Privacy Policy

1. Information We Collect

Information you provide directly:

• Email address, when you create an account.
• A password, if you choose to set one. We store only a salted cryptographic hash of your password — never the password itself.
• Your watch setup and follows: the teams and players you follow, the streaming or TV services you tell us you have, your spoiler preference, and a coarse market area (such as a metro area) used to determine local broadcast availability. If you enter a ZIP or postal code to set your market, the code is converted to a coarse market area entirely on your device — the ZIP code itself is never sent to or stored on our servers.
• Any other information you voluntarily provide, such as through a support request.

Information collected automatically:

• Referral source, such as the website, app, or search engine you came from (for example, Reddit, Bluesky, or a Google search) when you arrive at the Service;
• Page view and usage data, such as which pages you visit and how you interact with the Service;
• Approximate, non-precise location (such as your city, region, and country, derived from your IP address), browser type, operating system, and device type;
• Sign-in security data: when you request a sign-in link, we temporarily record the IP address the request came from for security purposes. That record is deleted automatically shortly after the link is used or expires (links expire after 15 minutes; deletion typically occurs within about an hour), and is deleted immediately if you delete your account.

We use Umami, a self-hosted, privacy-focused analytics tool, to collect the analytics information above. Umami does not use cookies, does not assign you a persistent identifier, and does not track you across other websites or apps. Our analytics does not store your IP address; it is used only transiently to derive approximate location before being discarded. Because Umami is self-hosted on our own infrastructure, this analytics data is not transmitted to or shared with Umami Software or any other analytics company — it stays on our own servers.

2. How We Use Information

We use the information we collect to:

• Create and maintain your account;
• Operate, personalize, and improve the Service, including features like watch availability;
• Communicate with you, including responding to support requests and, where applicable, sending updates about the Service;
• Monitor and analyze usage trends to improve functionality and content;
• Detect, prevent, and address technical issues, fraud, or misuse of the Service;
• Comply with legal obligations.

3. How We Share Information

We do not sell your personal information. We do not share analytics data with any third party. Our analytics (Umami) is self-hosted, so that data stays on our own infrastructure. We may share information in the following limited circumstances:

• With service providers who help us operate the Service (e.g., hosting or email delivery), under obligations to protect your information;
• If required by law, regulation, legal process, or governmental request;
• To protect the rights, property, or safety of Dub Sports, our users, or others;
• In connection with a merger, acquisition, financing, or sale of assets, subject to standard confidentiality protections.

4. Cookies and Tracking Technologies

Our analytics tool (Umami) does not use cookies. We use a small number of first-party cookies for essential functions only: keeping you signed in, remembering your watch setup and display preferences (such as your services, market area, and spoiler setting — including before you create an account), remembering interface choices you have made, and securing the sign-in process. We do not use advertising cookies or cross-site tracking cookies. You can control cookies through your browser settings; disabling cookies may affect certain features of the Service, such as staying signed in.

5. Data Retention

We retain account and usage information for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. You may delete your account and its associated data yourself at any time from the Settings page in the Service, or request deletion by contacting support@dubsports.io.

6. Data Security

We use reasonable administrative, technical, and organizational measures designed to protect your information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. International Users and Data Transfers

Dub Sports is operated from the United States, and our users access the Service from around the world. If you access the Service from outside the United States, you understand that your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country. By using the Service, you consent to this transfer, storage, and processing. Where required by applicable law, we rely on appropriate safeguards (such as standard contractual clauses or equivalent mechanisms) for transfers of personal information out of the European Economic Area ("EEA"), the United Kingdom, or Switzerland.

8. Legal Basis for Processing (EEA/UK Users)

If you are located in the EEA or the UK, we process your personal information on the following legal bases under the General Data Protection Regulation ("GDPR") or UK GDPR, as applicable:

• Performance of a contract, to provide the Service and maintain your account;
• Legitimate interests, such as improving and securing the Service, provided those interests are not overridden by your data protection rights;
• Consent, where we ask for it (for example, certain communications you can opt into or out of);
• Legal obligation, where processing is necessary to comply with the law.

9. Your Rights and Choices

Depending on your location, you may have rights to access, correct, delete, or restrict the use of your personal information, to object to certain processing, to request a copy of your information in a portable format, and to withdraw consent where processing is based on consent. You can delete your account and its associated personal information yourself at any time from the Settings page. To exercise any other rights, contact us at support@dubsports.io. We will respond in accordance with applicable law.

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect and the right to request deletion. We do not sell personal information as defined under the CCPA.

If you are in the EEA or UK, you also have the right to lodge a complaint with your local data protection supervisory authority.

10. Children's Privacy

The Service is not directed to children under 13 (or the equivalent minimum age in your jurisdiction, e.g., 16 in some EEA countries), and we do not knowingly collect personal information from children under that age. If we learn that we have collected such information, we will delete it promptly. Parents or guardians who believe their child has provided us with personal information may contact us at support@dubsports.io.

11. Third-Party Links

The Service may contain links to third-party websites or streaming platforms. This Privacy Policy does not apply to those third parties, and we encourage you to review their privacy policies before providing any information to them.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Effective Date" above. Continued use of the Service after changes take effect constitutes acceptance of the revised policy.

13. Contact Us

Questions about this Privacy Policy or your information can be directed to support@dubsports.io.