Privacy Policy

The short version

• You can use the site without an account. Then everything you enter stays in your browser on that device.
• With an account, we store your email, your bankroll settings and the bets you log, so they sync across your devices.
• We don't sell your data, show ads, or use tracking or advertising cookies.
• You can download your data or delete your account at any time.

What we collect

• Account: your email address and password. Passwords are stored by our login provider as a one-way hash; we never see them.
• Bankroll settings: your date of birth (to confirm you're 21 or older), state, starting bankroll, risk profile, limits, the apps you use, and any break you take.
• Bets you log: the picks, app, stake, odds or payout, result, and deposits or withdrawals you record.
• Technical data: basic request logs kept by our hosting provider (such as IP address, browser and pages requested), used to run and secure the site.

We don't collect payment card details. If paid plans are added, payments will be handled by a payment processor, and this policy will be updated first.

Stored on your device

The site saves your bankroll, bets and a few preferences (such as which sport Picks opens on) in your browser's local storage, and keeps you signed in with a session token there. These are needed for the site to work; none are used for tracking or ads. Signing out clears your bets and bankroll from that device.

How we use it

• To run the site: show your bankroll, size stakes to your limits, rate and track your bets, and sync them across devices.
• To keep accounts secure and to send account emails (confirmations and password resets).
• To confirm you meet the minimum age.

Who else handles it

• Supabase: database and login, in the United States.
• Vercel: hosting, in the United States.

Odds, scores and player stats come from The Odds API, ESPN and nflverse. The site requests that data on its own and sends them nothing about you. We share personal data only with these service providers, or when the law requires it.

How long we keep it, and your choices

• We keep your account data until you delete your account. Deleting it removes your profile, bets and deposits from our database.
• Get a copy: Settings → Download backup.
• Correct it: edit your bankroll or any bet on the Bankroll page.
• Delete it: Account → Delete my account.

Depending on where you live, you may have other rights over your data. To use them, or with any question about privacy, email support@forbidden-picks.com.

Age

The site is only for people 21 and older. We don't knowingly collect data from anyone younger; if we learn we have, we delete it.

Security and changes

Data is sent over encrypted connections, and each account can only reach its own records. No system is perfectly secure, so use a strong password you don't use elsewhere. We'll update the date at the top when this policy changes, and tell account holders about significant changes.