Privacy policy

Unscripted is operated by [ADD LEGAL NAME OR 'the operator of Unscripted']. For anything in this policy, including requests about your data, contact [ADD A CONTACT EMAIL].

From Google, when you sign in

Your name, email address, profile image URL, and the tokens that keep you signed in. Sign-in is Google only, so we never see or store a password.

What you create in the app

Your display name, team names, uploaded team logos, league names and invite codes, draft picks, roster changes, trade proposals and their messages, and the scoring history attached to your team.

What you paste in

If you are a commissioner and you paste an episode recap to be scored, we store that text and the events extracted from it.

Technical data

Our host keeps standard server logs, which include IP addresses, user agent strings and request paths. We do not add any analytics, advertising or fingerprinting of our own.

To sign you in and keep you signed in; to run your leagues (rosters, drafts, matchups, standings); to score episodes and notify you when your team scores; to prevent abuse and control cost, which is why we rate limit the recap parser; and to fix things when they break.

If you are in the UK or EU, our lawful bases are performance of a contract (running the game you signed up for) and legitimate interests (keeping the service working, secure and affordable). We do not rely on consent, because we do not do anything optional with your data.

Anyone in a league with you can see your display name, team name and logo, roster, trades you propose to them, and your scoring history. They cannot see your email address.

If your Google account has no display name, you appear as “Friend”. We deliberately do not derive a name from your email address.

We use these providers, and no others:

• Google for sign-in (Google account), and Google Gemini to read episode recaps and extract scoring events. Recap text sent for scoring goes to Gemini. Do not paste anything you would not want sent to Google.
• Vercel hosts the app, keeps server logs, and stores uploaded team logos.
• Supabase hosts the database where everything above is stored.

The code also supports Anthropic’s Claude as an alternative recap parser. It is not enabled, and if we ever enable it this page will say so before we do.

We do not sell your data, and we do not share it for advertising. These providers process it on our behalf and are not permitted to use it for their own purposes.

On servers in the United States. If you are outside the US, using Unscripted means your data is transferred there and handled under US law.

Your account data stays until you delete your account. League activity stays for as long as the league exists, because it belongs to the other players too. Deleting a league removes its teams, rosters, matchups, drafts, trades and scoring events. Server logs are kept on our host’s normal schedule, which is short.

You can, at any time:

• See and correct your display name on your profile.
• Delete your accountfrom the same page. That immediately removes your email, name, profile image and sign-in tokens, and deletes your notifications. Match history stays with the leagues you played in, because it is other players’ record too, but it is no longer linked to an identifiable account.
• Ask for a copy of your data, or ask us to delete something the app does not expose, by emailing [ADD A CONTACT EMAIL].

Depending on where you live you may also have the right to object to processing, to restrict it, or to complain to your data protection regulator. Contact us first and we will try to sort it out.

One session cookie, so you stay signed in between page loads. No advertising or analytics cookies, which is why there is no cookie banner. Clearing it signs you out.

Unscripted is not intended for children. Do not use it if you are under 13, or under 16 in the UK and EU. We do not knowingly collect data from children, and we will delete any account we learn belongs to one.

Traffic is encrypted in transit. Database access is restricted to the application. Sign-in is delegated to Google, so we hold no passwords. That said, this is a prototype rather than a hardened production service, so please do not store anything sensitive in it.

If this policy changes in a way that matters, we will update the date at the top and, for anything significant, tell you in the app before it takes effect.