Gridspin
🏈 Football draft game
Privacy policy
Gridspin is a free football game. It keeps as little about you as it can: an email address if you want an account, the name you pick, and the seasons you play. There are no adverts, no analytics and no trackers, and nothing is sold or handed to anyone else.
Anything below can be undone by writing to privacy@gridspin.app.
Playing without an account
You can play Gridspin without signing up, and nothing is asked of you to do it. A draft in progress is kept in your own browser so you can come back to it, and it never leaves your device until a season is finished.
When you finish a season, the site makes a guest account for you so the score can go on the leaderboard. A guest account holds no personal information at all: no email address, no name you gave it - just a name the site generates, like Guest_4F2A1, and the seasons played under it. You can turn it into a real account later, and everything carries over.
Accounts
An account is an email address, a password and the username you pick. The password is handled by Supabase, the service that runs the database and sign-ins, and is stored only as a hash - nobody at Gridspin can read it.
If you sign in with Google instead, Google sends the site your email address, your name and a link to your profile picture. The email address is what identifies the account; the name and picture link sit unused in the account record, and the game shows only the username you choose.
Account emails are sent for one reason: running the account - confirming an address, resetting a password. There is no mailing list and no marketing.
What other people can see
Your username, your scores, your records, your best lineups and your badges are public: that is what a leaderboard is. So are anything you write in your bio, the picture you choose and the team you pick as your favourite.
Your email address is never shown to anyone, whether you signed up with it or arrived through Google.
What the game records as you play
Every finished season and every abandoned one: the boards you were dealt, the players you drafted, the score, the result and when it happened. The same for the daily, for Over/Under and for Build-a-player.
The coins a season earns, the badges it unlocks and anything bought in the shop. Coins are a game score - there is no real money anywhere in Gridspin and nothing to buy with real money.
Pictures
A profile picture is cropped to 256 by 256 in your own browser before it is uploaded, and every piece of metadata the file carried - where and when it was taken, what took it - is removed in the process. What reaches the server is the picture and nothing else.
Pictures are stored in a public bucket, which means anyone with the address of the file can open it, the same as any image on any website. A moderator can remove a picture or a bio that breaks the site's rules.
Where it all lives, and who else sees it
The database, the sign-ins and the pictures are held by Supabase. The site itself is served by Vercel. Both keep ordinary server logs to run the service, which include IP addresses and the times requests were made.
The typefaces come from Google Fonts, so Google's servers receive the request for them when a page loads. Nothing else on the site is loaded from anywhere else: there are no adverts, no analytics, no tracking pixels and no third-party scripts.
Nothing is sold, rented or handed to anyone else.
What is kept on your device
A draft in progress, the scoring format you last chose, whether you have seen the rules, and - if you are signed in - the token that keeps you signed in. It lives in your browser's own storage rather than in advertising cookies, and clearing your browser data removes it.
Your choices
You can change or clear your bio, your picture and your favourite team whenever you like, from your profile. To have your account and everything recorded under it deleted, write to privacy@gridspin.app from the address the account uses, and it will be removed.
A guest account identifies nobody, so there is nothing to delete - stopping playing is enough. If you would rather its scores came off the leaderboard, write in and say which name it was.
Children
Gridspin is not aimed at children under 13, and no data is knowingly kept from them. If you believe a child has made an account, write in and it will be removed.
Changes to this page
This page says what the site does today, and it is updated when the site changes. It was last updated on 21 September 2026.