Privacy Policy
This Privacy Policy explains how SLTE ("we", "us") collects, uses, and shares information when you use our website and services (the "Service"). By using the Service you agree to this policy.
1. Information We Collect
Information you provide
- Account data: username, email address, and password (stored hashed with bcrypt).
- Profile data: display name, bio, avatar, and preferences you choose to add.
- User content: comments, picks, posts, messages, and reactions you create.
- Compliance data: your age attestation and the timestamp you accepted these terms.
Information collected automatically
- Session cookies used to keep you logged in and protect against CSRF.
- Log and usage data such as IP address, request identifiers, pages viewed, and approximate timing, used for security, rate limiting, and debugging.
2. How We Use Information
- To operate, maintain, and improve the Service;
- To authenticate you and keep your account secure;
- To send transactional email (email verification, password reset);
- To display your public content and social activity to other users;
- To detect, prevent, and respond to abuse, fraud, and security incidents;
- To comply with legal obligations.
3. Cookies
We use a small number of first-party cookies. None are sold or shared with third-party ad networks.
-
Session cookie (
sp.sid) — essential. Keeps you signed in and protects against CSRF. Only set after you log in. -
Consent cookie (
sp_cc) — remembers whether you accepted or declined the cookie banner so we don’t show it on every page. -
First-party analytics — optional page-view, interaction,
device, referrer, and approximate timing data used only to improve the
Service. When you are signed in, usage events may be associated with
your account. Analytics uses browser
sessionStorage(cleared when you close the tab), not a persistent identifier cookie. It starts only after you accept analytics in the cookie banner.
You can revoke consent at any time by clearing the sp_cc
cookie in your browser — the banner will reappear on your next visit.
4. Third-Party Service Providers
We share limited data with vendors who help us run the Service, under their respective privacy terms:
- Hosting & database (application hosting and managed data storage);
- Email delivery (transactional email for verification and password resets);
- Error monitoring (aggregated error reports may include request metadata);
- Sports data providers (odds, scores, and statistics — we send them no personal data);
- Object storage / CDN (avatars and generated images).
5. Data Retention
We retain account and content data for as long as your account is active or as needed to provide the Service. You can request deletion of your account; some records may be retained where required for legal, security, or fraud-prevention purposes.
6. Your Rights
Depending on where you live, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise these rights, contact us at info@slte.app.
7. Children
The Service is intended for adults aged 21 and over and is not directed to children. We do not knowingly collect personal information from anyone under the minimum age. If you believe a minor has provided us information, contact us and we will remove it.
8. Security
We use industry-standard measures including password hashing, HTTPS, security headers, CSRF protection, and rate limiting. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be posted here with an updated date.
10. Contact
Questions about privacy? Contact us at info@slte.app.