Privacy Policy

Plain English summary: we keep your email, your password as a scrambled hash, your settings, your practice game, and a log of what you do on the site. We set a cookie so the site recognises your browser. We do not sell your data, we never ask for your exchange password or API key, and your card lives with Stripe, not with us.

1. What we collect

Account data: email, display name, a hashed password (never the plain password), the time you accepted the risk disclaimer and the version you accepted.
Practice game and usage: your pretend-money balance and bets, the pages you open, the buttons you press, how long you stay on a page and how far you scroll, with time stamps, your IP address and your browser type. We use this to run the game, to see which parts of the site work, and to keep the site safe.
Cookies: a session cookie that keeps you logged in, a language cookie, a short-lived visit id and a visitor id that lasts up to two years so your visits are counted as one person. See the Cookies page.
Payment data: handled by Stripe. We never see or store your card number. We receive your subscription status and the identifiers Stripe gives us.

2. What we never collect

Your exchange or sportsbook password, API key, balances, positions or bets. The Service does not connect to your betting accounts.

3. How we use it

To run the Service: your login, the board, the picks, the practice game and the record. To bill Pro membership through Stripe and answer support requests. To understand how the site is used and improve it. To prevent fraud, abuse and attacks. We do not sell or rent personal data and we do not share it for third-party advertising.

4. What we share

Stripe for payments, our hosting provider, and our score and market data providers, each only what it needs to do its job. Exchanges you open through a referral link learn only that you came from our link, unless you sign up with them. Authorities, if the law or a valid legal process requires it, or to protect the Service and its users.

5. Retention and security

We keep account data while your account exists and as long as billing, legal and security needs require, then delete or anonymise it. Usage logs are kept for up to 90 days on our systems. Data is stored on our own server with restricted access and served over HTTPS. No system is perfectly secure; use a unique password.

6. Your rights

You can cancel on the Billing page and ask us, through the Contact page, to see, correct or delete your personal data. We honour requests as the law requires, including rights under state privacy laws such as the California Consumer Privacy Act. We do not sell personal data, so there is nothing to opt out of on that point.

7. Children

The Service is for adults. We do not knowingly collect data from anyone under 18; if you believe a minor has an account, contact us and we will delete it.

8. Changes and contact

We may update this policy; the date at the top shows the current version. Questions go through the Contact page.