Shared account and profile
DuelPredict and TablePredict use the same Supabase authentication user and profile identity. Each domain stores its own browser session. Access tokens and refresh tokens are never placed in query parameters.
Predictions and public activity
Official and extra picks are stored for scoring, derived order, and aggregate community analysis. DuelPredict activity is separate from TablePredict activity. Public profile and leaderboard responses expose only fields intended for public display.
Fan Vote
Fan Vote stores a one-way hash of a signed-in account or a browser-generated voter key so one person can change their choice without exposing their identity. Public Fan Vote results contain aggregate totals only.
Private rooms
Room membership and invite codes are private. Invite-bearing paths are redacted from operational analytics, and invite codes are not included in public activity or share cards.
Operational data
To understand visits and guest-card progress, DuelPredict creates a random per-tab identifier. The database stores only a one-way hash of that identifier for up to 90 days, together with the page path, broad event type, optional campaign labels, and referring hostname. Cloudflare Web Analytics records aggregate pageviews, web performance, referrers, country, device, browser, and operating-system categories without cookies or custom DuelPredict events. It loads only on approved public pages, and SPA route tracking is disabled so private client-side routes are not collected. Both analytics paths respect browser Do Not Track and the DuelPredict opt-out, and exclude previews, automated tests, and QA sessions. The product-analytics record never stores your email, account identifier, IP address, or pick contents.
NFL game picks
The weekly pilot stores a random key in this browser to retrieve your saved picks and personal record without an account. The server stores a one-way hash of that key with your selected teams and pick timestamps. These picks are separate from your signed-in profile and season cards. Public results expose only aggregate game totals. Clearing browser storage loses access; it does not erase the server record.
To measure the pilot, we record daily visits to weeks with open games using the same hashed browser key, NFL season, week and visit date. This lets us compare first-pick rates, picks per observed browser and later-day returns to the following NFL week. This measurement excludes QA sessions, automated tests, Do Not Track, Global Privacy Control and our analytics opt-out. Visit records are removed after 90 days by the daily schedule refresh. Saved picks remain available for your results history.
Game-pick measurement
For supported game-pick sports, bounded signals record a loaded slate, a visit with an open game, opening Your picks, viewing a saved completed result, or an unconfirmed save. These records contain only the one-way browser-key hash, sport, season, week or slate date, event type and UTC observation date, deduplicated per browser and event each day. They never contain the raw browser key, team choices, account details or error messages. Measurement records are retained for up to 90 days and removed when the next accepted event is recorded. QA and previews, automated browsers, Do Not Track, Global Privacy Control and the analytics opt-out are excluded. Signals describe observed browsers, not verified people; a failed-save signal does not prove that a database write failed.
NHL game picks
NHL daily picks use a separate random browser key and one-way server hash, with the same public-aggregate and private-record separation as NFL picks. NHL records contain the season and Eastern slate date rather than an NFL week. Neither key is linked to your account or shared between sports. Clearing browser storage loses access to that sport’s saved record; signing in does not recover it. Visits to slates with open games use the same hashed key, season, slate date and UTC visit date to measure later-day returns to the following calendar-day slate. They respect the same measurement exclusions as NFL visits. Daily visit records are removed after 90 days by the schedule refresh.
Private operational reports combine these signals with confirmed saved picks to show aggregate participation, later-day returns and results reviews. They are restricted to server-side administrative access and do not expose browser identities or individual choices. Counts describe observed browsers, not unique people; unfinished return windows are not reported as a zero return rate.
Your choices
You can browse public competitions, leaderboards, and profiles without signing in. Authentication is required to submit official season cards, join rooms, or connect activity to your profile. NFL and NHL game picks and Fan Vote can be saved using a browser key instead.
Contact
Privacy questions can be sent to contact@tablepredict.com.