DATA PROTECTION & PRIVACY PROTOCOL

Privacy Policy

Last Updated: September 2026 • Compliant with GDPR & CCPA/CPRA Standards

Our Privacy Commitment

Sports Genius is built on the principle of transparent competitive sports intelligence. We will never sell your personal contact information to third-party data brokers. Sponsors receive strictly aggregated, privacy-preserving telemetry and never direct access to your personal information without explicit consent.

1Information We Collect

A. Information You Provide Directly

When you create an account, participate in prediction challenges, or claim rewards, we collect: your email address, display name, username, favorite sports, and date of birth (to verify 18+ eligibility). If you win a physical prize, we collect your shipping name, delivery address, and contact phone number solely for logistics fulfillment.

B. Performance & Game Data

We generate and store deterministic competitive records: prediction history, pick timestamps, Genius Rating (Elo) calculations, Genius DNA archetype scores, XP progression logs, and achievement badges.

C. Technical & Fraud Prevention Data

To prevent bot exploits and multi-accounting syndicates, our security layer collects IP addresses, browser user-agent tokens, and device identifiers.

2How We Use Your Information

To operate, calculate, and publish global competitive leaderboards and ratings.
To enforce automated lock times and score prediction outcomes fairly.
To dispatch verified physical prizes and merchandise with reputable carriers (UPS, FedEx, DHL).
To process commercial sponsorship reservations securely via Stripe.
To detect, prevent, and mitigate security threats, cheating, and fraudulent activity.

3Data Storage, Supabase Security & Stripe PCI-DSS

All database operations are governed by PostgreSQL Row Level Security (RLS) managed through Supabase. This cryptographically isolates user records, ensuring no player can view or alter private records of another user.

All payment transactions for sponsor properties are handled directly by Stripe under PCI-DSS Level 1 certification. Sports Genius never stores full credit card numbers on its servers.

4Your Privacy Rights (GDPR & CCPA/CPRA)

Depending on your location, you hold significant rights over your personal information:

Right to Access & Portability

Request a complete copy of your personal data and prediction records.

Right to Erasure ("Be Forgotten")

Request permanent deletion of your profile, account, and contact records.

To exercise your data privacy rights, contact our Data Protection Officer at privacy@sportsgenius.app.