Privacy Policy

01Overview

SportsGods LLC, a North Carolina limited liability company (“SportsGods,” “we,” “us,” or “our”) provides data-driven sports analytics, picks, line comparisons, and related tools at sportsgods.com. We are the controller responsible for the personal information described in this policy. This Privacy Policy explains what personal information we collect, why we collect it, how we use and share it, and the choices you have.

By using SportsGods you agree to the practices described here. If you do not agree, please do not use the site.

02What we collect

Information you give us

• Account & subscription data. Email address, subscriber code, and the plan you selected. If you create your account with an email and password, your password is handled by our authentication provider (Supabase Auth), which stores only a hash — we never see it. If you subscribe, your payment method is collected directly by Stripe — we never see your full card number or CVC.
• Bets you log. If you use My Bets, we store every wager you record: the sportsbook or prediction market you placed it at, the stake and potential payout, the odds, market, line and side, the teams, players and game, the date you placed it, and any free-text note you attach. We use this to build your personal record, ROI, and closing-line-value dashboard. We do not share it with sportsbooks or anyone else.
• AI Chat conversations. We store the full text of the messages you send to AI Chat and the replies we generate, linked to your account and chat session, so we can debug the feature, enforce our safety rails, and investigate abuse. Please do not enter sensitive personal information into AI Chat.
• Free text you type into the product. Some actions let you write a note — for example a reason when you cancel your subscription. We keep that text with the related account or billing record.
• Mailing-list address. If you sign up for the daily receipts digest without creating an account, we store the email address you entered, the page you entered it on, the country your request came from, the time you signed up, and the time you confirmed. Nothing else.
• Support correspondence. If you email or message us, we keep those messages and contact details so we can respond and maintain a record.
• Terms acceptance. The time you agreed to our Terms is stored alongside your account.

Information collected automatically

• Browser & session data. Your browser sends a random local identifier and may send a hashed technical fingerprint along with authenticated requests. We also receive your IP address, browser user-agent, login timestamps, and session identifiers. We keep a coarse network identifier derived from your IP address — the network block, not the full address — for up to 30 days, and count how many distinct networks your account has been used on in a rolling 7-day period. This information is used to troubleshoot sign-ins and manually review suspected credential sharing. We do not impose a numeric device limit, require confirmation of a new browser, or take automated action against your account because of this data. Historical device-binding records created before September 1, 2026 may remain until their normal retention or account-deletion process runs. We also derive an approximate location from your IP address to apply the state and country restrictions described in our Terms.
• Usage data. Pages you visit, features you use, API requests you make through our Cloudflare Worker, and daily usage counters per account (line searches, parlay builds, AI Chat queries) used to enforce plan limits.
• Server, error & security logs. Standard web-server access logs at our static host (IP address, request path, timestamp, status code, user agent) and short-lived operational logs at our edge provider. These operational logs include your IP address, browser user-agent, the page URL, and the text of any JavaScript error or content-security-policy violation your browser reports to us. They are kept for security, abuse detection, and debugging.
• Capture & anti-piracy signals. On pages containing subscriber-only content we log events that correlate with copying or redistributing it: screenshot and print keyboard shortcuts, screen-share or screen-recording requests, copying a large block of text (we record only the number of characters, never the text itself), rapid or repeated tab-switching and window-focus loss, and whether your browser’s developer tools appear to be open. Each event is recorded with your account, your device identifier, the page you were on, and your browser platform, and may be used as grounds to suspend an account under our Terms.
• Referral attribution. If you arrive through a referral code, we record the code, the plan and billing period you were viewing, and your browser’s user-agent string so we can credit the referrer. This happens before you have an account.

Information from third parties

• Stripe. We receive your Stripe customer and subscription identifiers, your subscription status and price, your trial and renewal dates, and the email address you gave Stripe at checkout. We also keep a copy of the raw Stripe event payload for each billing change as an audit record; for a completed checkout that payload can include the name, phone number, and billing address you entered on Stripe’s checkout page. We never receive or store your card number or CVC.
• Google (Sign in with Google). If you choose “Continue with Google,” Google tells us the email address and basic profile information on your Google account so we can create or find your SportsGods account.
• Email providers. Delivery status of the emails we send you.

03How we use it

• Deliver the service — create and manage your account, validate your subscriber code, enforce tier gates, serve picks and analytics, run AI Chat, and build your personal My Bets record, ROI, and closing-line-value dashboard.
• Process payments via Stripe, including subscription renewals, cancellations, refunds, and chargeback handling.
• Protect the service — detect and prevent fraud, abuse, account sharing, scraping, piracy, and unauthorized access, and apply the geographic restrictions set out in our Terms using the approximate location derived from your IP address.
• Communicate with you — transactional emails such as your welcome receipt, plus account and sign-in emails sent through our authentication provider. We do not send unsolicited marketing email. If you ask for our daily receipts digest by entering your address and confirming it by email, we send you that digest and nothing else. Every digest carries a one-click unsubscribe, and we stop sending as soon as you use it.
• Improve the product — understand which pages and features are used, fix bugs, and measure performance, using our own privacy-first, first-party analytics (see “Cookies & local storage” below).
• Comply with the law — respond to lawful requests and enforce our Terms.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We do not use advertising networks, tracking pixels, or third-party analytics products.

04Third parties we share with

We share personal information with the providers that help us operate SportsGods. Where a provider processes personal data on our behalf, we rely on that provider’s standard data-processing terms, which limit their use of your data to delivering the service to us.

Processors that hold or handle your data

• Stripe — payment processing, subscription management, fraud screening. See Stripe’s Privacy Policy.
• Supabase — our database, authentication service, and serverless functions. Supabase stores essentially all of the account and product data described in section 02: your email address, subscriber code and plan; your login credentials (Supabase Auth stores only a password hash — we never see your password); current and historical browser/session records, including identifiers, recent IP addresses, browser user-agents, and hashed fingerprints; your AI Chat conversations; any bets you log in My Bets; anti-piracy capture signals; referral records; and our first-party analytics records. Supabase also delivers the authentication emails you receive from us (sign-in links, email confirmation, password reset). See Supabase’s Privacy Policy.
• Cloudflare — DNS, edge compute for our API (Cloudflare Workers), DDoS protection, rate limiting, edge caching and key-value storage of assembled responses, AI-based safety filtering of AI Chat messages (Cloudflare Workers AI), and short-lived operational logging (Cloudflare Workers Logs, which record your IP address, user-agent, and request details and are retained for approximately three days). See Cloudflare’s Privacy Policy.
• Google (Gemini API) — powers the AI Chat feature. Prompts you submit through AI Chat are sent to Google to generate responses. Do not submit sensitive personal data through AI Chat. See Google’s Privacy Policy.
• Google (Sign in with Google) — if you choose to sign in with Google, we redirect you to Google to authenticate. Google returns your email address and basic profile to us, and Google keeps a record that you signed in to SportsGods.
• Resend — delivers our transactional email (welcome and receipt messages) and the daily receipts digest. Resend receives your email address and the contents of the message. See Resend’s Privacy Policy.
• HostGator — the third-party shared web host that serves the public pages of sportsgods.com. Its standard web-server access logs record your IP address, requested path, browser user-agent, referring page, and timestamp for every page you load. See HostGator’s Privacy Policy.

Networks your browser contacts directly

Some assets on our pages are loaded by your browser from public content-delivery networks rather than from our own servers. We have no contract with these networks, and because your browser requests the files directly, they receive your IP address, browser user-agent, and the page you are on — whether or not you are logged in.

• Google Fonts (fonts.googleapis.com, fonts.gstatic.com) — serves the typefaces used across the site. This happens on every page load, including this one.
• jsDelivr (cdn.jsdelivr.net) — serves the authentication client library on pages that involve signing in or your account.

Sources we read from

• Sports data providers — we fetch odds, lines, schedules, scores, injuries, and player statistics from third-party sports-data feeds. Our servers make these requests, not your browser, so these providers do not receive your IP address or any of your personal information.

We may also disclose information if required by law, subpoena, or court order, or to protect the rights, safety, or property of SportsGods, our users, or the public.

05Cookies & local storage

SportsGods uses your browser’s localStorage and (where applicable) cookies for the following purposes:

• Essential. Authentication session and token, your validated subscriber record for the current tab, device identifier, theme preference, and Terms-acceptance timestamp. These are required for the site to function.
• Security. Device fingerprint used for device-limit enforcement and abuse detection.
• Preferences & on-device caches. Your last-used sport and tab, your saved sportsbook selection, which games you have already opened, cached game slates, and a local copy of your recent AI Chat messages. These stay on your device to make the site faster and are not sent to us as a separate record.
• First-party analytics. We run our own privacy-first, cookieless site analytics — no third-party analytics provider (no Google Analytics or similar) is involved. We record the pages you view; clicks on our own tagged buttons and on links that lead off our site (we record the destination host and path, not page content); the referring site; a coarse location (your country and state or region) and device type derived from your request; any campaign/UTM tag in the link you arrived through; and random first-party visitor and session identifiers stored in localStorage and sessionStorage. If you first arrive through a tagged campaign link, we also keep a durable record on your device of that first landing page and campaign tag.

What these analytics records do not contain: in these records specifically we do not store your IP address or your full browser user-agent — they are used only to derive the country, region, and device type, then discarded. We do not identify you by name in them, we do not track you across other websites, and we do not share them with anyone. (We do store your IP address and full user-agent elsewhere — on your account’s device records and in server and error logs — as described in section 02.)

The visitor identifier stored in your browser is regenerated after about 13 months. Analytics records already collected are retained as described in section 06.

You can clear local storage and cookies at any time through your browser settings. Doing so will log you out and may reset your preferences. If your browser sends a Global Privacy Control (GPC) or Do Not Track signal, our first-party site analytics are disabled automatically and collect nothing. Note that this signal does not switch off the security, anti-piracy, and error logging described in section 02, which we rely on to operate and protect the service.

06Data retention

• Account records (email address, subscriber code, plan, Terms-acceptance time, Stripe identifiers) are retained while your subscription is active and are kept after cancellation for tax, accounting, fraud-prevention, and legal purposes. We do not currently delete them on a fixed schedule.
• Device records (hashed fingerprint, most recent IP address, user-agent, login times) are retained for the life of the account. Revoking a device marks it inactive but does not erase its record.
• Payment records are retained by Stripe according to their policy, and by us — including the raw Stripe event payloads described in section 02 — for up to 7 years where required by tax or accounting law.
• AI Chat conversations and anti-piracy capture signals are deleted after 12 months.
• Referral records are deleted after 12 months.
• Mailing-list records are retained for 36 months after your last confirmed activity, or deleted within 10 business days of your unsubscribing, whichever comes first.
• First-party analytics records are deleted after about 13 months, matching the lifetime of the visitor identifier in your browser.
• Usage counters (the daily per-account tallies that enforce plan limits) are deleted after 90 days.
• Bets you log in My Bets are kept for the life of your account, because they are the record the feature exists to give you. Deleting a bet in the app deletes it and its legs outright.
• Server and error logs at our edge provider are rotated automatically within about 3 days. Access logs at our static host are retained according to that host’s standard practice.
• Support correspondence is retained for as long as reasonably necessary to assist you and maintain a record.
• Cancellation records — if you cancel, the fact and timing of the cancellation and any exit-survey feedback you choose to leave are kept with our billing audit records (up to 7 years, as above), because they are part of the record of your subscription that dispute resolution and accounting rely on.

The deletions above run automatically on a daily schedule. You can also ask us to delete your personal information at any time using the process in section 08, and we will do so subject to the legal and accounting retention requirements noted here.

07Security

We take reasonable technical and organizational measures to protect your information: HTTPS everywhere with HSTS, encrypted transit to all third parties, PCI-compliant payment handling via Stripe, access controls on our database, administrative access restricted to the site owner behind a separate credential, and automated checks that re-verify these controls and alert us when one drifts. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

08Your rights

Depending on where you live, you may have the following rights regarding your personal information:

• Access — request a copy of the personal information we hold about you.
• Correction — ask us to correct inaccurate or incomplete information.
• Deletion — ask us to delete your personal information, subject to legal and contractual retention requirements.
• Portability — request your data in a machine-readable format.
• Objection & restriction — object to, or ask us to restrict, certain processing.
• Withdraw consent — where processing is based on your consent, you may withdraw it at any time.
• Do Not Sell / Share (California residents). We do not sell or share personal information for cross-context behavioral advertising.
• Complain to a regulator — residents of the EEA, UK, or similar jurisdictions may lodge a complaint with their local data-protection authority.

To exercise any of these rights, email us at support@sportsgods.com. We may need to verify your identity before acting. We will respond within the timeframe required by applicable law.

One honest limitation: our first-party analytics records are keyed only to a random identifier stored in your browser and hold no link to your account, so we cannot reliably find or delete your analytics rows on request. Clearing your browser storage severs the identifier from your device, and those records contain no IP address, user-agent, or name.

09Children

SportsGods is intended for adults of legal gambling age in their jurisdiction (generally 21+ in the United States, 18+ elsewhere). We do not knowingly collect personal information from anyone under the minimum legal age. If you believe a minor has provided us with personal information, contact us and we will delete it.

10International users

SportsGods is operated from the United States and our database and stored records are held in the United States. Because our API runs on Cloudflare’s global edge network, individual requests are processed at the Cloudflare location nearest you, and short-lived cached responses and operational logs may briefly reside there. If you access the site from outside the United States, your information will be transferred to, stored, and processed in the United States, where privacy laws may differ from those in your jurisdiction. By using SportsGods you consent to this transfer.

11Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will revise the “Last updated” date at the top of this page and, where appropriate, notify active subscribers by email or in-app notice. Your continued use of SportsGods after changes take effect constitutes acceptance of the updated policy.

12Contact

Questions, requests, or complaints about this Privacy Policy or how we handle your information? Email support@sportsgods.com.

The controller of your personal information, and our address for postal notices, is:

SportsGods LLC, a North Carolina limited liability company
4030 Wake Forest Road, Suite 349, Raleigh, NC 27609
support@sportsgods.com