LEGAL

Privacy Policy

Effective Date: July 17, 2026

This Privacy Policy describes how The Scoreboard Don't Lie collects, uses, and protects your information.

We do not sell or rent your personal data

1. Information We Collect

Information you provide when creating an account:

  • Email address and name (provided during sign-up via Clerk)
  • Google or Apple account data, if you choose social sign-in

Information collected automatically through infrastructure:

  • IP address and approximate geographic location — logged by Vercel (our web host) as part of standard server request logs
  • Browser type, device type, and operating system
  • Pages requested and timestamps — present in server logs
  • Authentication session tokens managed by Clerk

Information we do not collect:

  • Government IDs or Social Security numbers
  • Full payment card numbers (Stripe handles all payment data; we receive only a confirmation status)
  • Behavioral analytics, advertising identifiers, or browsing history outside this site
  • Data from anyone under 21

2. How We Use Your Information

We use the information we collect to:

  • Create and maintain your account
  • Authenticate your identity and protect your session
  • Deliver picks and other content you access through the Service
  • Send service-related communications (account alerts, Terms update notices)
  • Respond to support requests you initiate
  • Detect and prevent unauthorized access, fraud, or abuse
  • Comply with legal obligations

We do not use your information for behavioral advertising, ad targeting, or marketing email campaigns.

3. Third-Party Service Providers

We share limited data with the following providers solely to operate the Service. Each is bound by its own privacy policy and data-processing obligations.

Clerk — AuthenticationPrivacy Policy ↗

Manages user accounts, login, and session tokens. Clerk processes your email address, name, and authentication data. We also store limited account-level flags (such as your Terms acceptance status) in Clerk's metadata fields.

Supabase — DatabasePrivacy Policy ↗

Stores picks data and account-related records. Personal data stored in Supabase is limited to your Clerk user ID and subscription or access status.

Vercel — Web Hosting and InfrastructurePrivacy Policy ↗

Hosts our website and serverless functions. Vercel collects server-side request logs including IP addresses, request paths, and timestamps as part of normal infrastructure operation.

Stripe — Payment Processing (configured, not currently active)Privacy Policy ↗

Stripe is integrated into the codebase for future use. At this time, the Service is free and no payment transactions are processed. If and when paid plans are introduced, Stripe will process subscription payments; we will receive only a payment confirmation status and never your full card number. Stripe is PCI-DSS Level 1 compliant.

We do not share your information with any other third party for commercial purposes.

4. Cookies and Session Storage

We use cookies and browser storage for authentication only. When you sign in, Clerk sets session cookies that keep you logged in. These are strictly necessary for the Service to function.

We do not use advertising cookies, third-party tracking pixels, analytics cookies, or any cookies that track you across other websites.

You can disable cookies in your browser settings, but doing so will prevent you from signing in or using the Service.

6. Data Retention

We retain your personal information for as long as your account is active. If you delete your account, we will delete or anonymize your data within 30 days, except where retention is required by law (for example, financial records may be retained for up to 7 years as required by applicable tax law).

Vercel server logs are subject to Vercel's own retention policies.

7. Data Security

We implement reasonable technical and organizational measures to protect your data, including:

  • HTTPS/TLS encryption for all data in transit
  • Access controls limiting which team members can access personal data
  • Use of established, security-focused service providers (Clerk, Supabase, Vercel)

No method of internet transmission is 100% secure. We cannot guarantee absolute security, and we encourage you to use a strong, unique password.

8. Your Rights and Account Deletion

Depending on your location, you may have the right to:

  • Access — request a copy of the personal data we hold about you
  • Correction — request correction of inaccurate information
  • Deletion — request deletion of your account and personal data
  • Portability — receive your data in a portable format

You can delete your account at any time from your account settings page. Deleting your account will remove your personal data from our active systems within 30 days, subject to legal retention requirements. To exercise other rights, contact us at the address in Section 12.

9. California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

  • Right to know what personal information we collect, use, and disclose
  • Right to request deletion of your personal information
  • Right to opt out of the sale or sharing of personal information — we do not sell or share your personal information for commercial purposes
  • Right to non-discrimination for exercising your CCPA rights

To submit a CCPA request, contact us at the address in Section 12. We will respond within 45 days.

10. Children's Privacy

The Service is restricted to United States residents aged 21 and older. We do not knowingly collect personal information from anyone under 21. If we learn we have collected such information, we will delete it promptly. If you believe a minor has provided us data, contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by a prominent notice on the site, and we will update the "Effective Date" at the top. Your continued use of the Service after changes take effect constitutes your acceptance of the updated Policy.

12. Contact

Privacy questions, data requests, or concerns? Contact us at: scoreboarddontlie@gmail.com