Privacy Policy
Last updated · 2026-08-05
Who we are (data controller)
This site is operated by spolytics (trading as Spolytics, "we"). spolytics is the data controller for the personal data described below, meaning we decide why and how it is processed. Contact: privacy@spolytics.io
What we collect and why
The probability board is free to browse with no account. The data below only arises if you create an account or subscribe to Pro.
- Account data — email address, the profile identifier Google returns if you sign in with Google, and account creation / last sign-in timestamps. Purpose: creating and authenticating your account and checking subscription status. Basis: performance of a contract.
- Subscription data — the subscription and customer IDs issued by our payment provider, the product/price ID, subscription status, and billing period start and end dates. Purpose: unlocking Pro features and handling renewals and cancellations. Basis: performance of a contract. Card numbers and other payment credentials are never stored on our servers.
- Support messages — what you send us by email and the address you send it from. Purpose: answering you. Basis: legitimate interests.
- Technical logs — IP address, browser and device information, and request timestamps. Purpose: security, abuse and fraud prevention, and error diagnosis. Basis: legitimate interests.
Payments (Paddle)
Our order process is conducted by our online reseller Paddle.com. Paddle.com is the Merchant of Record for all our orders and handles payment, tax, invoicing, returns, and billing-related customer service inquiries.
The name, billing address, and card details you enter at checkout are collected and stored by Paddle as its own controller; we never see them. We receive only subscription status and identifiers back from Paddle. See Paddle's privacy notice at paddle.com/legal/privacy for details.
Stored only in your browser
Favorite teams and leagues, language choice, filter state, and pick-tracker history live in your browser's localStorage and are never sent to our server. Clearing browser data deletes them. If you are signed in, your authentication session token is also kept in browser storage.
Who we share data with
- Paddle.com — Merchant of Record, for the sale of the subscription, payments, subscription management, tax compliance, and invoicing.
- Infrastructure and authentication providers — hosting, database, and sign-in subprocessors acting on our instructions.
- Advertising networks — only where ads are served to free users. We do not send them information that identifies you.
- Legal and accounting advisers, and public authorities where required by law.
We do not sell personal information, and we do not share it for cross-context behavioural advertising.
Advertising and cookies
Free access is ad-supported (Pro removes ads). Apart from storage required to run the site, no advertising or analytics scripts run until you consent. Where Google AdSense is used, Google and its partners may use cookies to serve ads based on prior visits. Opt out of personalized ads at adssettings.google.com or aboutads.info/choices, and change your consent any time via 'Cookie settings' in the footer.
Retention
Account and subscription data is kept while your account exists. After you ask us to delete it, we erase or anonymise it except for transaction records we must retain for tax and accounting purposes (typically 7 years under applicable law). Technical logs are kept for up to 90 days.
Security
We apply appropriate technical and organisational measures, including TLS in transit, row-level access control on the database, and least-privilege access. Card data never passes through our systems.
Your rights (CCPA/GDPR)
Depending on where you live you may have rights to access, correct, delete, restrict, port, or object to processing, to withdraw consent, and to complain to a supervisory authority. Data stored only in your browser is deleted the moment you clear site storage. For account and subscription data, email privacy@spolytics.io — we respond within 30 days.
International transfers
Our infrastructure and payment processing may be located outside your country, including in the United States. Where data is transferred from the EEA or UK, we rely on appropriate safeguards such as Standard Contractual Clauses.
Children
The site is not directed to children under 13 and we do not knowingly collect their personal information (COPPA). Accounts are for users 18 and older.