This policy explains what we collect, why, who we share it with, how long we keep it, and the choices you have. We keep data collection to what the Service needs, we don't sell your data for money, and you can switch off advertising and analytics cookies at any time with "Your privacy choices" in the site footer.
1. Information we collect
What you give us
- Account data — your email address, display name, and password (stored hashed by our authentication provider, never readable by us); your date of birth and 21+ confirmation, and when you accepted our Terms and this policy.
- Things you save in the product — the picks you add to your bet tracker (game, side, line, odds, units) and the games on your watchlist.
- Messages to us — anything you send to our support or privacy inboxes.
Billing
- Payments are handled by Stripe. We never see or store your full card number. We keep your Stripe customer and subscription IDs, your plan, its status, and billing dates. To enforce one free trial per person we also keep the card "fingerprint" Stripe gives us — a code that identifies a card without revealing its number.
Collected automatically
- Usage and device data — pages viewed, links clicked, approximate location derived from your IP address, device and browser type, and referring site.
- Marketing attribution — the campaign tags (UTM source / medium / campaign) on the link that brought you to us, saved with your account at signup and passed to your subscription record.
- Cookies and similar technologies — see section 4.
2. How we use it
- To provide the Service, sign you in, and give you the access your membership includes.
- To confirm you are 21 or older, before signup and again before any purchase.
- To bill your membership, prevent free-trial abuse and fraud, and keep financial records.
- To send account and transactional emails (for example, cancellation and plan-change confirmations and renewal reminders). If we ever send marketing email, it will be with your consent and include a one-click unsubscribe.
- To measure which pages and campaigns work and improve the product.
- To show ads that fund the free tier (paid members see no ads).
- To meet legal obligations and enforce our Terms.
For visitors in the UK, EU, and Switzerland, our legal bases are: performing our contract with you (account and membership), our legitimate interests (security, fraud prevention, improving the Service), your consent (analytics and advertising cookies), and legal obligations (tax and accounting records).
3. Who we share it with
We share personal data with service providers that run parts of the Service for us, under contracts that limit how they can use it:
- Supabase — authentication and database hosting.
- Stripe — payments and subscription billing.
- Vercel — website hosting and privacy-friendly, cookieless page-view statistics.
- Resend — delivery of our account and transactional emails.
- Google — Google Analytics (usage measurement), Google AdSense (ads on the free tier only), and Google Fonts (which receives your IP address when fonts load).
- Meta — the Meta (Facebook) Pixel, which measures visits from our ads and helps us reach people on Meta's platforms. See section 5 for how to opt out.
We also use AI and social-publishing providers (such as xAI and Blotato) to help draft and publish our own analysis and posts. We don't send them members' personal information.
We may disclose information if the law requires it, to protect the rights, safety, or property of our members or the public, or as part of a sale or reorganization of the business (in which case this policy will continue to apply to your data).
4. Cookies and similar technologies
- Essential — sign-in session cookies and security cookies. The Service can't work without them, so they aren't optional.
- Your privacy choice — we remember your cookie / privacy choice in your browser's local storage.
- Analytics — Google Analytics cookies that tell us how the site is used. Vercel's page-view statistics don't use cookies.
- Advertising — Google AdSense cookies (free tier only) and the Meta Pixel. In the U.S., Google ads are non-personalized by default.
Visitors in the EEA, UK, and Switzerland are asked before any analytics or advertising cookie is set. Everyone can change their choice at any time with "Your privacy choices" in the site footer. When analytics and advertising cookies are declined, Google receives only cookieless, aggregated signals and the Meta Pixel does not run.
5. Your choices & rights
- Opt out of ads and analytics cookies (and of "selling" / "sharing"). Use "Your privacy choices" in the footer and choose Reject all. We also honor the Global Privacy Control (GPC) signal: if your browser sends it, we treat it as Reject all for that browser. We don't respond to "Do Not Track" signals.
- See, correct, or download your data — you can view and update your account details in Account → Settings, or email us for a copy of everything we hold.
- Delete your account and data — email privacy@edgextreme.com from the address on your account and ask us to delete it. We'll cancel any active membership, delete your account, tracker, and watchlist, and confirm by email. We keep only what the law requires us to (for example, billing records).
- Email — account and billing emails are part of the Service; any marketing email will carry a one-click unsubscribe.
We honor verified requests as the law requires, and we will not discriminate against you for exercising any privacy right.
U.S. state privacy rights
A growing number of states — including California (CCPA/CPRA), Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, New Jersey, New Hampshire, Iowa, Nebraska, Kentucky, Maryland, Minnesota, Tennessee, Indiana, and Rhode Island — give residents rights over their personal data. Where these laws apply to you, you may have the right to:
- Know and access the categories and specific pieces of personal data we hold about you, and how we use and share it.
- Correct inaccurate personal data.
- Delete personal data we collected from you, subject to legal exceptions (for example, records we must keep for billing, fraud prevention, or age verification).
- Obtain a portable copy of the data you provided to us.
- Opt out of "sale" and "sharing" of personal data for cross-context behavioral (targeted) advertising. We don't sell personal data for money. However, using the Meta Pixel and Google advertising cookies on our site may count as "selling" or "sharing" under California and some other state laws. In the last 12 months, the categories involved were identifiers (such as cookie IDs and IP address) and internet activity on our site, shared with Meta and Google. You can opt out as described above. We don't knowingly sell or share the data of anyone under 16 — the Service is only for adults 21 and older.
- Limit the use of sensitive data. We don't use sensitive personal information to infer things about you; your date of birth is used only to confirm you are 21 or older.
- Appeal a decision we make on your request. If we decline a request, we will tell you why and how to appeal; where your state provides it, you may also contact your state Attorney General.
To exercise any of these rights, email privacy@edgextreme.com from the address on your account. We will verify your identity using your account information and respond within the time your state's law requires (generally 45 days, extendable once where permitted). You may designate an authorized agent to act for you; we may ask the agent for proof of authorization and may still verify your identity directly.
Massachusetts residents: Edge Extreme is operated from Massachusetts. You have the rights above to the extent Massachusetts law provides them, and you may direct questions about our practices to the Massachusetts Attorney General's Office. EU/UK users: the Service is intended for U.S. residents 21 and older; if you access it from the EU or UK, you may have rights under the GDPR/UK GDPR to access, correct, delete, restrict, or port your data, to object to processing, to withdraw consent at any time, and to complain to your local data-protection authority. Your data is processed in the United States.
6. How long we keep it
- Account, tracker, and watchlist data — while your account exists; deleted when you ask us to delete your account.
- Billing records — as long as tax and accounting law requires (Stripe also keeps its own records under its privacy policy).
- Age confirmation and free-trial records — as long as needed to show we checked age and to prevent repeat free trials.
- Analytics data — under the retention settings of Google Analytics and Vercel; cookie lifetimes are set by those providers.
When we no longer need data, we delete or anonymize it. We use reasonable technical and organizational safeguards, but no method of transmission or storage is perfectly secure.
7. Age limit
The Service is for adults 21 and older. We do not knowingly collect information from anyone under 21; if we learn we have, we delete it.
8. Changes
We'll post any changes here with a new "last updated" date and, for material changes, notify members by email before they take effect.
9. Contact
Privacy questions and requests: privacy@edgextreme.com. Everything else: support@edgextreme.com.
