Privacy

What we collect

Usage statistics. We use Google Analytics 4 to understand which pages are read and how people arrive. It sets cookies in your browser and sends Google standard usage data (pages viewed, approximate location from your IP address, device and browser type). Google Analytics 4 does not log or store IP addresses, and we don't use its advertising features. Google's own policy is at policies.google.com/privacy; you can opt out of Google Analytics everywhere with Google's browser add-on or by blocking cookies for this site. Our own visitor counter also notes how far down a page was read and which join button was tapped; we look at these only as totals, and they use no cookie and never store an IP address. To keep automated traffic out of our totals, the counter looks up, in memory and only for that moment, the approximate town and whether the visit comes from a cloud or hosting company's network; it keeps the town and, for hosting networks only, that company's name. The IP address itself is never saved. Town and network lookups use IP data by DB-IP (db-ip.com), licensed CC BY 4.0.

Messages you send. If you use the Contact page, we keep what you typed (name, email address, message) and the time. We limit abuse without storing your IP address. We use it only to reply. We never publish it, sell it or share it.

Member accounts. Anyone 13 or older can create a free account. For each member account we store a display name (the start of your email unless you change it) and the email address, a hashed version of the password (we can't read it, and nobody at niftisports ever sees it), whether the email address is confirmed, the plan and which projects the account can open, and when the account was created and signed in. We also log each sign-in attempt with its time and a scrambled code made from your IP address (never the address itself), to stop password guessing. To keep one account to one person, we note which devices are signed in, by browser and system name only (for example "Chrome on Windows"), never by IP address. We use this only to let members sign in and to keep accounts safe. When an account is created we also note, from that day's visit, how it arrived (for example a search, a link or a post), the kind of device, the approximate country and region, and which pages were read, in order and for how long, before signing up (and, for a paid plan, between signing up and the payment page). This comes from the same visitor counter that never stores IP addresses. We keep it with the account and delete it with the account, and only the niftisports team sees it, to spot fake sign-ups. We only email that address with account emails (see Emails we send) and anything you've signed up for. Signing in sets one cookie on this site that keeps you signed in for up to 30 days. To delete your account, ask us on the Contact page.

Emails we send. Some emails are part of running your account, so we send them even if you're not on any newsletter list: sign-up confirmation and sign-in links, password resets, receipts, renewal reminders, payment problems, and notices about changes to your plan or these policies. They come from support@niftisports.com and are sent through our Google Workspace account. We don't put advertising in them. Newsletters and team alerts are separate: you choose them, and every one has an unsubscribe link.

Payments. Payments are handled by Stripe. We never see or store your full card number. We keep your Stripe customer ID, your plan, its price and dates, and your payment history (amounts and dates) so we can run your membership, give refunds and keep tax records. Stripe's privacy policy is at stripe.com/privacy.

Spam checks. To stop automated sign-ups and fake reports, the join page, the sign-in page and the score-fix form use Cloudflare Turnstile, which checks your browser (including your IP address) when the form loads. Cloudflare's privacy policy is at cloudflare.com/privacypolicy.

Server logs. Like every website, our server keeps standard access logs (address, page, time, browser) for about two weeks, for security and troubleshooting, and then deletes them. To protect the site, the server also counts page requests per address in its memory for about a minute and briefly turns away any address that sends too many; that count isn't written anywhere. The sign-up, sign-in and payment pages have a tighter limit of the same kind. To stop stolen-card testing, if an account's card payments keep failing, or a payment on it is disputed, we pause new payments on that account and note when and why (never a card number), until we've looked at it.

What we don't collect

No card numbers (Stripe handles payments), no tracking across other sites, no third-party advertising, and we never sell or share member details. The predictions and records on this site are about teams, schools and pro players, not about you.

Email updates

Updates are part of the free account. We keep your email address, the team and sports you picked, and when you agreed. We only send what you picked, after you've confirmed your email. Every update has a one-click unsubscribe link; turning updates off on Your account does the same. If you unsubscribe, we keep your address only to make sure you stay unsubscribed. If you signed up for updates before accounts existed, your sign-up is still on file; you can make a free account with the same email, or ask us to remove it at support@niftisports.com. We never sell or share your address.

Children

niftisports is for people 13 and older. We don't knowingly collect personal information from children under 13. If you believe a child under 13 has sent us information, tell us on the Contact page and we'll delete it.

Our social pages

Our pages on Facebook, Instagram, Threads and X are run on those platforms under their own privacy policies.

Your choices

Email us at support@niftisports.com or through the Contact page to see, correct or delete anything you sent us, or to be removed from any list. We'll do it promptly.

Where it lives

The site runs on a server in the United States operated by Nifti Mobility Group, Biddeford, Maine. Analytics data is processed by Google under its terms.

Last updated October 24, 2026. If this page changes materially, the date changes with it.