What Pickwarden can see
When a commissioner installs Pickwarden, Google asks for six permissions. Each has one job. This spreadsheet only: read and write the pool's own sheet, never your other files. Menus and a sidebar inside the sheet. One outside connection: only Pickwarden's own score service, at one fixed address. Run on a schedule: the deadline guard and the hourly results job. Your email address: to know which member column is yours. Files Pickwarden creates in your Drive: weekly backup copies, only if the commissioner turns them on. It cannot open any other file in your Drive.
What it stores, and where
Your pool lives in your spreadsheet: members and their email addresses, picks, results, settings and the lock log, in the sheet itself and in its hidden script settings. It goes wherever the spreadsheet goes. Pickwarden does not copy your members, email addresses or picks to its own servers. If the commissioner turns on weekly backups, the copies go to a folder in the commissioner's own Google Drive, and only the latest six are kept. Pickwarden is not meant for children under 13.
How Pickwarden uses Google data
Pickwarden uses the Google data it can reach only to run your pool inside the sheet: to read and write the pool's tabs, to match the signed-in person to their member column, and to make backup copies when the commissioner turns them on. It does not sell this data, transfer it to anyone, use it for advertising, or use it to train AI models. No person reads it, except when you send us a support report or the law requires it.
Pickwarden's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Schedules, scores and support
The add-on gets the football schedule and live scores from Pickwarden's score service, which runs on Cloudflare. A request names the season and week and carries a random pool ID, the add-on version and the add-on's key. It never carries names, email addresses or picks. The service takes its data from public football data (nflverse) and the BALLDONTLIE API and sends them nothing about you.
When you send a report from the add-on's Help menu or email [email protected], we keep what you wrote, your reply address if you give one, and diagnostics only if you tick that box (settings and states, never names, email addresses or picks). Reports are stored on Cloudflare and deleted within 12 months. A short notice of each report, without your address, is posted to our private Discord channel so we see it quickly. To stop abuse, the service counts reports per IP address for up to two hours.
Payments
Pickwarden never handles pool entry fees or any money between members, and it never asks for card details inside the sheet. If paid plans are introduced later, this page will say who processes payments and what they receive before anyone is charged.
Free through the 2026-27 playoffs.
Removing it
A commissioner can remove Pickwarden's triggers in the sidebar (Tools, Remove my triggers) and uninstall it from Extensions, Add-ons, Manage add-ons. Anyone can revoke its access at myaccount.google.com/permissions. Uninstalling does not delete your pool: its tabs and data stay in the spreadsheet until you delete them. To have a report or support email deleted sooner, write to [email protected].
Changes and contact
When this policy changes, the new version is posted here with a new date. Questions: [email protected].