Overview
Survivor Board is planning software. This policy describes what we collect when you use the site, create an account, buy a season pass, or contact support.
Information we collect
- Account: username, email (used to sign in with Google, send password reset links, and reply to you), password hash, and sign-in timestamps.
- Your data: picks, pool notes, and settings you save to your account.
- Payments: Stripe processes season-pass purchases. We store Stripe customer and pass status, not full card numbers.
- Usage: page views (a random visitor id stored in your browser, the page, the referring site, and which buttons you click) for internal traffic stats.
- How you found us: the first time you arrive from a link, an ad or another site, we note where from. That note holds the campaign tags on the link, the ad click id that Google, X, Reddit or another ad network adds to it, the referring site, and the page you landed on. When you make an account, the account is linked to that note so we can tell which ads lead to signups and purchases. Nothing else in the address you arrive at is kept.
- Support: messages you send through the support form, including the email you provide for replies.
Cookies and sessions
Signed-in sessions use a cookie to keep you logged in. A random id in your browser's local storage counts traffic and remembers where you first arrived from. Our pages also load the Google tag, which sets Google cookies. Google uses them to tell us when an ad led to a signup or a purchase, and may use your visit to show you our ads on other sites. Google explains this in how Google uses information from sites that use its services. While we advertise on X (formerly Twitter), our pages also load X's pixel, which sets X cookies. X uses them to tell us when an ad on X led to a signup or a purchase, and may use your visit to show you our ads on X. X explains this in its privacy policy.
How we use information
To run the service, save your work, process season-pass payments, send account emails such as password reset links, respond to support, prevent abuse, understand aggregate traffic, and measure which ads are worth paying for. We do not sell personal information.
Now and then we email free accounts about the site: to ask for feedback or to offer the season pass, sometimes with a discount. To stop these, reply to any of them and say so. Account emails such as password reset links still reach you.
Sharing
We share data with service providers as needed to operate the site (hosting, Stripe, and Resend, which delivers our emails). Google and X receive what their tags collect on our pages, described under Cookies and sessions. When you make an account or buy a pass, X's pixel tells X so, with the amount paid and an order number, so X can count it for its ads. When a purchase follows a Google ad, we may also send Google that ad's click id with the time and amount of the purchase, so Google can count the sale for that ad. We never send Google your name, email or username. We may disclose information if required by law.
Retention and security
Account data is kept while your account exists. Traffic hits roll off after about 45 days. The note of where you first arrived from is kept so a purchase made months later can still be matched to the ad that led to it. It is deleted with your account on request. We use industry-standard practices, but no online service is perfectly secure.
Your choices
You may sign out, stop using the site, or contact us through Support to ask about, correct or delete your account data, including the note of where you arrived from. Blocking cookies or clearing your browser's site data stops the visitor id and the Google and X cookies; the site still works, though you will need to sign in again. To stop Google showing you personalized ads, use Google's My Ad Center. To stop X personalizing ads, turn off personalized ads in X's privacy and safety settings.
Children
The service is not directed to children under 18.
Changes
We may update this policy. The date at the top will change when we do.