Data & Privacy

Data & Privacy

Your privacy matters. Learn what data we collect, how we use it, and how you stay in control.

What Data We Collect

Account Information

• Email address (required for account)
• Display name (optional)
• Password (encrypted, never stored in plain text)
• Profile photo (optional)

Usage Data

• Pages visited (analytics)
• Features used (product improvement)
• Teams followed (personalization)
• Search queries (improve search)
• Prediction views (trending content)

Device & Browser Information

• IP address (security, location for content)
• Browser type (compatibility)
• Device type (mobile/desktop optimization)
• Operating system (feature support)

Cookies

• Essential cookies: Login, preferences (required)
• Analytics cookies: Usage tracking (optional)
• Advertising cookies: Personalized ads (optional, can opt-out)

How We Use Your Data

Essential Uses

• Account management: Login, authentication
• Service delivery: Show you requested content
• Support: Help with issues and questions
• Security: Protect against fraud and abuse

Product Improvement

• Analyze usage patterns
• Identify bugs and issues
• Develop new features
• Improve predictions and algorithms

Personalization

• Customized dashboard
• Relevant team content
• Tailored predictions
• Smart notifications

Communications

• Service updates
• New features
• Security alerts
• Marketing (opt-out available)

What We DON'T Do

• ❌ Sell your data to third parties
• ❌ Share personal info with advertisers
• ❌ Store credit card numbers (handled by payment processors)
• ❌ Track you across other websites (no cross-site tracking)
• ❌ Read your emails or messages

Your Privacy Controls

Data Access

1. Go to Settings > Privacy > Download My Data
2. Request complete data export
3. Receive email when ready (24-48 hours)
4. Download ZIP file with everything we have

Data Deletion

1. Settings > Privacy > Delete Specific Data
2. Choose what to delete:
   • Viewing history
   • Search history
   • Followed teams
   • Predictions viewed
3. Or delete entire account (Settings > Account)

Cookie Preferences

1. Settings > Privacy > Cookie Settings
2. Toggle cookie categories:
   • Essential: Required (cannot disable)
   • Analytics: Optional
   • Advertising: Optional
3. Save preferences

Data Security

How We Protect Your Data

• Encryption: HTTPS for all connections
• Password hashing: bcrypt with salt
• Database encryption: At rest and in transit
• Access controls: Strict employee access policies
• Regular audits: Third-party security reviews
• Backups: Encrypted, geographically distributed

Payment Security

• PCI-DSS compliant payment processing
• Stripe handles all credit card data
• We never store full card numbers
• 3D Secure verification available

Third-Party Services

We use trusted partners for specific functions:

• Stripe: Payment processing (PCI-DSS Level 1)
• Supabase: Database and authentication
• Vercel: Hosting and CDN
• Google Analytics: Usage analytics (opt-out available)

All partners comply with GDPR and have their own privacy policies.

Your Legal Rights

Under GDPR (EU) and CCPA (California)

• Right to access: Request copy of your data
• Right to rectification: Correct inaccurate data
• Right to erasure: Delete your data ("right to be forgotten")
• Right to restrict processing: Limit how we use data
• Right to data portability: Export in machine-readable format
• Right to object: Opt-out of certain processing
• Right to withdraw consent: Change your mind anytime

Exercising Your Rights

1. Email privacy@cfbanalytics.com
2. Specify your request
3. We respond within 30 days
4. May request identity verification

Children's Privacy

• Service is 18+ only
• We do not knowingly collect data from minors
• If we discover minor accounts, they are deleted
• Parents can contact us to remove child's data

Data Retention

• Active accounts: Data kept while account active
• Inactive accounts: After 2 years of inactivity, we may delete
• Deleted accounts: Data permanently erased within 30 days
• Legal requirements: Some data retained longer if required by law

Changes to Privacy Policy

• We may update privacy practices
• Material changes require email notification
• Review current policy: cfbanalytics.com/privacy
• Last updated date always shown

Contact Us

Questions about privacy?

• Email: privacy@cfbanalytics.com
• Mail: Privacy Team, CFB Analytics, [Address]
• Response time: Within 48 hours