Legal
Privacy Policy
Effective date: October 9, 2026
The short version
OddsPeek collects the minimum it needs to run: your email address if you create an account, your subscription status from Stripe or the app store you bought through, and the sports things you do on the site (games you watch, picks you track). We use one functional cookie, run no advertising trackers, and never sell or share your personal information for advertising. Our AI analysis is generated from public sports data; the only things of yours an AI model sees are a question you type into Ask the Board and the two players you pick in Start/Sit.
Who we are
The oddspeek.com service is operated by Wilphia LLC, 30 N Gould St Ste N, Sheridan, WY 82801, United States (“OddsPeek,” “we,” “us”). This policy describes how we handle personal information when you use the service. Questions or requests: contact@wilphia.com.
What we collect
Account information. Your email address, used for passwordless sign-in links, receipts, and — until you opt out — the daily email. Sign-in links are single-use tokens stored only in hashed form.
Billing information. Payments are processed by Stripe on the web, by Apple in the iOS app, and by Google in the Android app. Your card details go directly to Stripe, Apple, or Google and never touch our servers. In the apps, RevenueCat receives the purchase receipt from Apple or Google, tied to your internal account ID (never your email), and tells us the plan and its status. We store only your subscription status, plan, and the Stripe customer reference or store transaction id.
Things you do on the service. Games and players you watch, picks you track, notes you write on players, and slips you build. A slip you have not tracked stays on your device, in your browser’s local storage or the app’s own storage, and never reaches our servers.
Push alerts (apps). If you turn on the daily Peek alert, the app registers your device with Google’s Firebase Cloud Messaging, which issues it a push token and delivers one alert a day (on iPhone through Apple’s push service). The token stays between your device, Google, and Apple: our servers never receive or store it. No token is created until you turn the alert on, and turning it off deletes it.
Technical data. Standard server logs — IP address, browser type, pages requested — kept by our hosting provider for security and operations. The apps load their fonts from Google Fonts and player photos from ESPN’s image servers, which see your device’s IP address as any web request does.
What we do not collect: no precise location, no contacts, no advertising identifiers, no biometrics, and no data from your accounts at any sportsbook.
Cookies and local storage
We set one cookie: a signed session token that keeps you signed in. It is not used for tracking or advertising, and there are no third-party analytics or ad cookies on the service. Your browser’s local storage holds convenience state such as an unsaved bet slip, which stays on your device. If you arrived through a tagged link — one from our X account, say — the tag is kept there too and is saved with your account when your first sign-in creates it, so we can count which channels bring people in. A count, never a profile.
How we use information
- to sign you in, provide the service, and sync what you watch and track;
- to bill subscriptions and send receipts and account email;
- to send the daily email — the players and games you pin (with a credential or a free week), the day’s Peek, or, on the last day of a free week, a summary of it — which every message lets you leave with one click (unsubscribing requires no sign-in);
- to keep the service secure and debug problems; and
- to understand aggregate usage — counts, never profiles.
We do not use your personal information to train AI models, ours or anyone else’s.
AI-generated content
Grades, summaries, and leans on the service are produced by AI models from publicly available sports data — schedules, box scores, injury reports, posted odds. Prompts contain sports data, plus what you choose to ask: the question you type into Ask the Board (up to 200 characters), which Anthropic’s Claude turns into a board filter, and the two players you pick in Start/Sit. Keep personal details out of a question. Your email, your watchlist, your notes, and your tracked picks are never included in any model request.
Who we share with
We share personal information only with the processors that run the service, each bound to use it solely to provide their service to us: Stripe (payments), Apple, Google, and RevenueCat (in-app purchases), Vercel (hosting and delivery), Neon (database), Resend (transactional email), Google Firebase (the daily Peek alert, if you turn it on in the app), and Anthropic (AI models, which see an Ask the Board question or a Start/Sit pair and nothing else of yours). Sports data flows the other way — from ESPN’s public feeds and The Odds API into the service — and contains nothing about you. We may disclose information if required by law, to protect the service from abuse, or as part of a merger, acquisition, or sale of assets, in which case this policy continues to apply to it.
We do not sell personal information, and we do not share it for cross-context behavioral advertising.
Retention and deletion
We keep account data while your account exists. Delete it any time with Delete account on the Account tab of the app (signed in), which removes it immediately and ends any plan bought on oddspeek.com at once, including any paid time left on it, or email contact@wilphia.com from your account address and we will remove your personal information within thirty days. Either way, nothing that identifies you stays in our database, except that if you used the free week we keep a one-way code made from your email address (not the address itself), so the same email can’t start a second free week; the billing records the law requires for tax and billing disputes stay with Stripe, Apple, Google, and RevenueCat. A plan bought in the App Store or Google Play is billed by Apple or Google and must be cancelled in that store’s settings. Server logs are retained on our hosting provider’s standard short schedule.
Your rights
You can access, correct, or delete your information, and opt out of the daily email, at any time — through the service or by emailing contact@wilphia.com. California residents may exercise their rights to know, delete, and correct under the CCPA/CPRA the same way; we do not sell or share personal information as those laws define it, so there is nothing to opt out of, and we honor Global Privacy Control signals for what little that leaves. Residents of other states or countries with privacy laws may use the same contact for equivalent requests. We will never discriminate against you for exercising a privacy right.
Age
The service is for adults 21 and over. We do not knowingly collect information from anyone under 21, and never from children under 13. If you believe a minor has created an account, email contact@wilphia.com and we will delete it.
Security
All traffic is encrypted in transit. Sign-in tokens are single-use, short-lived, and stored hashed; session cookies are signed and HTTP-only; card data lives at Stripe, not here. No system is perfectly secure, but we keep the surface small on purpose.
Changes and contact
If we change this policy materially, we will update the effective date above and notify account holders by email before the change takes effect. Questions and requests: contact@wilphia.com · Wilphia LLC, 30 N Gould St Ste N, Sheridan, WY 82801.