Privacy Policy

Last updated: May 5, 2026  ·  Effective immediately

1. Information We Collect

Account Registration

When you create an account directly, we collect:

• Username (chosen by you)
• Password (stored as a one-way cryptographic hash — we never see the plaintext)

Social Sign-In (Google / Facebook)

When you sign in with Google or Facebook, we receive from those providers:

• Your display name
• Your email address
• The name of the OAuth provider used (e.g. "google" or "facebook")

We do not receive your social media password, friends list, posts, photos, or any other profile data beyond the fields listed above.

Activity Data

As you use the platform we automatically record:

• Bot code and configuration you submit
• Match history and results associated with your bots
• USDC wallet balance, deposits, withdrawals, and bet records
• Tournament participation and outcomes
• Referral relationships (who referred you, if applicable)
• Timestamps of the above events

Technical Data

Our servers automatically log standard web-server information including IP addresses, browser user-agent strings, and pages visited. This data is used solely for security monitoring and is not sold or shared.

2. How We Use Your Information

• To create and maintain your account and wallet
• To run bot matches, settle bets, and distribute USDC payouts
• To display your username and statistics on leaderboards
• To enforce our Terms of Service and prevent fraud or abuse
• To send transactional communications (e.g. match results) if you opt in
• To comply with legal obligations

We do not use your information for advertising, and we do not sell or rent it to third parties.

3. Leaderboards and Public Information

Your username, bot names, match record (wins/losses), and Elo rating are displayed publicly on leaderboards and match feeds. Your email address, wallet balance, and bet amounts are never shown publicly.

4. Data Sharing

We do not sell, trade, or rent your personal information. We may share data only in the following limited circumstances:

• Service providers: Hosting infrastructure (Railway.app) that processes data on our behalf under confidentiality obligations
• Legal requirements: If compelled by a valid court order or applicable law
• Business transfer: If Parlaysito is acquired or merged, user data may transfer subject to the same privacy commitments

5. Cookies and Session Tokens

We use a single HttpOnly, Secure, SameSite session cookie to keep you signed in. This cookie contains a signed token that identifies your account — it does not track you across third-party sites and is not accessible to JavaScript. We do not use advertising cookies or third-party analytics cookies.

6. Data Retention

We retain your account data for as long as your account is active. Match and transaction records are kept indefinitely as part of the immutable game ledger. If you request account deletion, we will remove your personal identifiers (username, email) from our systems within 30 days, though aggregate or anonymized statistics derived from your match history may be retained.

7. Your Rights

Depending on your location you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate personal data
• Request deletion of your account and associated personal data
• Object to or restrict certain processing
• Data portability (receive your data in a machine-readable format)

To exercise any of these rights, see our Data Deletion & Requests page or contact us at privacy@parlaysito.com.

8. Children's Privacy

Parlaysito is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has created an account, please contact us and we will delete it promptly.

9. Security

We use industry-standard measures to protect your data: HTTPS for all traffic, bcrypt password hashing, HttpOnly session cookies, and row-level database locking for financial operations. No system is perfectly secure; please use a strong, unique password and sign out on shared devices.

10. Third-Party Links

Our site may link to third-party resources. We are not responsible for the privacy practices of those sites and encourage you to review their policies.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the revised policy on this page with an updated "Last updated" date. Continued use of the service after changes are posted constitutes acceptance of the revised policy.

12. Contact Us

For privacy questions or data requests:

• Email: privacy@parlaysito.com
• Data deletion: parlaysito.com/data-deletion