SlateSnipe Privacy Notice

Documentation version 1.0.0 R1. Effective date: September 18, 2026.

1 Scope and contact

SlateSnipe LLC, doing business as SlateSnipe ("we," "us," or "our"), provides the SlateSnipe website and related account and analytical services. This Notice explains our collection, use, disclosure, and retention of personal information. Send privacy questions or requests to support@slatesnipe.com with the subject "Privacy request." You do not need a separate privacy email address or a paid subscription to contact us.

This Notice covers our handling of your information, not the independent practices of DFS contest operators or other third-party services. It does not describe an active public leaderboard: that feature is upcoming, and additional disclosures will precede its activation.

2 Categories we collect and their sources

Account and contact information: you provide an email address, account name or display name where used, and information included in support correspondence. We record account identifiers, email-verification status, account role and access status, an age-eligibility confirmation, and the version and time of legal acceptance. Age confirmation is not collection of your full date of birth by that control.

Authentication and security information: our authentication system stores password-verification records, sessions, verification and recovery records, and security events. Where MFA is enabled, it stores protected enrollment and verification records. Requests and sessions may include IP addresses, browser or user-agent information, timestamps, and information needed to detect misuse. Authentication audit records use a keyed representation of the trusted client address and a coarse browser-family label; this does not mean raw addresses never reach our infrastructure or session records.

Subscription and transaction information: Stripe supplies customer and subscription identifiers, billing status, plan information, renewal or cancellation information, and transaction references needed to administer access. Stripe collects payment credentials and associated billing details directly. SlateSnipe does not store full payment-card numbers or security codes in its application database. Support messages may contain billing information you choose to provide; do not send card credentials.

Service activity and submissions: we process selected contest and player information, optimizer settings and requests, favorite and rejected lineups, and Spotter questions and relevant conversation context to perform the requested action. We keep account-level counts of successful sign-ins, completed generations, and accepted Spotter questions, with recent timestamps. Those counters are not a complete browsing history. If you contact support, we receive the message, attachments, and information needed to investigate it.

Spotter's application safety record contains an account identifier, a one-way question fingerprint, detected intent and outcome, selected slate identifier, source count, response time, and timestamp. That record does not intentionally store the question text. The question is nevertheless processed to answer it, and separate security or support processing may apply; this is not a promise that text is never processed or retained anywhere.

Local browser data: necessary cookies and browser storage support sessions, security, legal-gate preferences, and display settings. The FanDuel Edit Entries template selected for export is read in your browser and its entry metadata is not uploaded to SlateSnipe by that export workflow. If you separately send that file to support, we receive it as a support attachment. Browser-local processing does not prevent your browser or contest operator from retaining a downloaded or submitted file.

Other sources: hosting and security providers process connection and request information; email providers process delivery or correspondence information; and sports and contest-data sources supply player and contest information. Owner-imported contest files and metadata are processed to make contest tools available. Public sports data generally concerns athletes, not member accounts. We may receive information from you or an authorized representative when handling a privacy, security, or legal request.

3 How we use information

We use account, authentication, and security information to register and verify users, authenticate sessions, recover accounts, administer access, detect abuse, and protect the Service. We use transaction information to process subscriptions, reconcile billing events, answer billing questions, and apply access entitlements.

We use selected contests, settings, questions, and saved lineups to generate and explain outputs, preserve favorites, avoid rejected combinations, and provide requested functionality. We use operational counts, errors, and support information to diagnose problems, plan capacity, and improve reliability and usability. Product research also uses sports and contest data; we do not need your payment credentials to train a player-performance model.

We use contact information for requested support and necessary account, verification, recovery, security, subscription, and material-policy messages. We also process information to comply with law, enforce agreements, and establish or defend legal claims. We do not use account credentials for unrelated purposes.

4 Disclosures and service providers

Cloudflare provides hosting, network and security services, Worker execution, D1 database storage, and R2 file/object storage. Account, authentication, consent, entitlement, saved-lineup, and operational records are stored in application databases; files managed by the service may be stored separately in object storage. This is not a promise that all copies remain in one physical location.

Stripe processes payments and subscriptions. Resend handles transactional email delivery. Fastmail handles our support and legal mailbox correspondence. Information provided to these providers depends on their function: for example, an email recipient and message content for delivery, or billing identifiers and transaction information for subscription administration. Some providers also process information for their own legal, security, or fraud-prevention obligations under their notices.

We may disclose necessary information to professional advisers, authorities when legally required, others when reasonably necessary to protect rights or investigate unlawful activity, or a successor in a business transaction subject to applicable protections. We may also disclose information at your direction. We do not publish private account records or proof files merely because you use the Service. We restrict access to authorized people and providers who need it for their work.

5 Sale sharing advertising and sensitive information

We do not sell personal information for monetary or other valuable consideration, share it for cross-context behavioral advertising, or use it for targeted advertising. The launch application does not install advertising pixels, general third-party page-view analytics, or a third-party crash-reporting SDK. Necessary infrastructure and security logging still occur.

We use sensitive information, such as authentication credentials, only as needed to provide and secure the Service or as otherwise permitted by law, not to infer sensitive personal characteristics for advertising. We do not use automated profiling of members to make decisions with legal or similarly significant effects of the kind covered by applicable state privacy laws. Sports projections are not such decisions about you.

Because we do not undertake sale, advertising sharing, or targeted advertising, a Global Privacy Control signal does not change those practices. We will not use such a signal as permission to track you. Before introducing practices that require additional notice, consent, an opt-out link, or recognition of browser preference signals, we will implement the applicable protections and update this Notice. You may contact support@slatesnipe.com about these choices now.

6 Retention deletion and backups

We retain information only for as long as reasonably necessary for the purposes described here, considering account activity, the type and sensitivity of information, security needs, billing and tax obligations, requests and disputes, legal requirements, and available deletion methods. Different record classes may have different retention periods.

Account and saved-lineup records support active accounts and requests to remove information. Consent and billing records may need to outlast account closure to document transactions, comply with law, or resolve disputes. Security logs and abuse records may remain where reasonably needed to protect the Service. We keep support correspondence while needed to handle the request and related operational or legal obligations. A contest disappearing from the active list is not by itself deletion of all related records.

When a deletion request is granted, we remove or deidentify information from active systems as applicable and instruct relevant providers where required. Some information may be retained under lawful exceptions, such as a legal hold, tax record, fraud investigation, or evidence of consent. Isolated backup or disaster-recovery copies may persist until overwritten or expired under the applicable recovery schedule; they are not used for ordinary operations. If recovery restores information subject to a completed deletion request, we reapply the deletion or restriction. We will explain applicable exceptions when responding to a request. Deidentified information is maintained without attempting to reidentify it except as law permits.

7 Your choices and privacy requests

Use the billing portal to manage payment details and cancellation. Contact support@slatesnipe.com to request account corrections, access, deletion, or another available privacy right. We do not require you to buy a subscription or create an account just to submit a request. Include enough information to identify the account and request, but not a password, authenticator code, or full card number.

Depending on where you live and whether a law applies to our business and the information involved, you may have rights to access or obtain a portable copy of information, correct inaccuracies, request deletion, obtain information about disclosures, and opt out of sale, advertising sharing, targeted advertising, or certain profiling. You may also have rights to limit specified uses of sensitive information, use an authorized agent, or appeal a denial. We will not unlawfully discriminate against you for exercising a privacy right. Some functionality necessarily depends on the information needed to provide it.

We verify requests proportionately to their risk, using information already associated with the account where possible. An authorized agent may need to establish authority and, where permitted, have you confirm the request. We do not require identity verification for opt-out requests where law prohibits it. We use verification information for handling the request and related security, not marketing.

We respond within the deadlines required by applicable law and explain any permitted extension or denial. To appeal, reply to the decision or email support@slatesnipe.com with the subject "Privacy appeal" and the reason you disagree. We will explain the outcome and any available complaint route to your state attorney general or other appropriate regulator. You may contact a regulator without first completing an appeal where law permits.

8 State specific rights

For California residents, where the CCPA applies, the rights in Section 7 include knowing relevant categories and specific information, correction, deletion, portability, and freedom from unlawful discrimination. Sections 2 through 6 describe our collection, sources, purposes, recipients, retention criteria, and no-sale/no-sharing practices. We do not use sensitive information for purposes that require a limitation choice under the CCPA. Other state rights apply according to the relevant law; this Notice does not imply that every statute applies to every account.

California residents may also request information about disclosures for third parties' own direct marketing under applicable law. We do not disclose personal information for that purpose. Nevada residents may submit a sale opt-out request to support@slatesnipe.com; our current practices do not include a sale as described above. If additional jurisdiction-specific disclosures become applicable, we will provide them before the affected processing as required.

9 Security storage and international processing

We use safeguards designed to protect information, including access restrictions, encrypted transport, credential protections, and security controls. No internet service can guarantee absolute security. Use a unique password, protect your email account, and report suspected compromise to support@slatesnipe.com.

Our providers may process information in the United States and other locations where they operate. Those locations may have different data-protection laws. This Notice does not promise US-only residency. Any legally required transfer safeguards must apply to covered processing. Third-party sites linked from the Service operate under their own notices.

10 Adults only

SlateSnipe is intended for people age 18 or older and is not directed to children. We do not knowingly permit accounts for people under 18 or knowingly collect children's information in violation of law. If you believe a child has provided personal information, contact support@slatesnipe.com. We will investigate and take appropriate steps, including restricting access and deleting information as required.

11 Changes to this Notice

We will post an updated version and effective date when this Notice changes. For material changes, we will provide a prominent in-service notice or send notice to the registered email before the change takes effect where practicable, and earlier or differently where law requires. We will obtain consent when required before using previously collected information for a materially different purpose. Posting an update does not by itself authorize processing that requires consent.