Privacy Policy

This policy explains what BigGameProps.com, run by the operator of BigGameProps.com, collects about you, why, and what you can do about it. We keep it short because we collect little.

What we collect

• Account details: your email address, username, display name, and a salted hash of your password (we never store the password itself). An avatar, if you add one.
• Avatar: if you upload a picture, we resize it to a small square WebP, discard the original and remove any embedded location or camera data, and store the result with your account. It is visible to other players unless you hide your profile. You can instead choose a default sports avatar, or remove your picture at any time.
• Age confirmation: that you confirmed you are 18 or older.
• Game activity: contests you join or host, bets, stakes, results, bankroll history and rankings. Other players see your display name and results on leaderboards. A prop's crowd split shows only counts, totals and percentages, not who bet what, except where a private contest's host turns on names.
• Sign-in sessions: a random session token (stored hashed on our side), its expiry, and the browser or device description sent with your request, so you can see and end your sessions.
• Technical data: your IP address and request details are processed to run the service and prevent abuse, such as rate-limiting sign-in attempts. Rate-limit counters are kept in memory and are not saved to the database. Server logs may also contain IP addresses for a limited time.

We do not collect payment details, because nothing is for sale. We do not use advertising or tracking cookies, and we do not sell your data.

Cookies and local storage

• One essential, HTTP-only session cookie keeps you signed in. It is needed for the service to work.
• The app may store preferences such as sound and animation settings on your device. If you install the app to your home screen, the browser may cache the app shell so it loads quickly.

How we use it

• To create and secure your account, run contests, settle bets and show leaderboards.
• To send account emails you need, such as email verification and password reset, and notifications you turn on, such as contest start reminders.
• To keep the service safe: detect abuse, cheating and multiple accounts, and fix faults.
• To comply with the law when required.

Who else sees it

• Hosting and email providers that process data for us to run the service.
• Sports data and logo network: game data is fetched by our servers and does not include your personal details. Team logos may be loaded by your browser from the data provider's content network, which can then see your IP address and device details. See NFL, ESPN and data notices.
• Google, if you use Google sign-in (when available): Google tells us your verified email and name, and learns that you signed in to our service.
• Authorities, where the law requires it.

How long we keep it

We keep your account and game history while your account exists. When you ask us to delete your account, we remove or anonymize your personal details after a short grace period. Game results may stay in anonymized form so that other players' leaderboards and statistics remain correct.

Your choices

• You can ask to see, correct, export or delete your data by contacting us at the address below. Self-service tools for export and deletion are planned.
• You can sign out of other devices, and change or remove optional details such as your avatar.
• Depending on where you live, you may have additional rights, such as objecting to processing or complaining to a data protection authority.

Security

Passwords are hashed, sessions use secure HTTP-only cookies, and sign-in attempts are rate-limited. No system is perfectly secure, so use a strong, unique password.

Age

BigGameProps.com is for adults aged 18 and over. We do not knowingly collect information from anyone younger. If you believe a minor has signed up, contact us and we will remove the account.

Changes

We may update this policy and will change the effective date above when we do.

Draft for review: have a lawyer review this policy before public launch, especially if you will have users in the EU, UK or California, or add analytics, push notifications or other providers.