Legal

Privacy Policy

This policy explains what information Slateline collects, why, and the control you have over it. The short version: we collect what we need to run the research product and bill for it, we use trusted processors to do that, and we do not sell your personal data.

Last updated: August 13, 2026

1Who we are

Slateline (“we,” “us,” “our”) is a projection first player prop research product operated by a California sole proprietorship doing business as “Slateline”. We are the controller of the personal information described in this policy. You can reach us at Slateline, 9250 Reseda Blvd, Unit 10015, Northridge, CA 91324, or support@slateline.co. This policy covers our website and applications (the “Service”) and is effective as of the “last updated” date above. It should be read with our Terms of Service.

2Information we collect

  • Account identity. When you register, we collect your email address and name. If you sign in with a supported provider (Google today, Apple if we enable it), we receive basic profile information from that provider, chiefly your email and name, and never your password. Provider metadata may also reach our authentication platform as part of the sign in exchange.
  • Content you create. The research you build in the product, meaning watchlists, alert rules and saved research slips, is stored with your account.
  • Subscription & billing data. If you subscribe on the web, Stripe collects your payment and billing details, card information and, where configured, a billing address, under its own privacy policy. Slateline itself stores your subscription status, plan, and provider identifiers. We do not collect or store your full card or payment instrument numbers. We also keep a record of your purchase consent (the plan, price, and disclosure you agreed to, and when).
  • Product usage. We collect limited, event level usage data (for example, which pages and features you use) to understand and improve the product, validated against a fixed internal event contract. We use a first party random browser identifier stored in local storage to connect a limited sequence of these events. When you are signed in, events may also be associated with your account. We do not use this identifier for third party advertising. See sections 5 and 6.
  • Email preferences & consent. If you opt in to marketing email (a checkbox that is never checked for you) or subscribe to our newsletter, we keep an auditable record of what you consented to and when, your topic preferences, and delivery metadata (sent, bounced, complaint, unsubscribe). Newsletter signups require confirming your address before any marketing or newsletter email is sent (the confirmation message itself is the one email sent unconfirmed).
  • Technical & log data. Our hosting and infrastructure providers automatically log information such as IP address, device/browser type, and timestamps for security and reliability.

We do not ask for or want financial account credentials, government IDs, or other sensitive personal information, and you should never send them to us.

3How we use your information

  • to create and secure your account and authenticate your sign in,
  • to provide the research features, including your watchlists, alerts, and saved slips,
  • to process subscriptions, billing, and renewals,
  • to understand product usage and improve the Service,
  • to communicate with you about your account, security, and material changes,
  • with your separate consent, to send marketing email (product updates, a weekly digest, getting started notes). Every marketing email includes an unsubscribe link, preferences are set by topic, and opting out never affects account or billing messages, and
  • to comply with legal obligations and enforce our terms.

4How we share information (subprocessors)

We share information only with the service providers that help us operate the Service, and only as needed for them to perform their function. We do not sell your personal data, and we do not share it for behavioral advertising across contexts.

ProviderPurpose
SupabaseAuthentication and database (stores your account, name, email, and content)
VercelWebsite hosting and content delivery (request/security logs)
StripeWeb subscription payments (Stripe collects payment and billing details under its own policy)
GitHub ActionsScheduled operational compute, meaning data ingestion and the email delivery worker (can process recipient email addresses)
GoogleOptional single sign in (basic profile: email and name)
ResendEmail delivery for account and billing messages and, with your consent, marketing email (address and delivery metadata)
RevenueCat + Apple / Google app storesMobile in app subscription purchases, which apply only if and when our mobile app launches (not live today, and Apple sign in likewise only if enabled)

We do not currently use a third party product analytics vendor. Usage data is processed within our own infrastructure. If we adopt one, we will update this policy and add it to the list above. We may also disclose information if required by law or to protect the rights, safety, and security of our users and the Service.

5Cookies, local storage & signals

We use cookies and similar browser storage that are necessary to run the Service, chiefly to keep you signed in and to remember your preferences. We also store a first party random identifier (“prop-signal-anon-id”) in local storage to connect a limited sequence of product events, such as page views and research feature interactions, so we can understand how the product is used. It is not used for third party advertising. We do not use advertising or cross site tracking cookies.

We do not sell personal information, share it for behavioral advertising across contexts, or use third party advertising networks that collect your activity over time across unrelated services. Because we do not engage in those practices, browser Do Not Track and Global Privacy Control signals do not change how the Service operates. If our practices change or applicable law requires a different response, we will honor legally required opt out signals and update this policy before the change.

6Data retention

We keep your information for as long as your account is active and as needed to provide the Service. When you delete your account we delete your personal data or strip its identifiers within a reasonable period, including disassociating product usage events from your account and browser identifier, except where a concrete legal, tax, accounting, or security obligation requires us to retain a specific record for a defined period. Product usage events are retained for at most 400 days and then deleted on a scheduled basis. One deliberate exception: if you unsubscribed from marketing or a provider suppressed your address (a bounce or complaint), we keep a minimal record of that address so we can never accidentally email you again.

7Your rights & choices

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can review and correct your account information inside the product from your Account page, and you can exercise any of these rights by emailing support@slateline.co. We will verify the request against your account email, respond as required by applicable law, and never discriminate against you for exercising a right.

Deleting your account. You can delete your account and its data from Account → Delete account in the product, or by emailing support@slateline.co from your account email. Deletion is permanent and covers the data described in section 6.

8Security

We use technical and organizational measures to protect your data, including encryption in transit, row level access controls on our database, and scoped access for our systems. No method of transmission or storage is perfectly secure, but we work to protect your information and to notify you and regulators of incidents where required.

9Children

You must be at least 18 years old and meet any higher minimum age required to use this type of service where you live. The Service is not directed to children, and we do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact us and we will delete it.

10International users

We operate in the United States and use providers that may process data there. If you access the Service from outside the United States, you understand your information may be transferred to and processed in the United States, where data protection laws may differ from those in your location.

11Changes to this policy

We may update this policy from time to time. We will update the “last updated” date, and for material changes we will give advance notice, by email to the address on your account or by prominent notice in the Service, before the change takes effect. Changes are not retroactive.

12Contact

Questions or requests about your privacy? Email us at support@slateline.co or write to Slateline, 9250 Reseda Blvd, Unit 10015, Northridge, CA 91324. The Service is operated by a California sole proprietorship doing business as “Slateline”.

Slateline is research and analysis only, not a sportsbook. Read our Responsible Gaming & Compliance policy and our Terms of Service.