Privacy Policy

Effective Date: August 1, 2026

1. Information We Collect

We collect the following categories of information:

Category	Examples	Purpose
Account data	Email address	Authentication, communication
Usage data	Sports viewed, features used, session duration	Product improvement, analytics
Subscription data	Tier, billing status (via Stripe)	Access control, billing
Feature interest	Waitlist signups, feature clicks	Product roadmap prioritization
Bets you choose to log	Sport, side, odds, stake in units, sportsbook name, timestamp	Calculating your closing-line value and personal performance
Beta list data	Email address, referral source, invite and first-sign-in timestamps	Managing closed-beta invitations

Sign-in is passwordless. We do not create, store, or have access to a password for your account — authentication is by emailed magic link or a supported third-party provider, handled by our authentication provider.

About logged bets. Bet logging is entirely optional and entirely self-reported. We record only what you type into the bet-logging form. We do not connect to your sportsbook, import your betting history, or observe any wager you place. Stake is recorded in units, not currency amounts.

We do not collect: sportsbook credentials, financial account information, payment card numbers (handled by Stripe), or government-issued IDs. We do not verify your age or identity against any external source.

2. How We Use Your Information

Provide and maintain the Service
Authenticate your identity and manage your subscription
Improve the Service based on usage patterns
Send transactional emails (account confirmation, billing updates)
Respond to support requests

We do not sell, rent, or share your personal information with third parties for marketing purposes.

3. Data Sharing

We share data only with:

Stripe — Payment processing (PCI-compliant). We never see or store your credit card number.
Fly.io — Cloud hosting provider. Data is stored in US-East (Newark, NJ).

We do not share data with advertisers, data brokers, or analytics companies.

4. Data Storage and Security

Sign-in is passwordless, so there is no account password for us to store or leak.
API keys are hashed with SHA-256 before storage.
Sign-in sessions are represented by a signed token that expires after 30 days, after which you must sign in again.
All connections are encrypted with TLS (HTTPS enforced).
Database is hosted on managed PostgreSQL with encrypted storage.

5. Data Retention

Account data — Retained while your account is active. Deleted within 30 days of account deletion request.
Usage analytics — Aggregated data retained indefinitely. Individual session data purged after 90 days.
Prediction history — Retained for model training and audit purposes. Available for export via the Analytics tab.
Bets you logged — Retained while your account is active, so your closing-line value history stays intact. Deleted with your account.
Beta list data — Retained for the duration of the closed beta and up to 12 months afterward, then deleted. Removed sooner on request.

6. Beta Communications and Opt-Out

If you join the closed-beta list or are invited directly, we use your email address solely to send beta invitations and communications about the beta itself. We do not sell, rent, or share it, and we do not add you to a general marketing list.

You can opt out at any time by replying "unsubscribe" to any beta email, or by writing to support@consensusedge.com. We will stop sending beta communications and remove your address from the beta list. Transactional messages you request — such as a sign-in magic link — are not marketing and are not affected by opting out.

Every beta email identifies the sender and includes a way to opt out, consistent with the CAN-SPAM Act.

7. Your Rights

You have the right to:

Access your personal data (via the /me API endpoint or by contacting support).
Correct inaccurate data.
Delete your account and associated data.
Export your prediction history (CSV export in Analytics tab).
Withdraw consent for non-essential data processing.

To exercise any of these rights, contact support@consensusedge.com.

8. Cookies and Tracking

The Service sets a small number of strictly necessary cookies, and uses localStorage for preferences. Specifically:

Sign-in cookie — set when you sign in, so the Service knows the request is yours. Sent over HTTPS only, and expires after 30 days or when you sign out.
localStorage — UI preferences (theme, tutorial dismissal) and an anonymous session identifier used for aggregate usage analytics.

These are required for the Service to function; there is no advertising or profiling use. We do not use third-party tracking cookies, advertising pixels, cross-site trackers, or device fingerprinting, and we do not share this data with advertisers or data brokers.

9. Children's Privacy

The Service is not intended for anyone under 21 years of age (the legal sports betting age in most US jurisdictions). We do not knowingly collect data from minors.

10. California Residents (CCPA)

If you are a California resident, you have additional rights under the CCPA, including the right to know what personal information is collected, request deletion, and opt out of sale (we do not sell personal information).

11. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email or in-app notification. The "Effective Date" at the top reflects the latest revision.

12. Contact

For privacy-related questions or requests, contact us at support@consensusedge.com.