Privacy Policy

1. Introduction

PMill Sports ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

Please read this policy carefully. By using PMill Sports, you consent to the practices described in this Privacy Policy.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address, display name, password (encrypted)
• Profile Information: Timezone preferences, display settings
• Payment Information: Processed securely by Stripe - we do not store card numbers
• Usage Data: Simulated betting history, game unlocks, preferences

2.2 Information Collected Automatically

• Device Information: Browser type, operating system, device type
• Log Data: IP address, access times, pages viewed
• Cookies: Session cookies for authentication and preferences

3. How We Use Your Information

We use your information to:

• Provide, maintain, and improve our Service
• Process transactions and send related information
• Send transactional emails (purchase receipts, password resets)
• Send optional notifications (pick alerts, if you opt in)
• Respond to customer service requests
• Monitor and analyze usage patterns to improve user experience
• Detect and prevent fraud or abuse
• Comply with legal obligations

4. Information Sharing

We do NOT sell your personal information. We may share information with:

4.1 Service Providers

• Supabase: Database hosting and authentication
• Stripe: Payment processing
• Resend: Transactional email delivery
• Railway: Application hosting

4.2 Legal Requirements

We may disclose information if required by law, court order, or government request, or to protect our rights, property, or safety.

5. Data Retention

We retain your data for as long as your account is active or as needed to provide services. After account deletion:

• Personal data: Deleted within 30 days
• Transaction records: Retained for 7 years for legal/tax purposes (anonymized)
• Aggregated analytics: May be retained indefinitely (non-personally identifiable)

6. Your Rights

You have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data ("right to be forgotten")
• Data Portability: Export your data in a machine-readable format
• Object: Opt out of marketing communications
• Withdraw Consent: Withdraw consent where processing is based on consent

To exercise these rights, visit your Account Settings or contact us at privacy@pmillsports.com.

7. Cookies and Tracking

We use cookies for:

• Essential Cookies: Required for authentication and basic functionality
• Preference Cookies: Remember your settings (timezone, display options)

We do NOT use advertising cookies or cross-site tracking.

You can manage cookies through your browser settings. Disabling essential cookies may affect Service functionality.

8. Data Security

We implement industry-standard security measures:

• TLS/SSL encryption for data in transit
• Encrypted password storage (bcrypt hashing)
• Row-level security in our database
• Regular security audits
• Limited employee access to personal data

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

9. International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses
• Privacy Shield certification (where applicable)
• Adequate data protection laws

10. Children's Privacy

Our Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If we become aware of such collection, we will delete the information immediately.

11. California Privacy Rights (CCPA)

California residents have additional rights:

• Right to know what personal information is collected
• Right to know whether personal information is sold or disclosed
• Right to opt out of sale of personal information (we do not sell data)
• Right to non-discrimination for exercising privacy rights

12. European Privacy Rights (GDPR)

If you are in the European Economic Area, you have rights under the General Data Protection Regulation, including those listed in Section 6. Our legal basis for processing is:

• Contract: To provide the Service you requested
• Legitimate Interest: To improve our Service and prevent fraud
• Consent: For optional communications (you can withdraw anytime)

13. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via email or prominent notice on our Service. Your continued use after changes constitutes acceptance.

14. Contact Us

For privacy-related questions or to exercise your rights:

Email: privacy@pmillsports.com