Privacy

The short version: reading the site collects nothing about you. We keep one number a day for how many times each part of the site was used — the board opened, a side added, a ticket built — with no record of who. Signing in gives us your email, so your tickets and follows can reach your other devices. Buying a plan gives Stripe your email and card. There is no password, so there is nowhere a password could leak from.

What stays in your browser

The props you follow, the ticket you build, the book you play on, the record of legs whose games have finished, and the fact that you confirmed you are 21 are stored in your browser's local storage. Signed out, they never leave your device and we cannot see them; clearing your browser data clears them. Your record settles itself by downloading the same public game logs everyone else gets and matching them on your device, so which props you picked is never sent to us.

What we hold if you sign in

Signing in is free and needs only an email. We send it a one-time link and code; until one is used or 15 minutes pass, a small key-value store holds a hash of it, plus a count of recent requests per email and per network address so the form cannot be used to flood an inbox. The first time you sign in we make your account: a random id, your email, and the date. We set a cookie with that id, signed so it cannot be forged, and a second cookie that records only that you are signed in, so the header can show your board. Your email is used to sign you in and, if you turn them on with a plan, for the morning alerts. News and offers by email is a separate switch in Settings: it is off unless you turn it on, we keep when you last chose, and turning it off stops it. The weekly recap is another: only when you turn it on, it reads your synced records once a week, only to write your email, and every one has a link that turns it off in one click.

What we hold if you buy a plan

Checkout runs on Stripe. Stripe holds your email address and payment details under its own privacy policy. When you return from checkout we note your Stripe customer id on your account and set a cookie containing it, signed so it cannot be forged. That is how the site knows your plan; whether it is still live is asked of Stripe on every visit. Nothing is written to your Stripe record. Cancelling, changing a card and receipts all happen in Stripe's own portal.

One more cookie holds the address of the last page you were reading on this site, for a day, so signing in, starting the free week or paying can bring you back to it. It is a page address on this site and nothing else, and it is never sent anywhere.

What syncing keeps, when you are signed in

Signed in, the props you follow, the ticket you are building, the tickets you save, your settings and which apps you use are kept against your account so they are there on your phone as well as your laptop. That is the same whether or not you have a plan. It is stored against your account id, not your name, and it is only ever sent when you are signed in. It is not analytics: it is not shared, not sold, and not used for anything but showing you your own board. Sign out and the site goes back to this browser alone. Ask us to delete your account and it goes with it.

What we do not do

• No tracking scripts and no third-party analytics. We count uses of the board, the optimizer, sign-in, checkout, and saving, settling and reviewing tickets as one total per day; a count carries no identifier, address, page or referrer, and cannot be turned back into a person. A count may be split by one label from a fixed list — which sport, over or under, which filter was changed, which feature asked for a plan, whether a ticket won, lost or was void — never what you typed, which player or prop, or anything about you. A count from your browser also says whether the screen was phone-sized or larger, read from the window's width, never from your device or browser. That a visit has reached a second prop page is remembered only in your browser tab, so it is counted once; which of your tickets have already been counted as settled is remembered only on your device, beside the tickets themselves. If your browser sends Do Not Track or Global Privacy Control, it is left out of even that. Our host, Vercel, keeps standard server logs for a short time.
• No advertising, and no data sold or shared with anyone.
• No account is created by reading the site, and no email is collected unless you sign in or buy a plan.

Deleting your data

Email andy@finetimeconsulting.com from the address you sign in with and we delete your account and everything kept against it, and — if you have a plan — your Stripe customer record, cancelling the plan on it. Anything in your browser is yours to clear.

Who this is

FineTime Consulting. Questions to the same address. More about how the site works is on the about page.