Privacy Policy

Effective date: August 13, 2026

This Privacy Policy explains what information John D Wilson LLC d/b/a Sportsbook Science LLC, a Colorado limited liability company, operating the website brand Sportsbook Science Analytics ("SSA", "we", "us"), collects when you use sportsbookscienceanalytics.com and its league subdomains, how we use it, and the choices you have. The short version: we collect the minimum needed to run a subscription service. There are no ads, no third-party analytics, and no trackers on this site, and we never sell your personal data.

1. What We Collect

We collect three narrow categories of information:

• Account data. Sign-in is by Google account only. When you sign in, we receive and store your name, email address, and a user ID from Google. We never receive or store a password — SSA has no password database by design. We also store your Stripe customer ID, your subscription and entitlement state (which packages you have access to), and a record of the Terms of Service version you accepted and when you accepted it.
• Billing state. Payments are processed by Stripe, which acts as the merchant of record for purchases. Your card number and full payment details go directly to Stripe; SSA never sees or stores them. We store only the subscription status information needed to grant you access.
• Technical logs. Like nearly every website, our servers log basic request information, including your IP address and browser user agent. We use these logs for security, debugging, and abuse prevention. In addition, our pages load fonts from Google Fonts, which means that when a page loads, your browser sends a font request to Google's servers that includes standard request data such as your IP address and user agent. Google processes that request data as described in its privacy policy (see Section 4).

2. Cookies and Local Storage

We use two cookies, both essential to signing you in and keeping you signed in. Neither is used for advertising, analytics, or tracking of any kind:

• __session — a session cookie set on the parent domain so your sign-in works across our league subdomains. It is HttpOnly and Secure, and lasts about 14 days. Essential.
• ssa_auth — a cookie that records whether you are signed in so pages can render correctly. It carries no identity information and lasts about 30 days. Essential.

In addition, the Firebase Authentication SDK stores sign-in state in your browser's local storage on the sign-in origin. That is the complete list. We set no advertising cookies and no analytics cookies, and no third party sets tracking cookies through our site.

Most browsers let you block, restrict, or delete cookies through their settings, and you are free to do so. Because both of the cookies above are essential to authentication, blocking or clearing them will sign you out and prevent you from staying signed in — free content will still work, but you will not be able to access subscriber content until you sign in again with cookies enabled.

3. How We Use Information

We use the information described above only to:

• provide the service and its content;
• authenticate you and keep you signed in;
• process and manage your subscription, including renewals, upgrades, and cancellation;
• prevent abuse, fraud, and violations of our Terms of Service (for example, credential sharing or automated scraping); and
• respond when you contact us for support.

We do not use your information for advertising, profiling, or any purpose beyond running the service.

4. Who We Share With

In the ordinary course, we share personal data only with the service providers that run the site:

• Google — provides Firebase Authentication (sign-in), Firestore (our database), Cloud Run (hosting), and Google Fonts. Google processes your data on our behalf to deliver these services, including the font-request data described in Section 1. Google's privacy policy is available at https://policies.google.com/privacy.
• Stripe — processes payments and acts as the merchant of record for purchases, which means Stripe handles your payment details, transactions, and applicable sales tax under its own terms and privacy policy. When you make a purchase, your transaction may additionally be subject to Stripe or Link terms of sale presented to you at checkout, and Stripe processes your payment information under its own privacy policy, available at https://stripe.com/privacy.

Beyond those service providers, we may disclose personal information only in the following circumstances:

• Legal requirements. If we are legally required to — for example, in response to a valid subpoena, court order, or other lawful demand.
• Enforcement and protection. To enforce our Terms of Service, to investigate or pursue violations of them (for example, scraping or credential sharing), or to protect the rights, property, or safety of SSA, our users, or others, including disclosure to our legal counsel and to courts in connection with a claim.
• Professional advisors. To our professional advisors — such as accountants, auditors, and lawyers — who need the information to provide their services and who are bound by confidentiality obligations.
• Business transfers. If John D Wilson LLC is involved in a merger, acquisition, financing, reorganization, or sale of some or all of its assets, personal data may be transferred as part of that transaction. Any successor will remain subject to this policy's commitments with respect to previously collected data, and we will announce any such change on the site.

We do not sell personal data, and we do not share personal data with anyone for advertising purposes.

5. Data Retention

We keep your account data for as long as your account exists. If you want your account and its data deleted, email us at jdwilson@sportsbookscienceanalytics.com and we will delete it, subject to the exceptions below:

• Billing and transaction records are retained as required for tax and accounting purposes, even after account deletion.
• We may retain limited information where reasonably necessary to establish, exercise, or defend legal claims, to prevent fraud or abuse, or to enforce our Terms of Service. This includes the record of the Terms of Service version you accepted and when you accepted it, which we retain as evidence of our agreement.

Server logs are retained for a limited period sufficient for the security, debugging, and abuse-prevention purposes described above — as a default, approximately 30 days — after which they are deleted in the ordinary course. We may preserve specific log entries longer where they are relevant to an ongoing security investigation or a legal claim. Server logs are not linked to marketing profiles (we have none).

6. Your Rights and Choices

You can request access to, correction of, or deletion of your personal data at any time by emailing jdwilson@sportsbookscienceanalytics.com. We will respond to verified requests without unreasonable delay. Deletion requests are subject to the retention exceptions described in Section 5.

California residents

For purposes of the California Online Privacy Protection Act (CalOPPA): this policy describes all categories of personal information we collect and everyone we share it with. Regarding "Do Not Track" browser signals — we do not use your information to track you across other websites, and we do not permit any third party to collect personal information through our service for advertising or cross-site tracking purposes. As described in Sections 1 and 4, Google receives standard request data (such as your IP address and user agent) when your browser loads fonts or sign-in resources from Google's servers; Google acts as our service provider in doing so, not as an advertising partner. Because we do not engage in cross-site tracking, we do not respond differently to Do Not Track signals — there is no tracking for such a signal to turn off.

7. Security

We use commercially reasonable technical and organizational measures designed to protect your information. Connections to SSA are encrypted in transit using TLS, the service runs on managed Google Cloud infrastructure, and payment details are handled by Stripe rather than by SSA. Because sign-in is through Google only, SSA does not store passwords, and we deliberately limit the amount of personal data we collect and hold. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

8. Age

SSA is for users who are 21 or older and of legal sports-wagering age in their jurisdiction. The service is not directed to anyone under 21, and we do not knowingly collect personal information from anyone under 21. If you believe someone under 21 has created an account, email jdwilson@sportsbookscienceanalytics.com. We will investigate the report, and if we confirm that the account holder does not meet the age requirement, we will delete the account and its data, subject to the retention exceptions in Section 5.

9. International Users

SSA is a United States–based service operated from Colorado, and your data is processed and stored in the United States. If you access the service from outside the US, you understand that your information will be transferred to and processed in the US, where data protection laws may differ from those in your jurisdiction.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be announced on the site, and by email where we have an address for you. The effective date at the top of this page always reflects the current version. Continued use of the service after the effective date of an updated policy constitutes acceptance of it.

11. Contact

Questions about this policy or your data: jdwilson@sportsbookscienceanalytics.com.