This policy explains what we collect, why, who we share it with, and the choices you have. We keep it short because we collect little: StatWarrior has no advertising trackers. We use optional Google Analytics 4 only after you opt in through cookie settings.
What we collect
| Category | Examples | Source |
|---|---|---|
| Account details | Name, email address, hashed password, account role, sign-up and last-login dates | You |
| Billing details | Subscription status, renewal date, Stripe customer ID, last four digits and brand of your card, billing country/postcode for tax. We never receive or store your full card number. | You, via Stripe |
| Product data | Saved strategies, custom projections, uploaded salary or projection files, saved lineups and simulation settings | You |
| Technical data | IP address, browser type, device type, pages requested and timestamps, kept in server logs for security and reliability | Your browser |
| Optional analytics | Pages visited, visit/session identifiers, browser and device information, and interactions, collected by Google Analytics only after you opt in. We do not send account names, email addresses, uploaded lineups or payment details to Analytics. | Your browser, with your consent |
| Referral code | A partner code if you arrived through a partner link | The link you clicked |
| Support messages | Emails and contact-form messages you send us | You |
We do not collect precise location, biometric data, government IDs, or sensitive categories of data, and we do not buy data about you from data brokers.
How we use it
- To provide the Service: run your account, your subscription and the features you use.
- To process payments, prevent fraud and keep accounts secure.
- To send service messages: receipts, renewal and price-change notices, cancellation confirmations, security alerts and replies to your requests.
- To improve the platform using aggregated usage information that does not identify you.
- To comply with law, including tax and consumer-protection rules.
We send marketing email only if you opt in, and every marketing email has a one-click unsubscribe. We never use your data for automated decisions with legal effects.
Legal bases (EEA, UK and Switzerland)
We process account, billing and product data to perform our contract with you; technical and security data for our legitimate interests in keeping the Service secure and reliable; tax and accounting records to comply with legal obligations; and optional analytics and marketing only with your consent.
Sharing
We share personal information only with:
- Stripe (payments, tax calculation, fraud prevention). Stripe is an independent controller for payment data; see Stripe's privacy policy.
- Google Analytics, only after you enable Analytics, to measure site usage. Advertising features are disabled. See how Google uses information from sites that use its services.
- Hosting and email providers that store our data and deliver our messages, under contracts that limit them to acting on our instructions.
- Partners, for referral attribution only: a partner learns that a sale was credited to their code, never who you are.
- Authorities, when the law requires it or to protect rights, safety or property.
- A buyer or successor in a merger, acquisition or sale of assets, under this policy.
Sports data vendors (for example, statistics and odds feeds) receive requests from our servers, never from your browser, and get no information about you.
We do not sell personal information and we do not share it for cross-context behavioural advertising, as those terms are defined in the California Consumer Privacy Act and similar laws, and we have not done so in the preceding 12 months.
Cookies and local storage
We use essential cookies and browser storage for the sign-in session, display mode, saved settings and cookie choices. Optional Google Analytics cookies load only after you enable Analytics; you can turn it off at any time. Global Privacy Control keeps optional Analytics off. Details are in the Cookie Policy, and you can review your choices from the cookie settings panel at any time.
Retention
- Account and product data: while your account is open, and for 30 days after you delete it so you can change your mind.
- Billing records: 7 years, as tax and accounting law requires.
- Server logs: 90 days.
- Support messages: 2 years.
Security
Data is encrypted in transit (TLS) and at rest by our hosting provider. Passwords are stored as salted hashes, never in plain text. Access to production systems is limited to the people who need it and protected by multi-factor authentication. If a breach affects your data we will notify you and the relevant authorities as the law requires.
International transfers
We are based in the United States and process data there. If you use the Service from the EEA, UK or Switzerland, your data is transferred to the U.S. under the European Commission's Standard Contractual Clauses (and the UK Addendum) with our providers, or under the EU-U.S. Data Privacy Framework where a provider is certified.
Your rights and choices
Depending on where you live, you may have the right to:
- Access the personal information we hold about you and get a copy in a portable format.
- Correct inaccurate information. You can edit your name and email in your account.
- Delete your account and data. Email us from your account address and we will delete everything except records we must keep by law.
- Object to or restrict certain processing, and withdraw consent for marketing at any time.
- Opt out of sale or sharing of personal information: we don't sell or share it, so there is nothing to opt out of, and we honor Global Privacy Control signals.
- Not be discriminated against for exercising these rights.
- Complain to your data-protection authority (EEA/UK) or your state attorney general (U.S.).
To exercise a right, email support@statwarrior.com from your account address, or use the contact form. We verify requests by matching your account email, respond within 30 days (45 days for California residents, extendable once), and you may use an authorized agent where the law allows.
California residents: the categories we collect are listed under "What we collect"; we collect them from you, your browser and Stripe; we use them for the business purposes under "How we use it"; and we disclose them to the service providers under "Sharing". We do not sell or share personal information, including of consumers under 16. Nevada residents: we do not sell covered information. Virginia, Colorado, Connecticut, Utah, Texas, Oregon and other state residents: the rights above apply to you; you may appeal a decision by replying to our response.
Children
StatWarrior is for adults. We do not knowingly collect personal information from anyone under 18 (or the higher age required where they live). If you believe a minor has an account, email us and we will delete it.
How we provide privacy information
New customers can review this Privacy Policy and our Cookie Policy before creating an account. The signup page explains our essential uses of account information and links to these policies. Creating an account does not enable optional Analytics or subscribe you to marketing email. Analytics requires a separate choice in Cookie settings; you can use the service without it and change your choice at any time.
We keep these policies available on the website so you can review them whenever you need. Essential account and privacy notices are separate from marketing messages. For material changes affecting existing account holders, we follow the advance email and website notice process below; publishing a policy does not replace any notice or consent we are required to provide.
Changes and contact
If we make material changes we will email account holders and update the effective date above at least 14 days before the change takes effect. Questions or requests: support@statwarrior.com, or write to Slatenza, PO Box 26202, Rochester, NY 14626-9998.