This policy is provided in English.
Drawbridge Privacy Policy
Effective: November 5, 2026
Drawbridge (drawbridge.free) is a private scoreboard for friendly pools. It is run by High Noon Office ("High Noon Office", "we"). This policy explains what we collect, why, and what you can do about it.
What we collect
What you type in:
- Your name, the one shown to the other members of your pool on the standings.
- Your email address. We use it to send your link back into the pool and to confirm the address is yours. Each email address can belong to only one Drawbridge account, across all pools.
- Your pool's settings (Treasurer only): the pool name, category, time window, purse and gambling allowance.
- Your email choices. The optional "Pool result updates" box starts unticked. We record what you chose and when.
- Your public Polymarket wallet address, if you paste one in. This is the public "My Wallet" address from your Polymarket profile. It is not a password or signing key. With it, we can read your betting activity but can never place bets or move funds. Anyone who knows a wallet address can already see the same public history.
What we create:
- An account ID, the time you joined, whether you confirmed your email, and (for the Treasurer) which players are marked as paid.
- Betting records read from Polymarket. We use Polymarket's public, read-only Data API to fetch the activity and positions for your wallet, then save the results that count toward your pool, such as the market title, outcome, result, settlement time and public transaction reference. That is how standings are calculated.
- Account records. When we sent your confirmation email, any account-recovery links we issued (with their expiry and whether they were used), and the invites you sent or used to join a pool.
- A personal link. This signed link gets you back into your pool. Anyone who has it can open your spot in the pool, so keep it private.
Cookies
We use only cookies the site needs to work. We do not use advertising or tracking cookies.
drawbridge_dynamic_playerWhat it does: Keeps you signed into your pool (signed ID)Lasts: 30 daysdrawbridge_inviteWhat it does: Remembers a valid inviteLasts: 30 daysdrawbridge_new_player_invite_claimWhat it does: Holds a one-time invite while you joinLasts: Deleted once you joinNEXT_LOCALEWhat it does: Remembers your languageLasts: 1 year
| Cookie | What it does | Lasts |
|---|---|---|
drawbridge_dynamic_player | Keeps you signed into your pool (signed ID) | 30 days |
drawbridge_invite | Remembers a valid invite | 30 days |
drawbridge_new_player_invite_claim | Holds a one-time invite while you join | Deleted once you join |
NEXT_LOCALE | Remembers your language | 1 year |
We do not run analytics software or ad pixels on the site, and we do not store the tracking tags (like utm_ codes) that ad links carry. If we buy ads on X, X may track your click on its own side, under its own policy.
How we use it
- To run your pool: show standings, let the Treasurer see who has joined, linked a wallet and been marked paid, and get you back in.
- To send emails you need: the confirmation when you join ("You're in."), and for Treasurers, "Your pool is live" with the dashboard and invite links.
- To send optional emails only if you ticked the box: pool result updates. We do not send product updates or marketing emails. Every email we send includes an unsubscribe link, and you can also email us to stop them at any time.
- To fix bugs and keep the service secure.
We never sell your personal data, and we don't share it with advertisers.
Who else handles it
We use a few service providers. They process data only to run Drawbridge:
- Vercel hosts the website and may keep standard server logs, such as IP addresses and request times.
- Supabase runs our database.
- Resend delivers our email.
- Polymarket is the source of the public wallet data we read. We send Polymarket only the public wallet address in order to look it up.
- Google (Gmail) receives any email you send to our support address.
Other members of your pool see your name and your place in the standings. We may share data if the law requires it.
How long we keep it
If you don't delete your account, we keep your data while your pool exists and for 12 months after the pool's window ends. If you delete your account, we remove your data right away, not on that 12-month clock. Copies in backups and our providers' logs take longer to cycle out, and the legal-hold exception below still applies.
Your choices and rights
- Delete your account: use the "Delete my account" request in Drawbridge (we email you a link) or the "Delete my account" link at the bottom of any Drawbridge email, then confirm on the page. You can also email thehighnoonoffice@gmail.com. Players can delete their account at any time, even while a pool is running. If you are the Treasurer of a pool, you can delete your account once that pool's window has ended, because the other members depend on it. You can still stop optional emails at any time.
- See your data: email thehighnoonoffice@gmail.com. We'll confirm the request comes from you, usually by replying to the email address on your account, and act within 30 days. Deleting your data removes you from the pool's standings. We delete on request unless the law requires us to keep something, for example a legal hold or a valid request from law enforcement. In that case we keep only what's required, only as long as required, and delete it after.
- Change your wallet: paste a new address on the connect page.
- Unsubscribe: every email has an unsubscribe link. Once you unsubscribe, we stop all optional emails to that address. The only emails you may still get are ones you set off yourself, such as the confirmation with your personal link when you join or create a pool. You can resubscribe from the same page.
- Depending on where you live (for example the EU, the UK or California), you may have other rights too, such as correcting your data, moving it to another service, or complaining to a regulator. Contact us and we will help.
Age
Drawbridge is not for anyone under 18, or the legal betting age where you live, whichever is higher. We do not knowingly collect data from children.
Security
Sign-in links and cookies are signed, the database is not public, and we never ask for a Polymarket password or key. No system is perfect, so keep your personal link private.
Changes
If we change this policy, we'll post the new version here with a new effective date. If the change is significant, we'll also email the people affected.
Contact
High Noon Office. Email: thehighnoonoffice@gmail.com