Privacy policy
Last updated September 22, 2026
What we collect, why, who else sees it and how to get rid of it. We collect as little as we can get away with, and we don’t sell any of it.
What we collect
- Your account: email address and password (stored hashed by our authentication provider, never in readable form), plus the date you joined.
- Your subscription: which plan you’re on, its status and renewal dates, and a Stripe customer reference. We never see or store your card number. Stripe handles payment details directly.
- How you use the picks: which picks you marked as taken and the stake you recorded, if you use that feature, and which picks you have opened. We keep that last one so the refund policy can be applied fairly, and so we know what gets read.
- Email preferences: whether you want notifications, and whether an email we sent bounced or was delivered.
- Push notifications: if you turn them on, the browser subscription needed to send them.
- Referral and agent links: when someone arrives through a link, we log the day and which link it was. That log has no name, email, IP address or device information in it.
- If you join the free email list without an account: just your email address and where you signed up.
Cookies
A session cookie keeps you logged in. If you follow a referral or sales agent link, a cookie remembers which one for 30 days so the right person gets credit. There are no advertising or tracking cookies, and we don’t run third-party analytics that follow you around the web.
Who else sees it
We use a small number of companies to run the service. Each sees only what it needs:
- Supabase — our database and login system.
- Stripe — payments, subscriptions and billing. They hold your card details, not us.
- Resend — sending email.
- Vercel — hosting.
- Anthropic (Claude) — drafts our newsletters and some of our outreach. When it does, it may receive limited account information, such as an email address, subscription status and notes we’ve written, so the draft makes sense. It is not used to train their models.
We don’t sell your information, rent it, or hand it to advertisers. We’ll disclose it if the law requires it, or to protect the service from fraud.
How long we keep it
- Your account and subscription history stay while your account exists, and for as long afterwards as tax and accounting rules require.
- Email logs are kept so we can tell whether something reached you.
- Raw text we collect while researching public capper posts is deleted after seven days; only the structured pick stays.
- Link-click logs are aggregate counts, kept indefinitely because they identify nobody.
Your choices
- Email: turn notifications off in your account, or use the unsubscribe link in any marketing email. Emails about your own account — billing failures, cancellation, a receipt — still come through, because they’re about access you’re paying for.
- Push: turn it off in your browser or on the account page at any time.
- Access or deletion: email JDilzBets <picks@jdilzbets.com> and we’ll send you a copy of what we hold, or delete it. Deleting your account ends any active subscription.
Depending on where you live, you may have additional rights over your data. Ask us and we’ll honour them.
Security
Traffic is encrypted in transit. Database access is restricted per account by row-level security, so one member’s data isn’t reachable by another. No system is perfect; if we ever have a breach that affects you, we’ll tell you.
Children
This service is for adults 21 and over. We don’t knowingly collect anything from anyone younger. If you believe we have, tell us and we’ll delete it.