Privacy Policy

Effective Date: March 5, 2026 · Last Updated: March 5, 2026

1. Information We Collect

1.1 Information You Provide

• Account Information: Email address, phone number, display name, and password (stored as a salted hash -- we never store plaintext passwords)
• Authentication Data: Two-factor authentication secrets (encrypted at rest)

1.2 Information Collected Automatically

• Usage Data: Pages visited, features used, timestamps of access
• Device Information: Browser type, operating system, screen resolution
• Network Information: IP address, approximate geographic location (country/region level only)
• Session Data: Login times, session duration, authentication events

1.3 Information We Do NOT Collect

• We do not collect financial or banking information
• We do not collect information about your betting activity, wagers, or sportsbook accounts
• We do not collect social security numbers, government IDs, or sensitive personal identifiers

2. How We Use Your Information

We use collected information to:

• Provide, maintain, and improve the Service
• Authenticate your identity and secure your account
• Communicate with you about your account or the Service
• Monitor for and prevent fraud, abuse, and security threats
• Enforce our Terms of Use
• Comply with legal obligations

3. How We Protect Your Information

We implement industry-standard security measures including:

• Encryption in transit: All data transmitted via HTTPS/TLS
• Password hashing: Passwords are salted and hashed using bcrypt -- they cannot be reversed
• CSRF protection: All forms are protected against cross-site request forgery
• Rate limiting: Brute-force login attempts are blocked
• Session security: HTTP-only, secure cookies with automatic expiration
• Two-factor authentication: Optional TOTP-based 2FA for additional account security

While we take reasonable measures to protect your data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

4. Data Sharing & Disclosure

4.1 We Do Not Sell Your Data

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

4.2 Limited Sharing

We may share your information only in these circumstances:

• Service Providers: With trusted third-party services that help us operate the Service (e.g., hosting providers, database services), bound by confidentiality obligations
• Legal Compliance: When required by law, subpoena, court order, or governmental regulation
• Safety: To protect the rights, property, or safety of BTLR, our users, or the public
• Business Transfer: In connection with a merger, acquisition, or sale of assets, with notice to affected users

4.3 Infrastructure Providers

The Service is hosted on cloud infrastructure providers. Your data may be stored and processed in the United States. By using the Service, you consent to this transfer and processing.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. If you request account deletion, we will delete your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., fraud prevention, legal compliance).

6. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your account and personal data
• Portability: Request your data in a portable format
• Objection: Object to certain processing of your data

To exercise any of these rights, contact us at privacy@btlr.app.

7. Cookies & Similar Technologies

We use essential cookies required for the Service to function, including:

• Session cookies: To maintain your login state
• CSRF tokens: To prevent cross-site request forgery attacks

We do not use third-party advertising cookies or tracking pixels. We do not serve ads on the Service.

8. Children's Privacy

The Service is not intended for anyone under the age of 21. We do not knowingly collect personal information from anyone under 21. If we learn that we have collected personal information from someone under 21, we will delete that information promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last Updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us:

• Privacy Inquiries: privacy@btlr.app
• General Support: support@btlr.app