Privacy Policy

Big Balls Bets ("we," "us," "our") respects your privacy. This Privacy Policy explains what information we collect when you use our website and services (the "Service"), how we use that information, who we share it with, and the choices you have. By using the Service you agree to the practices described below.

1. Information we collect

Account information

When you create an account we collect your email address, the name you provide, and a hashed password. Authentication is handled by Supabase Auth; we never store your plaintext password.

Subscription & billing information

Payments are processed by Stripe. We receive a customer identifier and subscription status from Stripe and store these alongside your account so we can keep your plan in sync. We do not receive or store your card number or CVC — Stripe handles that directly.

Usage data

We log requests to the Service — including the page or API endpoint accessed, timestamp, IP address, and user-agent string — so we can monitor performance, prevent abuse, and improve the product. Aggregate usage metrics may be retained indefinitely; individual request logs are retained for up to 90 days.

Analytics

We use first-party analytics to understand how the Service is used. Where third-party analytics or tag managers are loaded (e.g., Google Tag Manager), data is collected subject to those providers' terms.

2. How we use your information

• Service delivery — authenticating you, gating subscription features, syncing Stripe state, and serving your account dashboard.
• Analytics — measuring engagement, identifying bugs, and prioritizing product improvements.
• Communications — sending you transactional messages such as password resets, billing receipts, and important Service updates. We do not send marketing email without opt-in.
• Security & fraud prevention — detecting and responding to abusive activity.

3. Third-party services

The Service depends on the following providers. Each receives only the data necessary for the function it performs, and is bound by its own privacy commitments:

• Supabase — authentication and database hosting (your account row, subscription row, and session cookies).
• Stripe — payment processing and subscription billing.
• Vercel — application hosting and edge networking. Vercel may log request metadata as part of its infrastructure.
• Big Balls Sports API — sports data provider. The Service queries this API on your behalf; your account identity is not transmitted.

4. Cookies

We use first-party cookies to keep you signed in and to remember preferences such as your selected theme and persona. Disabling cookies will prevent sign-in from working.

5. Your rights

You have the following rights regarding the data we hold about you:

• Access — request a copy of the personal data we hold about you.
• Deletion — request that we delete your account and associated data. Some data (e.g., billing records) may be retained where required by law.
• Portability — request a machine-readable export of your account data.
• Correction — update your name and email from the Settings page at any time.

To exercise any of these rights, email privacy@bigballsbets.com from the address on your account.

6. Children

The Service is intended for users 19 years of age or older. We do not knowingly collect data from anyone under 19. If you believe a child has provided us with personal information, contact us at the address below and we will delete it.

7. Changes

We may update this policy from time to time. When we do, we will revise the "Last updated" date above and, for material changes, notify you by email or an in-product banner before the change takes effect.

8. Contact

Questions or requests about this policy: privacy@bigballsbets.com.