Privacy Policy

This policy applies to huddlespy.com, including when you install it on your device from your browser (together, the “Platform”), and to everyone who visits it or has an account. HuddleSpy is offered only to people in the United States who are 21 or older.

• —Email address — to create your account, sign you in, and send you account and legal notices
• —Password — if you sign up with an email address. Your password is handled by our sign-in provider, which stores it only in hashed form; HuddleSpy's own systems do not receive it
• —If you sign in with Google: the name, profile picture link, and Google account identifier Google shares with us. Our sign-in provider stores these with your sign-in record; HuddleSpy does not currently display or use them
• —The teams and fighters you add to your favorites
• —Your confirmation that you are 21 or older, and a record of each time you agree to our Terms of Service and this policy — the date, the version shown to you, and whether you signed up with an email address or Google
• —Messages you send us, for example to contact@huddlespy.com — your email address, the content of your message, and anything you attach

HuddleSpy is free and we do not collect payment information.

• —Device and connection information — your IP address and the browser and device type your browser sends with each request
• —Approximate location — the country and U.S. state your connection comes from, which our hosting provider determines from your IP address. We record the country and state of the request that creates your account; otherwise we use your approximate location without storing it. We do not collect precise location
• —Sign-up details — how you signed up (on the website or in an app, and the app version), and, if you arrived through a link, the domain of the site that referred you and any campaign tags in that link (utm_source, utm_medium, utm_campaign). We keep the referring site's domain, not the full address of the page you came from. Until you create an account, these first-visit details stay in your browser (see our Cookie Policy)
• —Usage information — the pages, screens, and features you use on the Platform, the sport they relate to, and when. We collect this for signed-in accounts that have agreed to this policy, unless you switch it off (Account → Settings → Usage analytics)
• —A last-seen time on your account, updated at most once every 15 minutes while you are signed in
• —Logs — our application logs record failed sign-in attempts with only the surrounding network range and a one-way fingerprint of the IP address, and our error logs contain no email addresses or full IP addresses. Our hosting and sign-in providers keep their own request and sign-in logs, which include IP addresses

We collect usage information ourselves. We do not currently use third-party analytics, session-recording, or advertising technology on the Platform.

• —To provide the Platform — your account, sign-in, favorites, and matchup content
• —To keep the Platform secure — detecting and preventing abuse, fraud, and attacks, and limiting request rates
• —To check eligibility — that the Platform is available where you are, and that you have confirmed you are 21 or older
• —To choose sponsored content — deciding which sponsored content and offers may be shown in your state (see “Sponsored Content” below)
• —To understand and improve the Platform — measuring how it is used, fixing problems, planning features, and producing aggregate figures, such as audience size, that do not identify you
• —To communicate with you — account notices, legal and policy notices, and replies to your messages. We do not currently send marketing email
• —To comply with the law and enforce our Terms of Service

The Platform may show sponsored content, including advertisements and offers from sportsbooks and other gaming operators, and HuddleSpy may be paid for showing it. Sponsored content is labeled as such.

• —It is chosen by the page you are viewing and your state — not by a profile of you or your activity on other websites
• —HuddleSpy serves it from our own systems. Advertisers do not place cookies, pixels, or other tracking code on the Platform, and we do not give them personal information about you. We may give them aggregate figures, such as how many times their content was shown or clicked
• —Links in sponsored content identify the campaign, not you. If you follow one, you leave HuddleSpy, and the advertiser's own privacy policy applies to what happens on its site

Service providers. We use companies that run parts of the Platform for us: website hosting and content delivery, backend hosting, database and sign-in, email delivery, email hosting for messages you send us, scheduled-job processing, and AI generation of matchup content (which receives sports data only, not personal information about you). We give each one only the information it needs to provide its service, and our agreements with them limit how they may use it. The current list is on our Service Providers page.

Google. If you sign in with Google, Google verifies your identity and shares the details listed above with us. Google handles your information under its own privacy policy, not as our service provider.

Discord.We post matchup content to the HuddleSpy Discord server. We do not send Discord information about you. If you join the server, Discord's own privacy policy applies to your activity there.

Legal requests and protection. We may disclose information when we believe in good faith that it is necessary to:

• —Comply with a law, regulation, subpoena, court order, or other legal process
• —Respond to a lawful request from a government or law-enforcement authority
• —Enforce our Terms of Service or investigate a possible violation of them
• —Protect the rights, property, or safety of HuddleSpy, our users, or the public, including to detect and prevent fraud, abuse, or security incidents

Business transfers.If HuddleSpy LLC is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of its business or assets, your information may be transferred as part of that transaction. Whoever receives it must continue to handle it under this Privacy Policy, and any material change to how it is handled will follow the process under “Changes to This Policy”.

Aggregate information. We may share aggregate or de-identified information that does not identify you, for example audience figures with a sponsor.

HuddleSpy does not sell your personal information and does not share it for targeted (cross-context behavioral) advertising. If that changes, we will ask for your agreement first, and information collected before the change will not be sold or shared unless you opt in.

HuddleSpy does not set cookies. It uses your browser's local storage and an offline cache to keep you signed in, remember your preferences, keep the site working offline, and hold the first-visit details described above until you sign up. Every item is listed in our Cookie Policy.

No third party collects personal information about your activity on the Platform over time or across other websites. Because we do not track you across websites or sell or share personal information, we treat every visitor the same whether or not their browser sends a Do Not Track or Global Privacy Control signal.

• —Account information (email, sign-in record, favorites, sign-up details, confirmations and agreement records, last-seen time) — kept while your account exists. Deleted immediately when you delete your account, or within 30 days if we close it
• —Usage information — deleted automatically after 13 months, and immediately when you delete your account
• —Records of policy emails we sent you — deleted automatically after 90 days, and immediately when you delete your account
• —Messages you send us — kept until your request is resolved and any follow-up is complete, unless we need them to meet a legal obligation or to establish or defend a legal claim
• —Our application logs — kept for up to 30 days
• —Request and sign-in logs kept by our hosting and sign-in providers — deleted automatically under those providers' retention limits. They are not deleted early when you delete your account
• —Information we must keep to comply with the law, resolve disputes, or enforce our agreements — kept only as long as that purpose requires

We protect your information with encrypted connections (TLS) on every request, encryption at rest at our database provider, access controls, and sign-in handled by a provider that stores passwords only in hashed form. HuddleSpy takes no payments, so we hold no card or bank details. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

If a security incident affects your personal information, we will notify you and the relevant authorities as and when applicable law requires. Our Incident Response Policy describes how we handle incidents.

You can do these yourself, at any time, in Account → Settings:

• —Download my data — a copy of your account information, favorites, agreement records, usage information, and policy-email records, as a JSON file
• —Delete account — permanently deletes your account and your sign-in record
• —Usage analytics — switch the collection of usage information on or off

Depending on the state you live in, you may also have the right to access, correct, delete, or get a copy of your personal information, and to opt out of its sale or its use for targeted advertising (HuddleSpy does neither). For a correction or any other request, email contact@huddlespy.com from the address on your account. We respond within 45 days. If we decline a request, you can appeal by replying to our response, and we will tell you the outcome of the appeal. You may use an authorized agent where your state's law allows; we may ask the agent for proof of authority. We do not treat you differently for exercising these rights.

HuddleSpy is offered only to people in the United States. The website redirects visitors from other countries, and we do not knowingly create accounts for people outside the United States. Information we collect is stored and processed in the United States.

HuddleSpy is not directed to anyone under 21, and we do not knowingly collect personal information from anyone under 21. If we learn that an account belongs to someone under 21, we close it and delete its information within 30 days.

How we handle an update depends on what it changes:

• —Material changes — collecting a new kind of information, using it for a new purpose, sharing it with a new kind of recipient, keeping it longer, or reducing your rights. We post a notice on the Platform before the change takes effect, and the next time you use your account we ask you to review and agree to the updated policy before you continue. We do not apply a material change to information we already hold about you without your agreement. If you do not agree, you can download your data or delete your account instead. We may also tell you about a material change by email
• —Minor changes — clarifications, corrections, and other updates that do not affect how your information is handled. We post the updated policy with a new date and list the change below. Adding or replacing a provider within one of the categories above is a minor change, recorded on the Service Providers page with its own date

Change history

• —November 8, 2026 (2026-11-08, material) — Rewrote this policy. HuddleSpy is now offered only in the United States to people 21 or older. Added usage information, sign-up details, and approximate (state) location; added sponsored content chosen by page and state, with no advertiser tracking; moved the list of service providers to its own page; added how we respond to Do Not Track and Global Privacy Control signals, and how to appeal a declined request. Material changes are now announced on the Platform and require your agreement; email notice is optional. Removed the former billing-records clause (no billing records exist) and the section for the European Union, European Economic Area, and United Kingdom, where HuddleSpy is not offered.
• —October 25, 2026 (2026-10-25, minor) — Moved the prediction disclaimer out of this policy; it remains in our Terms of Service and Legal Disclaimers, where we also reworded it. No change to how your information is handled. The Privacy Policy update we announced by email on October 11, 2026 for this date was withdrawn and did not take effect.
• —October 10, 2026 (2026-10-10, material) — Described the details received from Google and Apple sign-in, the mobile app, authentication logs, and our Discord server, and support emails; added sections on legal requests and business transfers; removed items we do not collect; introduced agreement to material updates.
• —October 2026 (2026-10) — Availability extended to Canada.

This Privacy Policy is governed by the laws of the State of Arizona, USA, without regard to its conflict of law principles.

For privacy questions or requests, contact us at contact@huddlespy.com.