Privacy Policy
Last updated: July 14, 2026
This page is currently only available in English. / Esta página solo está disponible en inglés por el momento.
Squares (“we,” “us”) is a small football (and other sport) squares pool tool operated by Xander Labs at squares.xanderlabs.io. This policy explains what information we collect, why, and how it’s handled.
Information we collect
Account information
When you sign up, we collect your email address, password, and the name you enter. Your password is handled by our authentication provider (Supabase) and is never stored or visible to us in plain text.
Game & participation information
The display name shown on a square (yours, or a name an organizer types in for someone entering offline) and any email address an organizer enters to invite a participant.
Feedback you submit
If you use the feedback form, we send your message to us along with the email and name on your account, so we can read and reply to it.
Automatically collected information
A cookie that remembers your language preference (English/Spanish), and the authentication session cookies our login system requires to keep you signed in. We do not use analytics, advertising, or tracking cookies of any kind, and we do not log IP addresses.
How we use this information
- To run your account and the squares pools you create or join.
- To send transactional emails you’d expect — game invites, password resets, and replies to feedback.
- To remember your language preference.
- To prevent abuse (for example, limiting how often invites, feedback, or password-reset requests can be sent from the same account).
We never sell your information, and we don’t use it for advertising.
Who we share it with
We rely on a small number of service providers to run Squares, each only for the purpose below:
- Supabase — hosts our database and handles authentication (sign-up, login, password storage).
- Resend — delivers transactional emails (invites, password resets, feedback).
- Vercel — hosts the application itself.
We don’t share your information with advertisers, data brokers, or any other third party.
About payments
Squares does not process payments and never handles card or bank information. The “paid” or “unpaid” label on a square is just a note an organizer sets manually — money for a pool is exchanged directly between participants outside the app.
Cookies
We use two kinds of cookies: one that remembers your chosen language, and the session cookies our login system sets to keep you signed in. Neither is used for tracking or advertising.
Data retention & deletion
We keep your account and game data for as long as your account exists. There isn’t a self-serve delete-my-account button yet — if you’d like your account and associated data deleted or exported, email us at xander@xanderlabs.io and we’ll take care of it.
Age requirement
Squares is intended for adults. You must be at least 18 years old to create an account, and we ask you to confirm this when you sign up. Squares isn’t directed at children, and we don’t knowingly collect information from anyone under 18. If we learn that we’ve collected information from someone under 18, we’ll delete it.
Changes to this policy
If this policy changes, we’ll update the date at the top of this page. Continued use of Squares after a change means you accept the updated policy.
Contact
Questions about this policy or your data? Email xander@xanderlabs.io.