Privacy Policy

Who we are

rax (“rax,” “we,” “us”) is a sports-analytics tool operated by Paul Andrew Sullivan and Gregory Goodfellow, based in Illinois, United States, and available at rax-bot.com. This policy explains what information we collect when you use rax, why, and what control you have over it. rax is intended for users in the United States who are at least 18 years old.

Information we collect

We collect only what the service needs to work:

• Account information — the email address you register with and a password, which we store only as a salted, hashed value (we never store your password in readable form).
• Usage information — activity within the product, such as bets you mark, your unit-size and filter preferences, and which plays you view, so the board can follow you across devices and settle into a track record.
• Technical information — your IP address and a session cookie used to keep you signed in and to protect the account (for example, rate-limiting sign-in attempts).
• Payment information — if and when you subscribe to a paid plan, checkout and billing are handled by a third-party payment processor (our merchant of record). rax does not receive or store your full card number. We store only a non-sensitive customer/subscription reference and your current plan status.

How we use your information

• To provide the service — sign you in, show and personalize the board, and keep your track record.
• To operate paid subscriptions — determine your plan, and send account and billing-related email.
• To send the notifications you ask for, such as password resets and, on eligible plans, edge alerts.
• To secure the service and prevent abuse.

We do not sell your personal information, and we do not use it for third-party advertising.

Cookies

rax uses a single essential cookie to hold your signed-in session. It is required for the product to function and is not used for advertising or cross-site tracking. Our hosting provider, Cloudflare, may set its own operational cookies and collect basic aggregate analytics to deliver and protect the site.

Service providers

We share information only with providers that help us run rax, and only as needed:

• Payment processor / merchant of record — to take payment and manage subscriptions.
• Resend — to send transactional email (for example, password resets and alerts).
• Cloudflare — to deliver, secure, and speed up the site.
• ntfy — to deliver push notifications, where you enable them.

We may also disclose information if required by law, to enforce our terms, or to protect rax and its users.

Data retention

We keep account and usage information for as long as your account is active. If you close your account, we delete or anonymize it within a reasonable period, except where we must retain limited records to meet legal, tax, or security obligations.

Your choices and rights

You can access, correct, or delete your account information, or ask what we hold about you, by emailing [email protected]. You can unsubscribe from non-essential email at any time using the link in those messages or by contacting us. We will respond to verified requests within a reasonable time.

Security

Passwords are stored using industry-standard salted hashing, traffic is encrypted in transit (HTTPS), and access is limited. No system is perfectly secure, but we take reasonable measures to protect your information.

Children

rax is not directed to anyone under 18, and we do not knowingly collect information from anyone under 18. If you believe a minor has given us information, contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the “last updated” date above, and for material changes we will provide additional notice where appropriate.

Contact

Questions about this policy or your data? Email [email protected].