's name is given when they check in, or entered by an organizer. Nothing else is collected from players: no account, no email address, no location.

• Why it is kept: it is stored with the league's records for that day so the player can be placed in games.
• Who sees it: anyone who opens the league's page, the league's display and televisions, its organizers and the site's administrators, and any schedule an organizer plans or prints.
• How long: it is deleted with the day's records by the first daily cleanup a week after the day ends. The nightly backups described under "Logs and hosting" keep a copy two weeks longer.
• On your phone: your name is kept until you tap "Not you?", or until the league's page, opened on that phone, no longer lists it: once the name is removed, or on any later day.

Organizers

Organizers sign in with an account at one of the sign-in providers offered on the front page. Your password never reaches this site.

• What the provider sends: an identifier for you, the name on your account, and, if the provider shares one, your email address.
• Why the site stores them: so that co-organizers can recognize you, so your leagues can be found when you sign in again, and so you can be emailed before an unused league is deleted.
• Also stored: when you last used the site signed in, which decides when a league counts as unused (see "Email"), and the time of each sign-in for thirty days, to count them.
• Cookies: signing in sets two. One lasts ten minutes and ties the sign-in to the browser that started it; the other keeps you signed in for thirty days after you last use the site. Signing out deletes the second.
• "I'm playing too": a name you choose there is kept by that browser until the league's organizer page, opened in it, no longer lists the name: once it is removed, or on any later day.

Leagues with no sign-in

A league can be started without signing in. Anyone who opens its organizer address can run it until 5am in the league's time zone.

• Nothing about the organizer is collected: no account, no name, no email address.
• Stored: the league's settings, a one-way hash of its organizer address, and a keyed hash of the connecting address that started it, to limit how many leagues one address can start. The key is never written down and changes when the server restarts.
• Cookie: opening the organizer address sets one in that browser, holding the address, so the browser can open the league's organizer pages and the front page can list the league there. It ends at 5am. Opening the league's display address on that browser deletes it.
• Deleting: anyone who can open the league's organizer pages can delete it from League settings, with the same result as described under "Deleting".
• After 5am: the league's pages stop working. Its settings are kept, shown by no page, as for a deleted league, and its records are deleted like every league's, a week after the day ends. The nightly backups keep a copy two weeks longer.

Email

The site sends one kind of email: a notice before an unused league is deleted.

• When: none of a league's organizers has used the site while signed in for eleven months.
• To: every organizer with an email address on file.
• What it says: the league will be deleted after a date at least a month away unless one of them signs in.
• How: from support@4pgno.com, sent through Apple's iCloud Mail.

Logs and hosting

• The server keeps a short log of each request to keep the site running: the time, the address requested with the league's part of the address shortened, and the connecting address.
• Traffic passes through Cloudflare, which keeps its own logs under its own policy.
• Nightly backups of the database are kept for two weeks on the server and copied to an off-site backup account.

Deleting

A league's owner can delete it from the League settings page. Then:

• it leaves every organizer's list, and its addresses say it was deleted;
• its settings are kept, but no page shows them any more;
• its days' records are deleted as every league's are, a week after the day ends.

If none of a league's organizers has used the site while signed in for a year, the league is deleted the same way, after the email described under "Email".

To have a deleted league's settings erased, or your organizer account removed, email the support address at the end of this page.

Money

Tips go through Stripe's hosted page; your card details never reach this site. No advertising, no tracking, no data sold to anyone.

Terms.

Is something not working? Email support@4pgno.com.