Privacy Policy

Account data: email address and password (hashed by our auth provider, Supabase), or your Google account identity (name, email, and Google user id) if you sign in with Google. Billing data: handled by Stripe or, for some legacy memberships, Whop — we never see or store full card numbers; we store customer/membership ids, plan, and subscription status. Promo & partner data: if you enter a promo code we store the code, application timestamps, and (after a paid invoice) attributed revenue amounts so we can operate discounts and partner accounting. Usage data: server logs (IP, browser, pages requested) for security and debugging, plus analytics described below. Preferences: sport-visibility choices saved in your browser.

To operate your account and subscription, deliver content, process payments, apply promo codes, account for partner attributions, send transactional email (signup confirmation, password reset, billing receipts and renewal notices), prevent abuse, and understand how the product is used. We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

These companies receive only what they need to run their piece of the Service: Supabase (authentication and database), Stripe (payments and billing portal), Whop (legacy membership checkout, if you originally subscribed there), Vercel (hosting and Speed Insights performance metrics), Google (Google sign-in, and Google Analytics as described below), and Cloudflare (Turnstile captcha on sign-in). Each is governed by its own privacy terms. We do not run Meta, TikTok, or similar advertising pixels.

We use first-party cookies and browser storage to keep you signed in and remember session state. We use Google Analytics 4 to see aggregate traffic (pages, device, approximate region). We use Vercel Speed Insights for performance. If your browser sends a Global Privacy Control (GPC) or Do Not Track signal, we do not load Google Analytics. We do not currently respond to DNT beyond that GPC / DNT gate on Analytics.

Slatery's sports models run on our own systems. We do not send your account, billing, or prompt data to a third-party AI provider. We sometimes use an AI writing assistant (Anthropic) on the operator side to draft public social posts from our own stats — that pipeline does not include subscriber personal data. The in-app "LLM Data Exporter" only copies slate text to your clipboard so you can paste it into a tool you choose; that paste is your action, not ours.

Account data is kept while your account is active. You can delete your account yourself from Account (Privacy & data), or email support@tryslatery.com from your account address. We complete deletion within 30 days, except records we must keep for tax or fraud prevention (for example Stripe transaction history). We do not host a public file-upload bucket; there are no user uploads to retain.

You may access the email and plan on your Account page, correct your email via support, and delete your account as above. California residents may also email the same address to request a copy of the personal information we have about them. We honor GPC as described in section 4. Because we do not sell or share personal information for advertising, there is no separate "Do Not Sell" opt-out.

Traffic is encrypted in transit (HTTPS). Passwords are hashed. Payment details never touch our servers. No system is perfectly secure — if a breach affecting your data occurs, we will notify you as required by law.

The Service is intended for adults of legal age and is not directed at children. We do not knowingly collect data from minors. Sign-up asks you to confirm you are of legal age in your place of residence.

Material changes to this policy will be reflected by the date above. When we make a material change we may also ask you to review and agree again in-product. Questions or requests: support@tryslatery.com. See also our Terms of Service.