Information we collect
Account information
We collect your email address and first name, along with account identifiers, email-verification status and authentication/session records. Sign-in uses emailed links or codes, or Google when available. Existing password hashes from earlier accounts may remain with our authentication provider, Supabase; the app no longer asks you to create or enter a password.
If you choose Google, Google provides your account identifier, email and basic profile information such as your name and profile image to Supabase. We use your email and first name for your account; the app does not display your Google profile image or receive your Google password. We do not request access to your Gmail messages, contacts or files. We do not ask for a mailing address, phone number or date of birth.
Pool information
We store the pools you create or join; pool names and settings; leader/member roles; reserved player names entered by leaders; invitation records; membership applications and approval decisions; contestant assignments, draft draws and confirmation history.
We also store per-person fee values, four prize allocations, reported payment/refund amounts and dates, correction reasons, optional leader notes, and relevant financial history. These are records of arrangements outside the platform. Blindside Club does not process pool money or collect payment-card or banking details.
A leader may enter your name on a reserved roster before you have an account. Linking an account to that entry requires the leader’s approval; a matching name alone does not grant access.
Predictions and season data
Saved predictions, prediction scores, episode progress and contestant status updates are not yet implemented. The preview’s picks and simulated actions remain in page memory and reset on reload. Current castaway information identifies the contestants used in draws. We will update this policy when new data collection is introduced.
Support and technical information
If you contact us, we receive your email address, message and any information you choose to include. Our hosting, authentication and email providers may process IP addresses, browser/device information, request and error logs, session information, and access or delivery timestamps to run and secure the service. IP addresses may indicate an approximate location; we do not request your device’s precise location.
Who can see pool information
Approved members can see the pool’s roster names, contestant assignments, shared settings, prize amounts and fee/prize change history. Leaders can see membership applicants’ names and email addresses to review requests.
Members can see their own payment records and balance. The leader can see all payment records in their pool. Optional private leader notes are separate from member-visible payment information. Ordinary pool members are not given other members’ account email addresses through the roster.
Privacy depends in part on the people in your group: someone who can view information can share it outside the app. Enter only what your pool needs, and do not put banking details, passwords or unnecessary sensitive personal information in names, notes or other pool fields.
Our operator and service providers may access information as needed for support, security and running the service. Public About, Privacy and Terms pages do not display private pool records.
How we use information
- Create, verify and secure accounts, and help you recover access.
- Operate pools, manage invitations and membership, and save draws and finance records.
- Display rosters, assignments and the fee/prize information your role allows you to see.
- Send account-verification and sign-in email, and communicate about support, security or important service matters when needed.
- Prevent abuse, investigate errors, maintain and improve the service, respond to privacy requests and meet legal obligations.
Blindside Club does not sell personal information. We do not use pool information for advertising or sell it to advertisers. We may disclose information where required by law or reasonably necessary to protect legal rights or investigate abuse, subject to applicable law.
Service providers
We use providers to deliver the service, including:
- Supabase: account authentication, sessions and stored pool data.
- Vercel: website hosting and request handling.
- Resend: delivery of account email through Supabase’s SMTP connection.
- Cloudflare: DNS/domain infrastructure and forwarding messages sent to our public contact addresses.
- Google: authentication when you choose Google sign-in, and separately Gmail for receipt and handling of messages forwarded to our operator’s contact inbox.
These providers process relevant information to provide their services, subject to their applicable terms, security and privacy practices. We share information needed for those purposes; we do not give every provider access to all pool records.
Email from the club
Current automated email covers account verification and sign-in links and codes. Invitations are links shared by pool leaders; the app does not currently email invitations, membership decisions or weekly notifications. Essential account, security, support and service communications are separate from marketing. Creating an account does not subscribe you to a marketing newsletter.
Email providers process recipient addresses, message content and delivery information. Keep sign-in and recovery links private.
Cookies and browser storage
We use necessary authentication cookies to maintain and refresh your session and support account recovery. The application also holds temporary form and preview state in page memory. The preview is not a saved pool and its actions reset on reload.
We have not implemented advertising trackers or product analytics. Fonts are served with the site. Blocking necessary cookies may prevent sign-in or other account features from working. If we add analytics or change how storage is used, we will update this policy and seek any consent required by law.
Retention and deletion
We retain account and pool information as needed to operate the service, preserve useful season and pool history, maintain security, resolve disputes and meet legal obligations. Retention depends on the type of record and its purpose; we have not set a single automatic deletion period for every record.
You can request account closure or deletion using the contact below; there is not yet a self-service deletion button. We assess requests against applicable law and shared pool history. Where appropriate, we may remove identifying information while retaining historical assignments or financial records. Closing an account does not automatically release or redraw its contestants.
Deletion from live systems may not immediately remove information from backups, which follow their own retention and replacement cycles.
Security
We use measures such as encrypted connections, verified accounts and role-based database access controls to protect information. No system or method of transmission is completely secure. Protect your email and Google accounts, keep sign-in links and codes private, and report suspected account compromise to support@blindside.club.
Children
Blindside Club is not intended for children under 13. If we learn that a child under 13 supplied personal information without appropriate authorization, we will take steps to remove it as required by applicable law. Please contact us if you believe this has happened. Participation in any paid pool must also meet the eligibility rules and laws that apply to it.
Your privacy choices and rights
Contact us to ask about access to your information, corrections, deletion, account closure or any other privacy question. Depending on where you live, you may have additional rights, including rights to object to certain processing, withdraw consent or complain to a privacy regulator.
We may need to verify your identity before acting, and some requests are subject to legal exceptions. We will explain relevant limits and respond within the time required by applicable law. Withdrawing information or consent needed to run your account may mean we cannot continue providing that part of the service.
International processing
Our Supabase project is located in Canada, but our providers and support systems may process or store information in other jurisdictions, including the United States. Information may be subject to the laws and lawful access requirements of those jurisdictions. A Canadian database region does not mean all processing stays in Canada.
Changes to this policy
We may update this policy as the service or legal requirements change. We will show the new revision date here and provide further notice or obtain consent when required. Review this page occasionally, especially when new features arrive.
Contact and fan-project notice
For privacy requests, contact Blindside Club’s operator at privacy@blindside.club.
Blindside Club is an independent fan-created platform. It is not affiliated with, endorsed by, sponsored by, or produced by Survivor, CBS, Paramount, or any related broadcaster, production company, contestant, host, or rights holder.
Survivor and related intellectual property belong to their respective owners.