Privacy Policy

Swish Picks is owned and operated by StatSight LLC ("we," "us," or "our"). This policy explains what information we collect when you use swishpicks.co and related services (the "Service"), how we use it, who we share it with, and the choices you have. It is part of our Terms of Service.

2.1 Account information

• Email address, used to sign you in and to send account and subscription emails.
• Password, stored by Supabase in hashed form. We never see your password in plain text.
• Account records such as when your account was created and when you last signed in.
• Agreement record: when you accepted our Terms and Privacy Policy, which version you accepted, and that you confirmed your age.

2.2 Subscription and billing information

We do not receive or store your card number. Stripe collects and processes your payment details (such as card number, expiration date, and billing address). From Stripe we receive and store your Stripe customer and subscription IDs, your plan, your subscription status (for example trialing, active, past due, or canceled), your current billing period dates, and whether your subscription is set to cancel.

2.3 Information you create in the Service

• Followed players: the players you follow, with their team and position.
• Usage counts: how many times you have used certain limited features on a given day.
• Onboarding state: which tips and tours you have already seen.

2.4 Information stored on your device

We use your browser's local storage and session storage to remember things like tours you have seen, your visit count and last visit date, players you have followed while signed out, and where to return to on a page. This information stays in your browser unless you sign in, in which case some of it is saved to your account.

2.5 Usage and device information

When you use the Service, we and our providers automatically collect:

• Usage data: pages you view and leave, referring pages, and actions such as opening a player, changing a filter or sort, or installing the app to your home screen.
• Device data: browser type, operating system, device type, screen size, and language.
• Network data: IP address and approximate location derived from it.
• Performance data: page load times and errors.

PostHog assigns your browser a random identifier, stored in a cookie or local storage, so it can tell visits from the same browser apart. We may also use PostHog's session replay to see how pages are used, which records clicks, scrolling, and what was shown on screen. Where we use it, text you type into form fields is masked.

2.6 Information you send us

If you email us, we keep your message, your email address, and our reply.

• Provide the Service, including signing you in and showing your followed players.
• Process subscriptions and trials, and control access to Pro features.
• Send account and subscription emails, such as confirmations, password resets, trial reminders, payment problems, and cancellation notices.
• Understand how features are used so we can fix problems and improve the product.
• Enforce usage limits and our Terms, and protect against fraud, abuse, and security threats.
• Respond to your questions and requests.
• Comply with legal obligations.

We do not currently send marketing emails. If we start, each email will include a way to unsubscribe.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We do not run advertising pixels or ad networks on the Service.

We share information only:

• With service providers who process it on our behalf to run the Service (listed in Section 5).
• For legal reasons, when required by law or legal process, or to protect the rights, safety, or property of our users, the public, or us.
• In a business transfer, such as a merger, acquisition, or sale of assets, in which case this policy will continue to apply to your information.
• With your permission.

We may publish aggregated statistics that do not identify you, for example the total number of players followed in a month.

• Essential: Supabase sign-in cookies keep you logged in. The Service will not work properly without them.
• Preferences: local and session storage remember your settings and progress, as described in Section 2.4.
• Analytics: PostHog uses a cookie or local storage identifier. Vercel Web Analytics and Speed Insights do not use cookies.

You can block or delete cookies and site data in your browser settings. Blocking essential cookies will sign you out. Ad and tracker blockers will typically stop analytics without affecting the rest of the Service.

Your browser may send a "Do Not Track" or Global Privacy Control signal. Because we do not sell or share personal information for advertising, these signals do not change how we handle your information today.

• Account data (email, followed players, usage counts, onboarding state, subscription status) is kept while your account exists and deleted when your account is deleted.
• Billing records held by Stripe are kept by Stripe as required for tax, accounting, and fraud prevention, even after you delete your account.
• Analytics data is kept by PostHog and Vercel according to their retention periods, and is not linked to your email address.
• Support emails are kept as long as needed to handle your request and for our records.
• Backups of our database may contain deleted data until they expire on our provider's backup schedule.

You can ask us to:

• Access or get a copy of the personal information we hold about you.
• Correct your information, including changing your email address.
• Delete your account and personal information.

You can delete your account yourself from your account page. Deleting your account cancels any active subscription and removes your personal information from our systems, and you lose access to Pro features immediately. You can also manage or cancel a subscription without deleting your account from the same page. For access or correction requests, or if you cannot use the in-app delete flow, email support@swishpicks.co from the email address on your account. We may need to verify your identity before acting on the request, and we will respond within 45 days.

Depending on where you live, you may have additional rights under local privacy law, such as the right to appeal a decision we make about your request. You can exercise any such rights by contacting us at the same address. We will not discriminate against you for exercising your privacy rights.

The Service is intended only for people 21 and older. We do not knowingly collect personal information from anyone under 21. If you believe someone under 21 has created an account, contact us and we will delete it.

We use encrypted connections (HTTPS), hashed passwords, and database access rules that limit each account to its own data. No system is perfectly secure, and we cannot guarantee the security of your information. If we learn of a breach that affects your personal information, we will notify you as required by law.

We are based in the United States, and our service providers may process information in the United States and other countries. Privacy laws there may differ from those where you live.

We may update this policy. We will post the updated version here with a new "Last Updated" date, and for material changes we will also notify you by email or in the Service before they take effect.