Privacy Policy

Last updated: [DATE]

1. Information We Collect

• Account information: email, password (hashed), name if provided
• Payment information: processed entirely by Stripe; full card numbers never stored on our servers
• Usage data: pages visited, features used, login timestamps, general analytics, and technical details such as your browser type and device; our website host also receives your IP address when you visit
• User-entered data: watchlist selections (including your fantasy My Team and opponent roster), fantasy scoring settings, saved board views, display preferences and a first name if you enter one, tracked pricing-discrepancy/cross-market lines, bankroll figures and your entries (legs, your odds, stake and the free-text note you type), all only if you enter them. When you're logged in, these are stored in your account so they're available on your other devices; when you're not, they stay in your browser.
• Where you live: the province or state you choose when you start, kept in your browser and, if you sign up, with your account. We use it only to show the tools offered where you live and to keep a record that you confirmed your age for that place. To save you a step, the question may be pre-filled from the approximate location of your internet connection (only your country and province or state, worked out by our website host Cloudflare from your IP address). We do not store or use that suggestion for anything else. Nothing is saved unless you confirm the place, and you can change it first.
• When you last had the app open: a time, kept only in your browser and never sent to us. It lets the app tell a new visit from a return visit, so it can ask you to make a free account when you come back after more than 30 minutes away. Your first visit needs no account.
• Product news choice: whether you agreed to receive TrendsEngine news emails, when you agreed or withdrew, the wording you agreed to, and where you made the choice (sign-up, Settings or an email link). The box is unticked unless you tick it. We keep this record for 3 years after your choice ends, to prove we followed the rules. If you delete your account, this record is deleted with it.

Your entries are used only to show them back to you, are kept until you delete them or your account, and are never shared or sold.

2. How We Use Information

Provide and maintain the Service; process billing; communicate service updates and billing notices; improve the Service through aggregated, anonymized analysis; and find and fix errors using the error reports described in section 3.

If you opt in, we email product news (new features, new sports and tips on using the app), about twice a month. Every news email names TrendsEngine, gives our mailing address and contact details, and has an unsubscribe link. You can also turn news off in Settings. We act on an unsubscribe within 10 business days, and usually right away. You can withdraw at any time and still use the app.

3. Third-Party Services

• Stripe — payment processing
• The Odds API — sportsbook price data provider (does not receive personal user information)
• Render — application hosting
• Supabase — database and user authentication
• Cloudflare — hosts our website and delivers the prices shown in the app. It receives your IP address and, when you are signed in, your sign-in token so we can check your plan, and it counts visits (such as which pages are opened and from which country) without cookies and without building a profile of you. Cloudflare's servers are located around the world, including outside Canada. When you sign up, log in, confirm your email or ask for a password reset, Cloudflare may also run a quick check (Turnstile) that you are a person and not an automated program. It looks at technical details of your browser and device, such as your IP address and browser type, to do this. It is not used for advertising, and Cloudflare also uses these details to improve its own bot detection (see Cloudflare's Turnstile privacy terms).
• Sentry — error reports: when something breaks on our website (except the log-in, sign-up, password-reset and sign-in-confirmation pages) or on our servers, technical details about the error (such as your browser type, the page address without anything after a "?" or "#", and the error message) are sent so we can fix it. To do this, those pages load a small script from Sentry's servers, so Sentry can see your IP address and browser type when the page loads or when a report is sent, as with any website request. No cookies. We have switched off storing of IP addresses in Sentry's error records. Reports are kept for a short time, then deleted automatically. Sentry stores them in the United States, where courts and government agencies may be able to access them under US law.
• GitHub — runs our daily backup and keeps the copies: backups of account data (sign-in details, the place and age confirmation you gave, saved items, subscription record and email choices) so we can restore them after a fault. Each copy is encrypted before it is stored, is kept for 30 days and is then deleted automatically. GitHub stores them in the United States, where courts and government agencies may be able to access them under US law.
• Google (Gmail) — sends our account emails, and news emails if you opt in, on our behalf. Sign-in and password-reset emails pass through it, so it handles your email address and the message, including its links. It may store data outside Canada.

4. Data Retention

Account information retained while active, plus the minimum period required by applicable legal, tax, and accounting obligations after cancellation, then deletable upon request.

You can delete your account yourself at any time from Settings. When you do, we delete your account data (login, saved teams, tracked lines, preferences and subscription record) straight away, and any copy held in our backups within 30 days. Payment records are kept by our payment processor, Stripe, for as long as tax and accounting law requires.

5. Your Rights

Under PIPEDA and applicable provincial legislation: access your personal information; request correction; request deletion (subject to legal retention requirements); withdraw consent for optional communications. Contact [email protected]. We answer these requests, including a request for a copy of your information, within 30 days, wherever you live.

If you live in the United States: we do not sell your personal information, do not share it for cross-context behavioural advertising, and do not use it for targeted advertising or profiling. Depending on your state, you may have the right to know what we hold about you, to get a copy, and to have it corrected or deleted. Email us at the address above. We will not treat you differently for using these rights.

6. Data Security

Industry-standard security measures (encryption in transit, secure authentication, access controls). No system is completely secure; absolute security cannot be guaranteed.

7. Cookies

TrendsEngine does not use analytics or advertising cookies today, and no advertising or cross-site tracking scripts run on this site. Our visitor counts and error reports (section 3) work without cookies. Signing in relies on our authentication provider's own session mechanism to keep you logged in; it is not used for tracking or advertising. If we ever add analytics or advertising cookies, this section will be updated first and, where required by law, we will ask for your consent before they are set.

Because we don't track you across other sites or sell or share your information, there is nothing for a "Do Not Track" or Global Privacy Control signal to switch off; we treat every visitor as if that signal were on.

8. Children's Privacy

Not directed at anyone under 19 in Canada or under 21 in the United States; we do not knowingly collect information from anyone under that age.

9. Changes to This Policy

Updated periodically; material changes communicated to users.

10. Contact

[email protected]

Privacy questions or complaints: contact our Privacy Officer at [email protected]; we tell you who that is if you ask. If you are not satisfied you can complain to the Office of the Privacy Commissioner of Canada.