Privacy Policy

1. What we collect

• Account details: your email address, display name, and a password (stored only as a secure hash by our sign-in provider). If you sign in with Google, Apple, Microsoft, or Facebook, we receive your name, email address, and (where the provider shares it) profile picture from that provider. Apple may give us a private relay address instead of your real email.
• Subscription details: your plan, status, renewal date, and Stripe customer ID. Your card details go directly to Stripe — we never see or store them.
• Alert settings: your minimum edge, sports, sportsbooks, and channels; the email address alerts go to; and, if you turn on device notifications, a push address created by your browser. We keep a record of which alerts we've sent you so you never get the same one twice.
• Usage and device information: IP address, browser and device type, pages requested, and timestamps, recorded by our hosting provider for security and troubleshooting. If you click a sportsbook link, we may record the click (which link and when) to measure our affiliate partnerships.
• Browser storage: we use your browser's local storage to keep you signed in, and a cookie if you use a preview link. We don't use advertising cookies or cross-site trackers on EdgeDrop.

2. How we use it

• to run your account, provide Pro features, and process payments;
• to send the alerts you've asked for, and messages about your account or subscription;
• to keep the service secure, prevent abuse, and fix problems;
• to understand and improve how EdgeDrop is used;
• to meet legal, tax, and accounting obligations.

3. Who processes it for us

We use these providers to run EdgeDrop. They handle your information only to provide their service to us:

• Supabase — database and sign-in.
• Stripe — payments and subscription billing.
• Cloudflare — hosting, content delivery, and security.
• Resend — sending alert and account emails.
• Google, Apple, Microsoft, or Facebook — only if you choose to sign in with that account.
• Your browser's push service (for example Apple, Google, or Mozilla) — delivers device notifications if you turn them on.

We don't sell your personal information, and we don't share it with sportsbooks. We may disclose information if the law requires it, to protect our rights or users' safety, or as part of a sale or merger of the business (in which case this policy would continue to apply).

4. How long we keep it

We keep account information while your account is open. When you ask us to delete your account, we delete or anonymize your personal information, except billing records we must keep for tax and accounting purposes. Security logs are kept for a limited time.

5. Your choices and rights

• Change your display name and alert settings anytime in your Account.
• Turn off email or device alerts in your Account, or in your browser's notification settings.
• Manage or cancel your subscription through Account → Manage billing.
• To see, correct, or delete the personal information we hold about you, email contact@bonusdrop.io. We'll respond within 30 days. Depending on where you live (for example California), you may have additional rights, and we won't treat you differently for using them.

6. Security

We use encryption in transit, access controls, and reputable providers to protect your information. No system is perfectly secure, so please use a strong, unique password.

7. Age restriction

EdgeDrop is only for adults 21 and over. We don't knowingly collect information from anyone under 21. If you believe someone under 21 has an account, email contact@bonusdrop.io and we'll delete it.

8. Changes

We may update this policy. We'll change the date above and, for significant changes, tell account holders by email or in the app.

9. Contact

Privacy questions or requests: contact@bonusdrop.io.