Privacy Policy

• Browsing without an account: no account information. Our hosting providers keep standard technical logs (IP address, browser type, pages requested) for security and reliability.
• Account information: your email address and, if you sign in with Google or GitHub, the basic profile those services share (name, email, avatar). Passwords are handled by our authentication provider and are never stored in readable form.
• Your activity in the app: players and teams you add to your watchlist, your subscription tier, and — if you use AI features — the questions you submit.
• Payments: if you buy a paid plan, payment is processed by Stripe on Stripe’s own checkout page. We never see or store your full card number; we keep only a customer reference, plan and billing status.
• Error reports: when something breaks, we receive a technical error report (browser, page, error details). Session recording is turned off.

• To create and secure your account and keep you signed in.
• To provide the features you use (watchlist, subscription features, AI analysis).
• To process payments and manage your subscription.
• To detect abuse, fix bugs and keep the service running.
• To send essential service emails (sign-in links, invitations, billing notices).

We do not sell your personal information, we do not use it for third-party advertising, and we do not build advertising profiles.

We use strictly necessary cookies to keep you signed in, and your browser’s local storage to remember small preferences (for example, that you dismissed a banner).

We use Google Analytics to count visits and see which pages and features are used, loaded through Google Tag Manager. Analytics cookies are off by default: Google Analytics then sets no cookies and receives only cookieless measurements, with your IP address in shortened form. Advertising signals (ad storage, ad personalization) are also switched off by default. Sponsored slots are clearly labelled; when you click an affiliate link, the partner site may set its own cookies to credit the referral. Google AdSense, if shown, serves non-personalized ads unless you consent otherwise.

We share data only with providers that help us run the service, under contracts that protect it:

• Supabase — database and authentication
• Vercel — website hosting
• Railway — API hosting
• Stripe — payment processing
• Sentry — error monitoring
• Anthropic — AI analysis (only the content needed to generate a response)
• Google / GitHub — only if you choose to sign in with them
• Google Analytics — visit and usage statistics
• Google Tag Manager — loads our analytics tags
• Google AdSense and affiliate partners — sponsored placements, when shown

Some of these providers store or process data outside Québec and Canada, including in the United States. When that happens, your information is subject to the laws of that jurisdiction. We assess these transfers and rely on our providers’ contractual and security safeguards.

We keep account data while your account is active. When you delete your account, we delete or anonymize your personal information within 30 days, except billing records we must keep for tax and accounting purposes (generally up to 7 years). Technical logs are kept for a limited period for security.

Data is encrypted in transit (HTTPS). Access to user data is restricted by row-level security so each account can only read its own information, and secret keys stay on our servers. No system is perfectly secure; if a privacy incident creates a risk of serious injury, we will notify you and the Commission d’accès à l’information as required by law.

You can ask us to:

• access the personal information we hold about you and get a copy of it;
• correct information that is inaccurate or incomplete;
• delete your account and personal information;
• withdraw consent to optional processing.

Email support@puckmetrics.tech. We will respond within 30 days. If you are not satisfied with our response, you can contact the Commission d’accès à l’information du Québec or the Office of the Privacy Commissioner of Canada.

PuckMetrics is intended for adults. Features that reference betting markets are for users who are at least the age of majority where they live. We do not knowingly collect information from children under 14.

We will update this policy when our practices change and revise the date at the top. Material changes will be announced on the site. The person responsible for the protection of personal information can be reached at support@puckmetrics.tech.