Privacy Policy
Last updated: September 3, 2026
Blitz Odds is a free NFL pick'em and matchup analysis tool. This page explains what information the site collects, why, and what you can do about it. We do not sell personal information, and we do not run third-party advertising. Your use of the site is also covered by our Terms of Service.
Information collected automatically
Every visit is recorded by our own analytics, which is designed to measure traffic without identifying you personally. Each pageview or interaction records:
- The page or section viewed, the path, and the site host
- The referring website's domain only - never the full referring URL
- A general device category (mobile, tablet, or desktop)
- Approximate location - city, region, and country - derived by our hosting provider from the network connection. Your IP address is not stored.
- Your display preferences at the time of the visit (theme, timezone, selected sportsbook)
- Whether the site was opened as an installed app or in a regular browser tab
- A random visitor ID stored in your browser, used to tell repeat visits from new ones. It is not tied to your name or email and is cleared if you clear your browser storage.
- When you change a notification setting, which setting it was and whether you switched it on or off - so we can tell which alerts people want and which they mute. This is not linked to your account, and records no email address, device, or schedule.
We also use Google Analytics, which sets its own cookies and is governed by Google's privacy policy. You can opt out using Google's browser add-on.
Information you provide
Most of the site works without an account. If you create one, we store:
- Account details - your email address and password. Your password is passed straight to our authentication provider when you sign up or reset it; we never store it and never keep a copy.
- Profile - a display name and a chosen avatar from a fixed set. Your display name is visible to other members of any league you join. If you have not set one, it is taken from the part of your email address before the @, which may contain your real name - you can change it at any time in Settings, and we recommend doing so before joining a public league.
- League activity - leagues you create or join, the picks you submit, and your standings. Picks and standings are visible to other members of that league.
- Public leagues - some leagues, including the official Blitz Odds pools, are public: any signed-in person can join one without an invitation or approval. In a public league, "other members" is therefore not a group you chose. Your display name, avatar, picks, and standing in that league are visible to every member, including people you do not know. Your email address is never shown to other members of any league. You can leave a public league at any time, which removes you from its standings.
- Preferences - favorite teams, theme, timezone, and sportsbook selection, so they follow you across devices.
- Terms acceptance - which version of the Terms of Service you accepted, the date and time you accepted it, and whether you did so while registering or when asked to accept an updated version. We keep this so both of us know which terms apply to your account. It does not include your IP address.
Email and notifications
We send email only for things you or a league you belong to initiate - league invitations, join requests, and account messages. These are sent through our email provider, Resend. We do not send marketing email.
Two of those messages are part of getting into your account: the link that confirms your email address when you sign up, and the link that lets you set a new password if you forget yours. To make each link work we store a one-way scrambled version of it - never the link itself - alongside your account identifier and email address, so that a link can be checked when you click it and then immediately discarded. Confirmation links stop working after 24 hours and reset links after one hour, whether or not they are used, and the stored record is deleted the moment a link is clicked. We also keep a short-lived count of how many of these emails have been requested for an address, so the same address cannot be used to send someone repeated mail.
If you follow an individual game to get alerts on it, we store that game’s identifier against your account for that week only. It is used solely to decide whether to send you an alert about that game, is never shared with anyone, and is automatically cleared a few weeks after the week it belongs to.
If you turn on push notifications, your browser gives us an anonymous subscription token for that device so we can deliver kickoff reminders, score updates, injury alerts, and reminders to make your picks. The token identifies the browser, not you. You can revoke it at any time in the site's notification settings or in your browser's site permissions. Alongside the token we store a short label describing the device (for example “Safari on iOS”) so you can tell your registered devices apart, and the time of the last successful delivery to it.
We also keep a short-lived record of what happened to each alert - which alert it was, which account it was for, and the outcome, including the reasons an alert was deliberately not sent (your settings had it switched off, it fell inside your quiet hours, you were not following that game, or no device was registered). This exists so we can answer “why did I not get that notification?”, which is otherwise unanswerable after the fact. It records the delivery decision only - never the content of a notification - and is automatically deleted after three weeks.
Browser storage
The site stores a small amount of data in your browser to remember your settings between visits: theme, timezone, selected sportsbook, chosen pool format, favorite teams, whether you have seen the tutorial, the address of your current push subscription (so we can tell when your browser has silently replaced it), a short-lived marker recording that you accepted the Terms of Service (so the acceptance can be saved to your account once registration finishes), and the anonymous visitor ID described above. Clearing your browser's site data removes all of it.
Third-party services
| Service | Purpose |
|---|---|
| Netlify | Hosting, accounts, and data storage |
| Google Analytics | Aggregate traffic measurement |
| Resend | Sending account and league email |
| SportsGameOdds | Betting lines |
| ESPN | Live scores and box scores |
| Open-Meteo | Game-day weather |
The data providers above supply information to the site; we do not send them anything about you.
How long we keep information
Account, league, and pick data is kept for as long as your account exists. When you delete your account it is removed immediately and permanently - there is no recovery period and no archived copy. Analytics records are kept to track traffic trends over time and are not linked to your account, so they are unaffected by deletion.
Unconfirmed accounts
Until you click the link in the confirmation email, your account exists but cannot make picks, join leagues, or change settings, and receives no notifications. You can still delete it. We do this so that an address someone typed by mistake - or on purpose, without owning it - cannot be used to receive our email or to appear in a league under someone else's name.
Suspended accounts
We may suspend an account that appears to be misused - for example a disputed pick'em result or a shared login. A suspended account cannot make picks, join leagues, or change settings, and receives no emails or notifications. Nothing is deleted: the account's data is retained so the suspension can be lifted. You can still delete a suspended account yourself, and you can appeal by emailing us from the address on the account.
Your choices
- Access or correction - your profile and preferences can be edited in Settings at any time.
- Deletion - you can delete your account yourself at any time, without asking us: go to Settings › Profile › Delete Account. This immediately and permanently removes your login, profile, every pick you have made, your league memberships and standings entries, and all notification settings, email subscriptions and push devices. Leagues you created are not deleted and stay with their remaining members. Deletion cannot be undone. If you would rather we did it, email us and we will.
- Notifications - turn push off in Settings or in your browser permissions.
- Analytics - use the Google opt-out linked above, and clear your browser storage to reset the anonymous visitor ID.
Children
Blitz Odds is not directed to children. The site displays betting odds and is intended for adults who meet the legal gambling age in their jurisdiction. We do not knowingly collect information from anyone under 13. If you believe a child has created an account, contact us and we will remove it.
Security
Account data is stored with our hosting provider and transmitted over encrypted connections. No system is perfectly secure, so we cannot guarantee absolute security, but we limit what we collect in the first place and do not store payment information.
Changes to this policy
If this policy changes materially, we will update the date at the top of this page. Continued use of the site after a change means you accept the updated policy.
Contact
Questions, access requests, or deletion requests: support@blitz-odds.com.