LockedIn82 is a free NBA prediction game operated from New Zealand by an individual. This policy explains what personal information we collect, why, and what we do with it.
We handle personal information in accordance with the Privacy Act 2020.
Questions, or want your data: hello@lockedin82.com
The short version
We collect your email address and your picks. We use your email to sign you in and to send you reminders you can turn off. We don't sell your data, we don't run ads, and we don't track you across other websites.
1.What we collect
Your email address. Required — it's how you sign in, since we use magic links rather than passwords.
Your display name. Chosen by you. Visible to other users in your pools, and on the global leaderboard if you've opted in.
Your timezone. So game times show correctly for you.
Your picks. Which team you predicted for each game, and when you made the pick.
Your email preferences. Whether you want reminders, and how often.
Basic technical information. Standard server logs — IP address, browser type, pages requested. These are generated automatically by our hosting provider and are used for security and troubleshooting.
We do not collect: your real name, date of birth, address, phone number, or payment details. We never ask for them because we never need them.
2.Why we collect it
| What | Why |
|---|---|
| Email address | To sign you in, and to send reminders and service messages |
| Display name | So other users can see who they're competing against |
| Timezone | To show game times in your local time |
| Picks | To run the game and calculate leaderboards |
| Email preferences | To respect your choices about being contacted |
| Server logs | Security, debugging, and preventing abuse |
3.Who can see your information
Other users can see: your display name, your picks in pools you share with them once those games have locked, and your standing on leaderboards.
Your email address is never shown to other users.
If you opt out of the global leaderboard, you'll still be ranked but will appear as "Anonymous" to other users.
We share data with the following service providers, only as needed to run the site:
- Supabase (database and authentication) — hosted in Sydney, Australia
- Vercel (website hosting) — global infrastructure
- Resend (sending email) — United States
- Cloudflare (DNS and email forwarding) — global
- BallDontLie (NBA schedule and scores) — we send them nothing about you; we only receive game data
Because these providers operate outside New Zealand, your information is stored and processed overseas. We only use providers that offer comparable privacy safeguards to those required under the Privacy Act 2020.
We do not sell your personal information to anyone, ever.
4.Cookies and tracking
We use cookies only to keep you signed in. That's it.
We don't use advertising cookies, analytics that track you across other sites, or third-party trackers of any kind.
5.Emails we send you
Sign-in emails. Sent when you request a magic link. You can't opt out of these — they are how you access your account.
Reminder emails. Optional. We'll never send more than one email per day, and you can change the frequency or turn them off entirely from your profile, from the unsubscribe link in any email, or by emailing us.
6.How long we keep your data
We keep your account and picks for as long as your account exists.
If you delete your account, we delete your email address, display name, and preferences. We may retain anonymised historical results so that other users' past leaderboards remain accurate — this data won't identify you.
Server logs are retained for a short period by our hosting providers under their own policies.
7.Your rights
Under the Privacy Act 2020 you have the right to:
- Access the personal information we hold about you
- Correct it if it's wrong
- Delete your account and the personal information attached to it
You can update your display name, timezone, and email preferences yourself from your profile page.
For anything else — including a copy of your data or account deletion — email hello@lockedin82.com and we'll respond within 20 working days, as required by the Act.
If you're unhappy with how we've handled your information, you can complain to the Office of the Privacy Commissioner at privacy.org.nz.
8.Security
We use industry-standard measures to protect your data — encrypted connections, database-level access controls, and no stored passwords (because we don't use them).
No system is perfectly secure. If a privacy breach occurs that is likely to cause you serious harm, we'll notify you and the Privacy Commissioner as required by the Privacy Act 2020.
9.Children
The site isn't directed at children under 13, and we don't knowingly collect information from them. If you believe a child under 13 has created an account, email us and we'll delete it.
10.Changes to this policy
If we make a significant change we'll note it on the site or email you. The date at the top shows when this was last updated.
Contact: hello@lockedin82.com