Privacy Policy
Last Updated: November 1, 2026 · Effective Date: November 1, 2026
1. Introduction
DegeneratePicks ("we," "us," or "our") runs a sports analytics service at degeneratepicks.com (the "Service"). This policy explains what personal information we collect, why, who we share it with, how long we keep it, and the choices you have. It applies to the website, the installable web app, our emails and texts, and our Telegram bot.
You must be 21 or older to use the Service.
2. Information We Collect
2.1 Information you give us
| What | When | Why |
|---|
| Username, email address, password (stored only as a one-way hash) | Sign-up | To run your account and sign you in |
| Google account ID, email and name | If you choose "Continue with Google" | To sign you in with Google and link it to your account |
| Invite or referral code | Sign-up, invites | To check access and credit referrals |
| Display name and profile picture (avatar) | Settings | Shown next to your chat messages |
| Phone number and SMS opt-in | If you turn on text alerts | To send the alerts you asked for |
| Chat messages, replies, likes, reports, mutes, blocks and appeals | Community chat and game threads | To run the chat and keep it safe |
| Bets you track | If you track bets | To show your record; shown to others only if you turn on sharing (see 4.3) |
| Responsible-gambling settings (limits, self-exclusion) | If you set them | To apply the limits you chose |
| Age confirmation and agreement to our terms | Sign-up | Legal compliance |
| Waitlist email, feedback and support messages | If you send them | To reply and improve the Service |
| Billing details | If you subscribe | Card details go directly to Stripe; we keep only a Stripe customer and subscription ID and your plan. If you start a free trial, we also keep Stripe's card fingerprint (a code that identifies the card, not its number) so each card gets one free trial |
2.2 Information collected automatically
- Sign-in sessions: a session record with the time, your IP address and your browser's user agent, so we can keep you signed in, show your active sessions and sign out stolen sessions.
- Security logs: sign-in attempts, rate-limit events and admin actions, to protect accounts and investigate abuse.
- Error reports: when something breaks, an error report is sent to Sentry. We configure Sentry not to send personal data such as IP addresses or cookies.
- Push notification subscription: if you allow notifications, your browser gives us a push address for your device.
- Browser storage: we use your browser's local storage (not advertising cookies) to keep you signed in and remember settings such as your theme, current page and dismissed tips. You can clear it in your browser at any time; you'll be signed out.
2.3 What we do not collect
- We do not use advertising trackers, sell ads, or run third-party analytics scripts.
- We do not see or store your full card number; Stripe handles payment cards.
- We do not take bets or hold funds. We are not a sportsbook.
3. How We Use Information
- To provide the Service: accounts, sign-in, picks, alerts, chat, settings and support.
- To keep it safe: preventing abuse, spam and account takeover; moderating chat; enforcing limits you set.
- To bill paid plans, if you subscribe.
- To send messages you asked for (account emails, alerts, renewal reminders) and, if you opt in, product updates.
- To improve the Service using aggregate, de-identified usage and pick-performance data.
- To meet legal obligations.
4. How Picks Are Made (AI and Statistical Models)
- Our picks come from statistical and machine-learning models trained on sports data: game results, odds and prices, injuries and similar information. Their outputs are estimates, not guarantees.
- Your personal information is not used to train these models. Aggregate pick results (for example, how picks performed) are used to evaluate and improve them.
- We do not run a chatbot or large language model that reads your messages or account data, and the models don't make legal or similarly significant decisions about you.
5. Who Can See What
5.1 Other members
- Your username, display name and avatar appear with your chat messages and on leaderboards if you take part.
- Chat messages you post in community rooms and game threads are visible to other signed-in members.
5.2 Your bets
- Tracked bets are private by default. If you turn on "Show my bets on my comments" in Settings → Privacy, the bet you hold on a game (and, if you allow it, the amount) appears next to your comments on that game. You can turn this off at any time.
5.3 The public
- Our public results page shows picks the Service made. It does not show member information.
6. Who We Share Information With
We do not sell or share your personal information for cross-context behavioral advertising.
We use these service providers to run the Service. Each receives only what it needs:
| Provider | What for | Data involved |
|---|
| Railway | Hosting our servers and database | All account data, stored on their infrastructure |
| Stripe | Payments and subscriptions | Email, billing details, plan |
| Google | "Continue with Google" sign-in | Google account ID, email, name |
| Resend (and our email server) | Sending account and alert emails | Email address, message content |
| Twilio | Text-message alerts to our own team (we don't collect members' phone numbers) | Message content |
| Sentry | Error monitoring | Technical error details (personal data off) |
| Your browser's push service (e.g. Google, Apple, Mozilla) | Push notifications, if you allow them | Device push address, notification content |
| Google Fonts, cdnjs, jsDelivr | Fonts and code libraries the pages load | Your IP address and browser details, as with any website request |
We get sports data, odds and prices from providers such as ESPN, The Odds API, Polymarket, API-Sports, BallDontLie and OpenWeather. We don't send them your personal information.
We may also disclose information if the law requires it, to protect rights and safety, or as part of a merger or sale of the business (in which case this policy continues to apply).
7. How Long We Keep Information
- Account data is kept while your account exists.
- When you delete your account, we delete your profile and everything tied to it:
- sessions, chat messages, likes, reports, bets, push subscriptions and any Telegram link from before we retired Telegram;
- invites, referrals and settings.
- Some records survive deletion with your identity removed:
- security and audit logs keep the event but drop your account ID;
- other members' rows that pointed to you, such as an invite you sent them, are kept without the link.
- Stripe keeps billing records as required by tax and accounting law.
- Backups roll off on our hosting provider's schedule.
8. Your Choices and Rights
- Access and download: Settings → Privacy → Download my data gives you a copy of the data tied to your account.
- Correct: change your username, email, display name and avatar in Settings, or contact us.
- Delete: Settings → Account → Delete account deletes your account and its data immediately. Any active subscription is cancelled first.
- Bets on comments: off by default; turn on or off in Settings → Privacy.
- Messages: turn alerts, texts and emails on or off in Settings → Notifications. Every marketing email has an unsubscribe link.
- Cancel a subscription: Settings → Membership → Manage subscription.
Depending on where you live, you may have more rights. This includes California (CCPA/CPRA), other US states, and the EU/UK (GDPR):
- to know, access, correct, delete and port your data;
- to object to or restrict processing;
- not to be discriminated against for using these rights.
To use a right we don't offer in Settings, email privacy@degeneratepicks.com. We'll verify it's you and reply within the time the law requires. If you're in the EU or UK, you can also complain to your data protection authority.
9. Security
We protect accounts with:
- hashed passwords;
- signed, revocable sessions;
- rate limits on sign-in and sensitive actions;
- HTTPS everywhere;
- access controls on admin tools.
No system is perfectly secure. If a breach affects your personal information, we'll notify you as the law requires.
10. Children
The Service is only for people 21 and older. We don't knowingly collect information from anyone younger. If you believe a minor has an account, contact us and we'll delete it.
11. International Users
We're based in the United States and our servers are there. If you use the Service from elsewhere, your information is processed in the US.
12. Changes to This Policy
If we change this policy, we'll update the date at the top. For significant changes, we'll also notify you by email or in the app before they take effect.
13. Contact Us
DegeneratePicks
Email: privacy@degeneratepicks.com
If gambling is causing you problems, call 1-800-GAMBLER. If you're in crisis, call or text 988.