Privacy policy

The short version

• We collect what we need to run your account and your leagues: your email, username, birth year, picks and chat messages.
• We don't sell your personal information, and we don't show third-party ads.
• Usage analytics are optional. You choose when you sign up and can change it any time in Profile → Privacy.
• You can delete your account in the app (Profile → Delete account) or through this form.

Information you give us

• Account details: email address, password (stored hashed by our authentication provider), username, optional display name and profile photo.
• Birth year: to confirm you're 13 or older and to turn off some social features for players under 18. We only ask for the year.
• Gameplay: the leagues you create or join, your picks, points, streaks, badges and collected cards.
• Messages and reports: league chat messages, reports you file about other players, feedback, question suggestions and support requests.
• Waitlist: if you join the beta waitlist, your email address, whether you use iPhone or Android, the show you ask us to add (if any), whether you confirmed your email, and which friend's group link you joined from (if any). Your group never sees your email address.

Information collected automatically

• Crash and error reports (Sentry): device model, OS and app version, and what the app was doing when it crashed. Linked to your user ID, never your email.
• App usage analytics (PostHog), only if you opt in: which features you use, such as opening the app, making a pick or joining a league. We don't record the content of your picks or messages.
• Website: the site doesn't use advertising cookies. When you submit a form we keep a one-way hash of your IP address for an hour-level spam limit; we don't store the IP itself.
• Website analytics (PostHog): the website counts visits and actions, such as answering the Daily or joining the waitlist, anonymously and without cookies. It doesn't identify you or record your screen, and never sends your email or what you type into a form.

How we use it

• To run the game: scoring, leaderboards, chat, spoiler protection and your collection.
• To keep Rerun safe: enforcing our community guidelines, filtering chat, and reviewing reports.
• To fix bugs and improve features.
• To email you about your account, and, only if you opt in, about new features and seasons.

Who can see what

Your username, photo, badges and equipped cosmetics are visible to other players. League-mates can see your points, rank and chat messages in that league. Your individual picks stay private; opinion polls only ever show totals. Your email and birth year are never shown to other players. You can block another player so their messages and photo are hidden for you.

Service providers

We share information only with providers that help us run Rerun, under contracts that limit how they can use it:

• Supabase: database, authentication and file storage.
• Sentry: crash reporting.
• PostHog: product analytics (in the app only if you opt in; on the website anonymous and without cookies).
• RevenueCat, Google Play and Apple: purchases and subscriptions. We never see your full payment details.
• Anthropic: helps draft trivia questions from public show information. Your personal data isn't sent.
• An email provider, to send account and (if you opt in) marketing email.

We may also disclose information if the law requires it, or to protect the safety of our players or the public.

Children

Rerun isn't for children under 13, and we don't knowingly collect their personal information. If we learn an account belongs to someone under 13, we lock it and delete it. If you believe a child under 13 is using Rerun, contact privacy@playrerun.app.

How long we keep it

We keep your information while your account is active. When you delete your account there is a 30-day grace period in case you change your mind; after that your account and personal information are permanently deleted, except where we must keep records for legal, tax or fraud-prevention reasons.

Your choices and rights

• Turn analytics or marketing email on or off in Profile → Privacy.
• Edit your username, display name and photo in the app.
• Delete your account in the app or at playrerun.app/delete-account.
• Ask for a copy of your data, or ask us to correct it, by emailing privacy@playrerun.app. Depending on where you live (for example California or the EU/UK), you may have additional rights, and we'll honor them.

Security

We use encryption in transit, access controls and row-level security on our database. No system is perfectly secure, so please use a unique password.

Changes

If we make material changes, we'll tell you in the app or by email before they take effect.

Contact

Questions about privacy: privacy@playrerun.app, or use our support form.