Privacy Policy

Blind Bracket is a college basketball tournament bracket app for iPhone and iPad, made by Sixty Feet Labs LLC, a Texas limited liability company (“we”, “us”). This policy explains what the app and our Blind Bracket web pages collect, why, and what you can do about it.

What we collect

If you create an account

• Your email address, to sign you in and to send you a code if you forget your password. We do not send marketing email.
• Your password, stored only as a one-way hash by our hosting provider. No one at Sixty Feet Labs can see it.
• A display name you choose. It does not need to be your real name.

If you post a bracket

• The bracket itself: your picks, the eight stats you chose to scout with, and the time you posted it.
• Any private pools you create or join, and which bracket you entered in each.

If you report or block another player

• A report records who you reported, the reason you chose, their display name at the time and when you reported it, so we can review it and deal with repeat abuse. We keep a report for up to 12 months after we resolve it. The player you report is not told who reported them.
• A block records who you blocked, so their entries stay off your leaderboards. They are not told.

Automatically, on our servers

Like almost every online service, our hosting provider keeps short-lived server logs, which include your IP address and basic device information. They are used only to keep the service running and secure, and are deleted after 7 days.

Kept only on your device, never sent to us

Brackets you have not posted, your settings, and the tournament data the app downloads. These stay on your device until you delete the app. The tournament data comes from our own servers, run by the providers listed below; apart from them and Apple’s own services, the app contacts no other service.

What we don’t collect

No location. No contacts, photos or camera. No advertising identifier. No analytics or tracking tools built into the app, and no ads. We do not follow you across other apps or websites, and we do not sell or rent your information to anyone. Because we do not track you across other websites or services, there is nothing for a browser’s “Do Not Track” signal to switch off; we treat every visitor as if it were on.

What other players can see

Nothing, until you post a bracket. After that, each way of sharing shows exactly this:

• The tournament leaderboard shows your display name, score, champion pick and the eight stats you chose.
• A private pool shows its members those same details for each entry in the pool, and nothing more.
• A bracket code shows your individual picks to anyone who has the code. Share it only with people you want to see your picks.

Your email address is never shown to anyone.

Who we share it with

Only the companies that run the service for us, and only what they need to do it:

• Supabase hosts our database and handles sign-in.
• Resend delivers our password-reset emails, so it receives your email address and the reset code when you ask for one.
• GitHub (GitHub Pages) serves our web pages at sixtyfeetlabs.com and keeps logs of visits, which include IP addresses.
• Apple distributes the app. If you buy anything in the app, Apple handles the payment; we never see your payment details. If you have chosen in your device settings to share analytics with app developers, Apple sends us crash reports and app usage statistics that do not identify you. If you test a pre-release version through TestFlight, Apple shares with us the name and email address you were invited with, and the feedback and screenshots you send.

That is the complete list. We will also disclose information if the law requires it, or to protect the safety of our users or the service.

If Sixty Feet Labs or Blind Bracket is ever sold or merged, account information would pass to the new owner, who would remain bound by this policy for the information you gave us under it. We would tell you in the app before it happened.

Keeping and deleting your information

We keep your account until you delete it. To delete it, open Account → Delete my account in the app. That immediately removes your account, your display name, every bracket you have posted and your pool memberships from our live systems; any private pool you created passes to its longest-standing member, or is deleted if nobody else is in it. Copies in our hosting provider’s backups are overwritten within 7 days. If we remove an account for breaking our Terms of Use, we keep a one-way hash of its email address (not the address itself), so that address can’t return to the leaderboards. You can also email us and we will do it for you.

You can ask us at any time what we hold about you, or ask us to correct it, by emailing drew@sixtyfeetlabs.com. We answer within 30 days.

Where Blind Bracket is offered

Blind Bracket is offered only in the United States, and your information is stored and processed in the United States.

Children

Blind Bracket is not directed at children under 13, and we do not knowingly collect information from them. If you believe a child under 13 has created an account, email us and we will delete it. Players aged 13 to 17 need a parent’s or guardian’s permission, as our Terms of Use explain.

Security

Information travels to our servers encrypted, and access rules on the server mean each account can read and change only its own private information. No system is perfectly secure, but we collect very little, so there is very little to lose.

Changes

If this policy changes, we will update the date at the top and, for anything significant, tell you in the app before it takes effect. A significant change will not apply to information we already hold unless you agree to it.