Privacy Policy

When you use the site, we collect:

• Account info from Google sign-in: your name, email address, and profile image.
• Profile details you set: your username, optional country flag, odds-format preference, and email-notification preference.
• Gameplay data: your picks, results, records, streaks, and related timestamps.
• Email records: which competition emails we sent you and when, so we never send the same one twice.
• Technical data: basic log and device information (such as IP address and browser) collected automatically by our hosting and error-monitoring providers.
• Prize information, if you win: the shipping address, identity and eligibility confirmation, and any tax form we need in order to award a prize.

We do not collect payment information, because no money moves through the site. We do not knowingly collect sensitive personal information, and we ask you not to send us any.

We collect and use personal information with your knowledge and consent, for purposes a reasonable person would consider appropriate in the circumstances. Specifically:

• to run your account, picks, and the leaderboards;
• to show public profiles (see “What's public” below);
• to send competition emails you can opt out of at any time;
• to contact prize winners, verify eligibility, and deliver prizes;
• to keep the site secure, debug errors, and prevent fraud and abuse;
• to meet legal and tax obligations.

You provide consent by creating an account and using the site, and you can withdraw it at any time by turning off emails or deleting your account — though we may need to keep some information to meet a legal obligation, and withdrawing consent entirely means we can no longer operate your account. We do not use your information for automated decision-making that produces legal effects, and we do not sell it or share it for cross-context behavioural advertising.

Your username, country flag, records, streaks, badges, and settled pick history are visible on leaderboards and your public profile. To prevent copying, your pending picks are hidden from other players until they settle. Your email address, legal name, and any address you give us for a prize are never shown publicly.

If you win, we may publish your username, province or state, and results as described in the Official Contest Rules.

We use trusted providers to run the site. They process data only on our instructions and only to provide their service to us:

• Google — authentication (sign-in).
• Vercel — website hosting and logs (United States).
• Neon — database hosting (United States).
• Resend — sending competition emails (United States).
• Sentry — error monitoring and diagnostics (United States).
• The Odds API — sports odds data; we send it no personal information.

Transfers outside Canada. Because these providers are located in the United States, your personal information is stored and processed there. We use contractual measures to require a comparable level of protection, but while information is in another country it is subject to that country's laws and may be accessible to its courts and law-enforcement or national-security authorities. By using the site you acknowledge this transfer. If you would like more information about our practices for cross-border handling, contact our privacy officer below.

We use a small number of strictly necessary cookies to keep you signed in, maintain your session, and operate the site securely. We don't use advertising cookies, cross-site tracking, or third-party analytics profiles, so there is nothing here to opt out of. Blocking essential cookies will prevent you from signing in.

We send only competition-related email — bench confirmations, weekly pick reminders, season-start notices, and prize correspondence. Every such message identifies us, includes our postal address, and carries a working unsubscribe link that stays valid for at least 60 days, as Canada's Anti-Spam Legislation (CASL) requires.

You can turn competition emails on or off at any time from your profile, or use the unsubscribe link in any message. We will still send you essential account and prize messages — for example, telling you that you've won — because those aren't promotional.

We use safeguards appropriate to the sensitivity of the information: encrypted connections (HTTPS) across the site, encrypted data at rest with our database provider, authentication handled by Google rather than by passwords we store, access limited to those who need it to operate the site, and rate limiting on actions that change data.

No method of transmission or storage is completely secure, so we can't guarantee absolute security — but we work to protect your information and to review our practices as the site grows.

If a breach of security safeguards creates a real risk of significant harm to you, we will report it to the Office of the Privacy Commissioner of Canada and notify you as soon as feasible, as PIPEDA requires, and we will keep records of breaches as required by law. We will also comply with any applicable U.S. state breach-notification law.

We keep your account and gameplay data while your account is active. When you delete your account, we delete or anonymize your personal information within 30 days, except that:

• leaderboard and competition results may be retained in anonymized or username-only form so past seasons stay intact;
• prize and tax records are kept for seven (7) years where tax law requires it;
• security and error logs roll off automatically, generally within 90 days;
• we may retain the minimum needed to enforce our terms, resolve a dispute, or prevent a disqualified player from re-registering.

• Turn competition emails on or off from your profile at any time.
• Change your username, country, and preferences from your profile.
• Request access to the personal information we hold about you, ask how we've used it and who we've shared it with, and ask us to correct anything inaccurate.
• Ask us to delete your account and personal information.
• Withdraw your consent, subject to legal and contractual limits.

We respond to requests within 30 days, free of charge in ordinary cases, and we may need to verify your identity first. We won't discriminate against you for exercising these rights.

If you're in Canada:if you're not satisfied with our response, you have the right to complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca, 1-800-282-1376).

If you're in the United States: depending on your state, you may have rights to know, access, correct, delete, or obtain a portable copy of your personal information, and to appeal a refusal. We don't sell personal information or share it for targeted advertising, and we don't process it for profiling with legal effects. Contact us using the details below to exercise these rights.

The site is for adults only — you must be at least 18, or the age of majority where you live if that's higher. We don't knowingly collect personal information from anyone under that age. If you believe a minor has given us information, contact us and we'll delete it and close the account.

Beat the Book has designated a privacy officer who is accountable for our compliance with this policy and with PIPEDA. To make a privacy request, ask a question, or make a complaint:

• Email: support@beathebook.com (subject line: “Privacy”)
• Mail: Privacy Officer, Beat the Book, [PO Box address — to be added before launch], Ontario, Canada

We'll acknowledge your message and investigate any complaint. If we got something wrong, we'll correct it and update our practices.

We'll post any changes to this policy on this page with an updated date. If a change materially affects how we handle information we already hold, we'll tell you by email or a notice on the site before it takes effect.