Privacy Policy
Effective date: September 11, 2026 Last updated: September 11, 2026
This Privacy Policy explains how Gridiron Edge LLC ("we," "us") collects, uses, discloses, and protects personal information when you use Gridiron Edge at https://www.gridironedgesports.com (the "Service"). By using the Service you agree to this Policy.
1. Information We Collect
Information you provide:
- Account data: name or username, email address, password (stored hashed).
- Payment data: processed by our payment processor Stripe. We do not store full card numbers; we receive limited billing details and a token/transaction ID.
- Communications: messages you send us (support, email) and any content or prompts you submit to interactive/AI features.
- Preferences: subscription tier, favorite teams/players, and settings.
Information collected automatically:
- Usage & device data: IP address, browser and device type, operating system, pages viewed, referring URLs, and interactions.
- Cookies and similar technologies: a strictly-necessary session cookie for authentication only. We do not use advertising or cross-site tracking cookies. See Section 4.
Information from third parties: aggregate, cookieless analytics (see Section 4) and, if you sign in via a third party, limited profile data from that provider.
We do not knowingly collect sensitive personal information as defined by applicable law; do not submit it through the Service.
CCPA/CPRA statutory categories collected (last 12 months)
Identifiers (email address, account ID); commercial information (subscription and purchase/refund history, referral status); and internet or network activity (IP address and technical/device signals used for security and referral-fraud prevention, plus cookieless analytics). We collect these for the business purposes in Section 2.
We do not collect precise geolocation, do not use advertising or cross-site tracking cookies, and do not sell or share personal information. Card details are handled by our payment processor, Stripe; we store only a payment-method fingerprint for fraud prevention, not full card numbers.
2. How We Use Information
We use personal information to: (a) provide, operate, and maintain the Service; (b) create and manage your account; (c) process subscriptions, billing, and renewals; (d) provide customer support; (e) personalize content and features; (f) analyze and improve the Service; (g) send transactional messages and, with your consent where required, marketing communications (you may opt out anytime); (h) detect, prevent, and address fraud, abuse, and security issues; and (i) comply with legal obligations and enforce our Terms. Each purpose is limited to what is reasonably necessary and proportionate.
3. How We Share Information
We do not sell your personal information for money. We share personal information only as follows:
- Service providers / processors who act on our behalf, such as: hosting/deployment (Vercel), payment processing (Stripe), analytics (Vercel Web Analytics — first-party, cookieless), and email delivery (Resend), each bound by contract to protect the data. Not applicable — Gridiron Edge does not offer a user-facing AI assistant and does not disclose your personal data to any third-party AI or large-language-model provider.
- Legal and safety: to comply with law, respond to lawful requests, or protect our rights, users, or the public.
- Business transfers: in connection with a merger, acquisition, financing, or sale of assets.
Confirmed: our analytics (Vercel Web Analytics) is cookieless, collects no persistent identifiers, and is not shared with or sold to third parties — it does not qualify as a "sale" or "sharing" under CCPA/CPRA. We run no advertising or cross-site tracking cookies of any kind. See Section 6.
4. Cookies, Analytics, and Global Privacy Control
We use one strictly-necessary cookie: a session cookie (via our authentication provider, Supabase) that keeps you signed in. We do not use advertising, cross-site tracking, or third-party analytics cookies.
Our analytics is Vercel Web Analytics, a first-party, cookieless service — it does not set cookies, use persistent identifiers, or track you across sites; it reports aggregate usage (e.g., page views) only. Because the only cookie we set is strictly necessary and analytics sets none, we do not operate a per-category cookie-consent banner (not required for strictly-necessary-only cookie use) — a brief, dismissible notice on first visit links to this Policy instead.
We recognize and honor the Global Privacy Control (GPC) browser signal: when GPC is detected, analytics does not load for that visit at all. This is a real, functional response, not only a policy statement — see the "Do Not Sell or Share" note in Section 6 for why GPC's usual purpose (opting out of a sale/share) doesn't otherwise apply here. Other than GPC, we do not currently respond to browser "Do Not Track" (DNT) signals.
5. Your Privacy Rights
Depending on where you live, you may have some or all of these rights:
- Access/Know the personal information we hold and how we use and disclose it.
- Delete your personal information.
- Correct inaccurate information.
- Opt out of the sale or sharing of your information and of targeted advertising.
- Limit the use of sensitive personal information.
- Portability — receive a copy of your data.
- Non-discrimination for exercising your rights.
- Appeal a denied request.
How to exercise: email us at support@gridironedgesports.com. We will verify your identity and respond within the timeframes required by law (generally 45 days under CCPA, 30 days under GDPR, extendable as permitted). You may use an authorized agent where allowed.
The Service is directed to users in the United States and is not intended for, or directed to, individuals located in the European Union or United Kingdom. If you are located outside the United States, please do not use the Service or provide personal information through it.
6. Do Not Sell or Share My Personal Information
We do not sell or share personal information as defined by CCPA/CPRA or similar laws, and have not done so in the past 12 months. We run no advertising or cross-site tracking cookies, and our analytics provider (Section 4) is cookieless and does not receive data usable to identify you across sites or services. Because we don't sell or share, there is no opt-out link to provide here. We still honor the Global Privacy Control (GPC) signal as described in Section 4. If our practices change, we will update this Policy and provide the required opt-out mechanism before any such sale or sharing begins.
Nevada residents: Under Nevada law (NRS 603A), Nevada consumers may submit a verified request directing us not to sell certain covered personal information collected about them. To do so, email danielpar0703@gmail.com.
7. Data Retention
We keep personal information only as long as necessary for the purposes described here, to comply with legal, tax, and accounting obligations, resolve disputes, and enforce agreements. Account data is retained while your account is active and for 24 months after your account is closed, unless a longer period is required by law or to resolve disputes and enforce our agreements; billing records are retained as required by law. We then delete or de-identify it.
8. Security
We use reasonable administrative, technical, and physical safeguards (including encryption in transit, hashed passwords, and access controls) designed to protect personal information. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. If a breach affects you, we will notify you as required by law.
9. Children's Privacy
The Service is not directed to and may not be used by anyone under 21. We do not knowingly collect personal information from children under 13 (COPPA). If you believe a child provided us information, contact danielpar0703@gmail.com and we will delete it.
10. Third-Party Links
The Service may link to third-party sites (e.g., sportsbooks, data providers). We are not responsible for their privacy practices; review their policies.
11. Changes to This Policy
We may update this Policy; the "Last updated" date shows the latest version, and we will provide additional notice where required. Continued use after changes indicates acceptance.
12. Contact Us
Gridiron Edge LLC — Attn: Privacy 476 Riverside Ave, Ste 4, Jacksonville, FL 32202 Email: danielpar0703@gmail.com