PRIVACY POLICY

1. DATA WE COLLECT

We collect: email address (for authentication and communication), payment information (processed securely by Stripe — we do not store card details), usage data (pages visited, picks viewed, preferences), and device/browser information for analytics. We do not sell your personal data to third parties.

2. HOW WE USE YOUR DATA

Your data is used to: provide and personalize the Service, process payments and manage subscriptions, send pick notifications via Telegram or email (with your consent), improve our algorithms and user experience, and comply with legal obligations.

3. DATA STORAGE AND SECURITY

Data is stored on Supabase (hosted on AWS in the EU). We use Row Level Security (RLS) policies to ensure users can only access their own data. All connections are encrypted via TLS. Passwords are hashed using bcrypt via Supabase Auth.

4. COOKIES AND TRACKING

We use essential cookies for authentication and session management. We use analytics (privacy-friendly, no cross-site tracking) to understand usage patterns. You can disable cookies in your browser settings, but this may affect functionality.

5. THIRD-PARTY SERVICES

We use: Supabase (authentication and database), Stripe (payment processing), Telegram (pick notifications), and Vercel (hosting). Each has their own privacy policy. We only share the minimum data necessary for each service to function.

6. YOUR RIGHTS (GDPR)

As we are based in the EU, you have the right to: access your personal data, request correction or deletion, export your data (data portability), withdraw consent for marketing communications, and lodge a complaint with a supervisory authority. To exercise these rights, contact privacy@odinpicks.com.

7. CHANGES TO THIS POLICY

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated date. For questions about your data, contact privacy@odinpicks.com.