Odds UniOdds Uni

Privacy Policy

Last updated 4 September 2026 · Effective 4 September 2026

This Privacy Policy explains how Odds Uni ("Odds Uni", "we", "our", or "us") collects, uses, shares, and protects information when you visit oddsuni.com, odduni.com, or any related site, mobile experience, or product surface (collectively, the "Service"). It covers both visitors who browse without an account and registered subscribers.

Odds Uni is a sports intelligence and prediction platform. We use statistical modelling, AI analysis and historical data to publish schedules, predictions, probabilities, statistics and performance records, alongside community and Fantasy League features. We display market prices from licensed operators as reference data. We do notaccept wagers, hold customer funds, settle wagers, or operate a sportsbook, and there is no way to place a bet through this service. If you choose to act on our analysis elsewhere, that happens with a third party of your choosing, under that operator's terms and privacy policy.

1. Who this policy applies to

This policy applies to the Service. It does not apply to third-party sites we link to (sportsbooks, ESPN, news outlets, etc.) - those operate under their own privacy terms. The Service is intended for users who are at least 18 years old. We do not accept wagers, so no gambling age applies to using the Service; the age limit is an account requirement. We do not knowingly collect personal information from anyone under it.

2. Information we collect

2.1 Information you provide directly

  • Account information. If you create an account (via our auth provider, Clerk), we receive your email address, a hashed password (or your OAuth identifier for Google/Apple sign-in), an optional username and display name, and any profile details you choose to add (avatar, short bio).
  • Subscription & payment information. If you subscribe to a paid tier, payment is processed by Stripe. Stripe receives your card details and billing address directly - we never see or store full card numbers. We retain a Stripe customer ID, the plan you're on, your subscription status, and billing-event metadata (renewals, refunds, chargebacks).
  • Content you submit. Saved slips you bookmark, accumulators you post to the community feed, comments, reactions, and your watchlist of teams. You choose whether each saved slip or post is public, followers-only, or private.
  • Communications. If you email us or use a contact form, we keep the message and our reply for as long as needed to handle the request.

2.2 Information collected automatically

  • Server logs. Standard request metadata - IP address, user-agent string, request path, timestamp, response status, referrer. Used for abuse detection, performance monitoring, and security. Retained for up to 30 days unless required longer for an incident or legal obligation.
  • Device & usage signals. Coarse browser/device class (mobile vs desktop), screen size category, and which pages you view. We do not fingerprint you. No third-party advertising tracker runs on the Service unless you have specifically allowed Google ads - see section 5.
  • Local storage.Your browser's local storage holds your working selection slip, your watchlist, your odds-format preference (decimal vs American), and UI state (drawer open/closed, theme). This data lives on your device and is never sent to our servers unless you explicitly take an action that requires it (e.g. saving a slip to your account, sharing a slip via URL).
  • Cookies.We use a small number of strictly-necessary first-party cookies for authentication and session management when you're signed in, a first-party analytics identifier, and - once you answer the ad prompt - a first-party cookie recording that answer. We set no cross-site tracking cookies of our own. If you allow Google ads, Google sets its own cookies; if you don't, it sets none, because its script never loads. See section 5.

2.3 Information from third parties

  • Authentication providers. If you sign in with Google or Apple via Clerk, the provider sends us your email and (for Google) the public profile fields you authorise. We never receive your password.
  • Sports data. Game schedules, scores, standings, box scores, and team metadata come from public ESPN endpoints. Odds come from The Odds API. These feeds describe games and lines - they are not information about you.

3. How we use information

  • To operate, secure, and improve the Service.
  • To generate the picks, analyses, accumulators, and risk warnings the Service provides.
  • To personalise what you see (e.g. surfacing teams in your watchlist, showing slips you've saved, applying your odds-format preference).
  • To process and bill subscriptions, send transactional emails (receipts, important account notices), and provide customer support.
  • To detect, investigate, and prevent fraud, abuse, automated scraping, and security threats.
  • To comply with legal and regulatory obligations.

What we do not do:we do not sell your personal information, and we do not use your data to train third-party AI models. Our own sponsors receive no information about you: they get a click-through, not a profile, not your email, not your betting history. The one case where an advertising company receives anything is Google, and only if you have allowed Google ads - section 5 sets out exactly what that means and how to change your mind. When we send a query to Anthropic's Claude API to synthesise pick analysis, the prompt contains only sports context (team names, form, odds, model confidence) - no account-identifying information.

4. Sharing & service providers

We share information only with vendors who help us run the Service, under contracts that limit how they may use it. Our current core vendors:

  • Vercel - application hosting, edge network, log storage. Receives request metadata for the pages you load.
  • Neon (Postgres) - primary database for accounts, saved slips, posts, and our prediction-lock history. Hosted in AWS us-east-1.
  • Upstash (Redis) - short-lived caching for odds and rate-limit state. Does not store account-level data.
  • Clerk - authentication and session management. Stores hashed credentials, device sessions, and password-reset tokens on our behalf.
  • Stripe - payment processing. Stripe is the controller for full card data; we receive only tokens and high-level subscription status.
  • Anthropic - Claude API for narrative synthesis. Receives game context only, never your account info or behaviour history.
  • The Odds API and ESPN - outbound only; we send a sport key and (for ESPN) a public team or event ID. Neither receives any information about you.
  • Google (AdSense) - only if you have allowed Google ads. Its script then runs in your browser and Google receives what any embedded ad script receives: your IP address, user-agent, the page the ad is on, and its own cookies. If you have not allowed it, the script is never loaded and Google receives nothing. See section 5.

We may also disclose information when required by valid legal process, to protect the rights, property, or safety of our users or the public, or in connection with a merger, acquisition, financing, or sale of assets - in which case we'll notify you in advance and your rights under this policy will continue.

5. Advertising

The Service carries advertising. There are two kinds, and the difference between them matters for your privacy, so we set both out plainly rather than under one word.

Our own sponsors. These are advertisers we sell to directly. The ad is a row in our own database, rendered by our own code, on our own domain. No third-party script runs, no third-party cookie is set, and nothing about you is sent anywhere. We count that the ad was on screen and whether it was clicked, against the same first-party analytics identifier described in section 2.2. The advertiser is told how many people saw and clicked their ad. They are not told who you are, and they receive no list, profile, or export of our users. These ads do not depend on your answer to the prompt below, because there is nothing in them to consent to.

Google ads (AdSense). We may also fill an ad space that none of our own sponsors have taken with an ad served by Google. This one does load a third-party script, and Google then receives your IP address, user-agent, the page you are on, and sets its own cookies, under Google's privacy policy. We do not turn this on for you unless you say yes. Until you do, the script is never loaded at all - not loaded-but-idle, not loaded-without-cookies. Not loaded.

You can change your answer at any time, here:

Ad preferences

Checking…

Saying no costs you nothing. The Service works identically either way; you simply see only our own sponsors. If you would rather see no ads at all, an ad-free pass is available in the UniCoin store, and holding one removes every ad on every page.

Watch & Earn.Separately from the ads above, you can choose to watch a video in exchange for UniCoins. This is always opt-in - nothing plays unless you press the button. To pay you for it and to bill the advertiser honestly, we record: that a session was issued, that the video started and finished, periodic playback progress while it plays, and the reward that resulted. We also store a one-way hash of your IP address and browser string alongside the session, used for a single purpose - noticing when many accounts are drawing rewards from one device - and never stored in raw form. Per-view records are deleted after 180 days; the high-frequency playback records after 14. The reward itself lives in your UniCoin ledger, which is kept as long as your account is, because it is what explains your balance. A video from a paying sponsor is labelled Sponsored, and no reward ever depends on clicking an advertiser's link.

We keep a record of the answer you gave and when you gave it, so we can demonstrate it was given - a legal requirement we cannot meet with a cookie on your device alone. If we materially change what we are asking for, your previous answer stops counting and we ask again rather than treating consent to the old wording as consent to the new.

6. Where data is processed

Our infrastructure is located in the United States. If you are in the EU, UK, or another region with cross-border transfer rules, by using the Service you consent to your information being processed in the United States and other jurisdictions where our service providers operate. We rely on standard contractual clauses or equivalent safeguards where required.

7. Data retention

  • Account data: retained while your account is active. If you delete your account, we remove personal identifiers within 30 days. Anonymised aggregates (e.g. that some user saved a slip) may persist.
  • Payment records: retained for the period required by tax, accounting, and consumer-protection law (typically 7 years) - managed by Stripe.
  • Saved slips and posts: until you delete them or close your account.
  • Server logs: up to 30 days, except where retained for an active security investigation.
  • Ad delivery records:the per-view rows behind our sponsors' reporting are deleted after 90 days by a scheduled job. The daily totals that survive are counts per campaign per day and contain nothing about any person.
  • Your answer to the ad prompt: kept while it stands, plus a dated record of each answer you have given, because consent has to be demonstrable. This is a status and a timestamp, not a behavioural record.
  • Locked daily slates and graded outcomes: retained indefinitely as part of our public transparency record. These records are about games, not about you, and contain no user-identifying information.

8. Your rights and choices

You can, at any time:

  • Access the personal information associated with your account by opening account settings or by emailing us.
  • Correct inaccurate information through your profile settings or by contacting us.
  • Delete your account and associated personal information by using the delete-account control in settings or by emailing us.
  • Export a copy of your account data in a machine-readable format on request.
  • Opt out of non-essential email by using the unsubscribe link in any non-transactional message.
  • Clear local storageat any time using your browser's tools.

8.1 EU/UK residents (GDPR / UK GDPR)

Our legal bases for processing your information are: (a) performance of a contract when you use account features or a paid subscription; (b) legitimate interests in operating, securing, and improving the Service; and (c) consent for any optional processing we explicitly request. You have the right to access, correct, delete, restrict, or port your information, and to object to processing based on legitimate interest. You also have the right to lodge a complaint with your local supervisory authority.

8.2 California residents (CCPA / CPRA)

California residents have the right to know what categories of personal information we've collected, the sources, the business purposes, and the categories of third parties we share with - all of which are listed in this policy. You also have the right to request deletion of your personal information and the right not to be discriminated against for exercising any of these rights. We do not sell personal information. We do not "share" it for cross-context behavioural advertising as defined under the CPRA unless you have opted in by allowing Google ads, and you can withdraw that at any time using the control in section 5 - which stops the sharing outright, because Google's script then never loads.

8.3 How to exercise these rights

Email privacy@oddsuni.comfrom the address associated with your account, or use the controls in account settings. We'll respond within the timeframes required by applicable law (typically 30-45 days). We may need to verify your identity before fulfilling certain requests.

9. Security

We take reasonable technical and organisational measures to protect your information - TLS in transit, encryption at rest for our database, scoped access controls, password hashing through Clerk, and tokenised payment handling through Stripe. No method of transmission or storage is 100% secure. If we discover a security breach affecting your data, we will notify affected users and authorities as required by law.

10. Children's privacy

The Service is intended for users 18 years of age or older (or the local minimum legal age for accessing sports betting content where higher). We do not knowingly collect personal information from anyone below that age. If you believe a minor has provided us with personal information, please contact us and we will promptly delete it.

11. Responsible gambling

Sports betting carries financial risk. Odds Uni provides information and analysis, not betting advice or guarantees of outcome. If you or someone you know is struggling with gambling: in the US, call or text the National Council on Problem Gambling helpline at 1-800-GAMBLER. In the UK, contact GamCare at 0808 8020 133. We support self-exclusion and gambling-help signals and do not target users we have reason to believe are at risk.

12. Not a sportsbook

Odds Uni does not accept wagers, hold deposits, or settle bets. We compare and analyse the prices that licensed sportsbooks have published. Any actual transaction you make happens with the sportsbook of your choosing, under their own terms, privacy policy, and regulatory framework. We are not responsible for that relationship.

13. Changes to this policy

We may revise this policy from time to time. The "Last updated" date at the top tells you when. Material changes will be announced through the Service or by email to account holders. Your continued use of the Service after changes take effect means you accept the revised policy.

14. Contact

Questions or requests about this policy or your information: email privacy@oddsuni.com. For general support: support@oddsuni.com.