Fourth Down Forecast ("we", "us") is an NFL prediction and pick'em site. This policy covers what we collect when you use it, why, and what you can do about it. The short version: we collect what it takes to run your account, we don't sell it, and we don't run ads or third-party tracking.
What we collect
- Account details. The display name you choose and your password, which we store only as a one-way hash. If you add an email address, we store that too.
- What you do on the site. Your picks, Outlast entries, comments, groups you create or join, badges, and your settings (favorite team, display preferences, time zone).
- Sign-in cookie. One cookie that keeps you signed in. It lasts up to a year, or until you log out.
- Browser storage. A few display choices (like whether you've dismissed a notice) are kept in your browser's local storage. They never leave your device.
- Technical data. Your IP address is used in memory to limit repeated sign-in attempts. Our hosting provider keeps standard server logs (IP address, pages requested, time) for security and troubleshooting. When a page fails with an error, we record the error, the page, and your account so we can fix it.
- iPhone app diagnostics. The iPhone app sends Apple's crash, hang and performance reports (MetricKit) to us, linked to your account, so we can fix problems. They describe the app and device (app version, iOS version, device model), not your activity. We keep the most recent 2,000 reports.
How we use it
- To run your account and show your picks, standings and comments.
- To send you a password-reset link, and only when you ask for one. We don't send marketing email.
- To keep the site secure and working: stopping abuse, fixing problems.
Who can see what
The site is for signed-in members. Other members can see your display name, badge, picks on the leaderboard, Outlast entries, and comments. Members of a private group see that group's standings. Your email address and password are never shown to anyone.
Who else handles it
We don't sell or rent your information, and we don't share it for advertising. A few service providers handle it on our behalf, only to run the site:
- Our web host and our database host, which store and serve the site and its data.
- Our email provider, which delivers password-reset emails.
We'd also disclose information if the law required it, or to protect the site and its members from fraud or abuse. If the site changes hands, your information would go with it under this policy.
Game data comes from public sources (nflverse, ESPN, Open-Meteo). We never send them anything about you.
How long we keep it
As long as your account exists. When you delete your account, we delete your account details, picks, entries, comments, badges, settings and app diagnostics, and any group you own, right away. Server logs and backups age out on our providers' normal schedules.
Your choices
- Change your email, password and display settings in Settings.
- Delete your account yourself from Settings at any time.
- Ask us for a copy of your information, or to correct it, by writing to 4d4cast@gmail.com.
Depending on where you live, you may have other rights under local law. Write to us and we'll honor them.
Age
The site isn't meant for anyone under 18, and we don't knowingly collect information from children under 13. If you think a child has signed up, tell us and we'll delete the account.
Security
Passwords are hashed, the site is served only over HTTPS, and reset links expire after an hour and work once. No system is perfectly secure, so use a password you don't use anywhere else.
Changes
If we change this policy, we'll update the date at the top. If a change is significant, we'll tell you on the site before it takes effect.
Contact
Questions or requests: 4d4cast@gmail.com.