Privacy policy

We collect the email address and password you submit to create an account. The password is converted to a scrypt hash and is not stored in plaintext. We also store account sessions, conversations with the analyst, and product activity you choose to create or save.

We don’t sell personal data, run third-party advertising, or share your identity with data partners. The sports-data and odds providers that power the engine receive no personal information about you at all.

An essential session cookie keeps you signed in using an opaque token stored as a hash server-side. Optional analytics tags managed through Google Tag Manager load only after consent. Aggregate, cookieless operational analytics may also be used to understand site reliability and page usage.

Account data is kept while your account exists and as otherwise required for security, legal, or operational purposes. Contact us to request access, correction, or deletion; we will explain any data that must be retained.

Passwords are hashed with scrypt and compared in constant time. Sessions are random opaque tokens, stored as SHA-256 hashes, carried in an httpOnly cookie. Server secrets are guarded against ever shipping to the browser. No system is breach-proof; this one is built not to hold what it doesn’t need.

Material changes get a new date at the top of this page. Questions or data requests can be sent through the contact page.