Privacy Policy

1. What We Collect

We collect only what we need to operate the Service:

• Account info: email, display name, handle (you choose)
• Authentication: Google/Apple sign-in tokens (we never see your password)
• Billing: handled entirely by Stripe — we store only customer ID and plan, never card data
• Usage data: pages viewed, session duration, anonymous IP — used solely for product analytics and security
• Optional: phone number for SMS alerts, push subscription tokens — only if you opt in

2. What We Don't Collect

We do not collect government IDs, Social Security numbers, financial account numbers, or credit card details. We never sell, rent, or trade your data to third parties for advertising.

3. How We Use It

• Provide and improve the Service
• Send the alerts and notifications you've opted into
• Detect and block security threats (intrusion attempts, scraping, abuse)
• Communicate billing and account changes

4. Who We Share With

Only the third-party processors required to operate the Service:

• Stripe — payments
• Supabase — database & authentication
• Vercel — hosting
• Twilio — SMS alerts (only if you provide a phone)
• SendGrid — transactional email

Each processor is contractually required to protect your data and use it only to provide their service.

5. Cookies

We use first-party cookies for authentication (signed-in sessions) and to remember your age-verification preference for 30 days. We do not use third-party advertising or tracking cookies.

6. Your Rights

You can:

• Access and download your data from your account page
• Delete your account at any time — all personal data is purged within 30 days
• Opt out of marketing emails (transactional emails will still be sent)
• Disable SMS and push alerts from the Alerts settings

California residents have additional rights under the CCPA. Email us at privacy@linehawk.bet to exercise them.

7. Data Retention

Account data is retained while your account is active. Usage data is retained for up to 13 months for analytics and is then aggregated/anonymized. Security event logs are kept for 90 days.

8. Security

We use industry-standard encryption (TLS in transit, encryption at rest), row-level security on all data, an active intrusion detection system, and offload all payment processing to PCI-compliant Stripe. We do not store passwords or card data.

9. Children

LINEHAWK is for users 21 and older. We do not knowingly collect data from anyone under 21. If you believe we have, contact us and we will delete it.

10. Changes

We may update this policy. Material changes will be announced in-app and via email to active accounts.

11. Contact

Questions or data requests? privacy@linehawk.bet