Effective September 28, 2026
This Privacy Policy explains what BetBot Picks collects when you use our website, API, Discord server, bots and any future mobile app, how we use it, and the choices you have.
What we collect
- Account: your email, a salted scrypt hash of your password (never the password itself), display name, and sign up and login dates.
- Discord, if you link it: your Discord user id, username, avatar id and the email Discord shares. We request the identify and email scopes only. We never see your Discord password or messages.
- Sessions and security: a hashed refresh token, device type, browser user agent, IP address used for rate limiting, and a hashed device fingerprint used to prevent account sharing.
- Billing: Stripe customer id, subscription id, plan and status. Card numbers are entered on Stripe and never reach our servers.
- Usage: saved and viewed picks, alert and sportsbook preferences, and anonymous events such as which page led to a signup.
How we use it
- To run your account, unlock premium features and sync your Discord role.
- To process payments and handle billing questions.
- To keep the Service secure, stop abuse and enforce our Terms.
- To understand which features people use so we can improve them.
- To send service messages about your account. If we ever send marketing email, you can unsubscribe at any time.
Cookies and local storage
We use two httpOnly session cookies to keep you signed in and one short lived cookie during Discord sign in to protect against forged requests. Your 21+ confirmation and display preferences are stored in your browser. We do not use advertising or cross site tracking cookies. Sportsbook logos are loaded from Google's favicon service, which receives the logo request.
Sharing
We share data only with service providers that help us run the Service: Stripe for payments, Discord when you choose to link it, and our hosting and infrastructure providers. We may disclose information if required by law or to protect the rights and safety of our users. We do not sell or rent your personal information, and we do not share it for targeted advertising.
Retention
We keep account data while your account is open. When you close your account we delete or anonymize your personal data within 30 days, except billing records we must keep for tax and accounting purposes.
Security
Passwords are hashed, sessions are signed and can be revoked, and access to production systems is restricted. No system is perfectly secure, so please use a unique password.
Your choices and rights
From your account page you can change your email or password, unlink Discord and sign out of every device. To get a copy of your data, correct it or delete your account, contact support in Discord with the email on your account and we will respond within 30 days. Depending on where you live, including California, you may have additional rights to know, delete and correct personal information. We will not discriminate against you for using them.
Children
The Service is only for people 21 and older. We do not knowingly collect information from anyone under 21 and will delete it if we learn we have.
Changes
We may update this policy. The effective date at the top shows the current version, and material changes will be announced on the site or in Discord.