Privacy Policy

First Down Intel collects only what the account and the service need to run:

• Account information — your email address and authentication credentials, managed by Firebase Authentication. We do not store your password.
• Membership and billing — your plan and whether your membership is active, your billing status, the Stripe customer and subscription identifiers for your account, when the current subscription was created, and — for Founder members — a record of whether a Founder membership has previously ended. Card details are collected and held by Stripe; First Down Intel never receives or stores a card number.
• Founder place — if you sign up for Founder membership we record the Founder place associated with your account. While your checkout is still in progress that place is only held for you temporarily, and the hold lapses if the checkout is never completed. Once a Founder signup completes, the record becomes part of your membership record and is kept as part of the count of how many Founder places have been issued — that count is how the limit of 55 is administered, and a completed place stays counted even if the membership later ends.
• Temporary checkout records — while you are signing up we keep a short-lived record of the checkout in progress, so that one account cannot start two at once. It is stored separately from your account record and holds your account identifier, the plan being purchased, and creation and expiry times.
• FDI NFL Briefing (optional) — if you choose to subscribe to the FDI NFL Briefing, the email address you enter is sent to our newsletter provider, together with where on the site you signed up and which version of the consent wording you agreed to. First Down Intel does not keep its own copy of newsletter subscriber addresses; the subscription is held by the newsletter provider.
• Technical and log data — IP address, browser and device type, and request logs generated automatically by the hosting platform for security and reliability.

That is the complete list. First Down Intel does not store saved selections, watchlists, portfolios, notification preferences, or any other member-created content, because the product has no feature that creates them.

To authenticate you, to determine whether your membership is active, to process and manage your subscription, and to keep the service secure and working. The membership and checkout records described above are also used to stop one account ending up with more than one subscription or more than one checkout running at the same time, and to apply the Founder membership terms — including how many Founder places have been taken and whether a Founder membership has previously ended. We do not sell personal information and we do not use it for advertising.

If you subscribe to the FDI NFL Briefing, your email address is used to send you the briefing and the occasional product updates it includes, and nothing else. You confirm the subscription from the email we send, and you can unsubscribe at any time using the link in any briefing email. We do not sell subscriber data.

• Stripe, Inc. — payment processing and subscription billing.
• Google LLC (Firebase) — authentication, database storage (Firestore), and application hosting.
• Buttondown, LLC — delivery of the optional FDI NFL Briefing email newsletter and management of its subscriptions, including the confirmation email and unsubscribe. It receives only the details of people who choose to subscribe.

Those are the only three. First Down Intel currently uses no product-analytics provider, and uses an email provider only for the optional FDI NFL Briefing. Each processor handles data on our behalf under its own data-protection terms. We may disclose information where the law requires it.

One essential cookie is set: a session cookie named __session, marked HttpOnly and Secure with SameSite set to Lax. It keeps you signed in and is required for the service to function. There are no advertising cookies, no cross-site tracking, and no analytics identifiers, because no analytics provider is in use.

Account and billing records are kept while your account exists. If you close your account or ask us to delete it, we delete or anonymise your personal data within a reasonable period, except where a record must be retained to meet a legal obligation — billing and tax records in particular.

A temporary checkout record, and a Founder place that is still only being held while checkout is in progress, stop counting as current 24 hours after they are created: past that point the service no longer treats them as an in-progress checkout or a held place. That is how long they remain in effect, which is not the same as how long the underlying record is stored. An expired record is cleared when it is replaced by a later checkout, or when the related billing event arrives, and may otherwise remain stored until it is removed. We do not currently operate an automated process that deletes these records at a fixed time, and we do not claim one.

That 24-hour rule applies only while a signup is unfinished. It does not apply once a Founder signup completes: the record of a completed Founder place is kept as part of your membership and billing history, because it is what allows the limit of 55 Founder places to be administered over the life of the product. It is retained on the same basis as the rest of your membership record described above, and we do not state a fixed period for it.

An FDI NFL Briefing subscription is held by the newsletter provider until you unsubscribe or ask us to remove it.

A deletion request under section 6 covers all of these like any other personal data.

Depending on where you live you may have the right to access, correct, delete, or export your personal data, and to object to or restrict some processing. California residents (CCPA/CPRA) have the right to know what is collected and to request deletion; we confirm we do not sell personal information. Residents of the EEA and UK (GDPR) have the corresponding rights. Contact us to exercise any of them and we will verify the request and respond within the period the applicable law requires.

Traffic to the service is encrypted in transit with TLS, and data is held by the infrastructure providers named above under their security controls. Access to member data is server-side only; the browser client is limited to authentication. No system is perfectly secure, and we do not claim otherwise.

The service is for adults of legal age in their jurisdiction and is not directed to children. We do not knowingly collect personal information from anyone under 18, and we delete it if we learn we have.

First Down Intel operates in the United States and its processors handle data primarily in the United States. If you use the service from elsewhere, your information will be processed in the United States, where data-protection law may differ from your own.

For a privacy or data-rights request — access, correction, deletion, export, or an objection to processing — contact privacy@firstdownintel.com. For general, account, subscription or billing questions, use support@firstdownintel.com.

See also the terms of use.