This Privacy Policy explains how OddsOS ("we," "us," or "our") collects, uses, and protects your information when you use our service.
Account information: Username, display name, email address, and password (stored as a bcrypt hash — we never store plaintext passwords).
Age verification: Date of birth (used solely to verify you are 21+ and not shared with third parties).
Usage data: Pages visited, picks viewed, bets logged in the simulation tracker, and feature interactions. This helps us improve the service.
Payment information: Payments are processed by Stripe. We do not store credit card numbers or full payment details — Stripe handles all payment data under their own privacy policy.
Technical data: IP address, browser type, device type, and session data for security and rate-limiting purposes.
If you use our responsible gambling tools (age verification, self-exclusion, loss limits), we store that information to enforce your choices and to comply with applicable regulations. Self-exclusion data is retained for the duration of your exclusion period and for 1 year after.
We do not sell your personal information. We share data only with:
Account data is retained as long as your account is active. You may request deletion of your account and associated data at any time by contacting [email protected]. Deletion requests are processed within 30 days. Some data may be retained longer where required by law.
We use an HTTP-only session cookie (session_token) for authentication. We use browser localStorage to store your tier, feature flags, and UI preferences. We do not use third-party tracking cookies or advertising pixels.
We use industry-standard security practices including bcrypt password hashing, HTTPS encryption, HTTP-only cookies, and rate limiting on authentication endpoints. No system is perfectly secure; use a strong, unique password for your account.
OddsOS is not directed at anyone under the age of 21. We do not knowingly collect information from users under 21. If we learn we have collected information from a user under 21, we will delete it immediately.
You may request access to, correction of, or deletion of your personal data at any time. Contact us at [email protected]. Residents of California (CCPA) and the EU/EEA (GDPR) have additional rights regarding their data.
We may update this Privacy Policy periodically. We will notify registered users of material changes via email. Continued use of the service after changes constitutes acceptance of the updated policy.
For privacy-related inquiries: [email protected]