Legal
Last updated May 29, 2026
This Privacy Policy explains what information Points Per Rival ("PPR", "we", "us") collects, how we use it, and the choices you have. It applies to pointsperrival.com and related services.
When you register or claim a team, we store your email address, username, display name, and a securely hashed version of your password. We never store your password in plain text.
We store profile details you choose to add (such as a bio or avatar) and the fantasy data entered into PPR — team names, weekly scores, rosters, standings, and league history.
To operate and secure the service we log technical information such as IP address, timestamps, and basic request metadata. Failed authentication attempts are logged with IP and timestamp for abuse prevention.
We do not sell your personal information.
PPR uses a single essential, httpOnly session cookie to keep you signed in. It is not used for advertising or cross-site tracking. Disabling it will prevent you from logging in.
We rely on a small set of trusted providers that process data on our behalf. Each is bound by its own terms and privacy practices:
As features roll out, we may also use an NFL scores provider (for live scoring) and Anthropic's Claude AI (to generate optional matchup recaps). This policy will be updated as those services go live.
We keep your information for as long as your account is active or as needed to provide the service. You may request deletion of your account and associated personal data at any time (see Your Rights). Some records may be retained where required for security or legal reasons.
We protect data with scrypt password hashing plus a server-side pepper, httpOnly session cookies, database-backed rate limiting on sensitive endpoints, audit logging of sensitive actions, and security headers including a content security policy. No system is perfectly secure, but we work to safeguard your information.
You may request access to, correction of, or deletion of your personal data. To exercise these rights, contact admin@pointsperrival.com from the email associated with your account.
PPR is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will remove it.
We may update this policy from time to time. Material changes will be reflected by the "Last updated" date above. Continued use of PPR after an update constitutes acceptance of the revised policy.
Questions about your privacy? Reach us at admin@pointsperrival.com.
