This Privacy Policy explains what information TVWStats ("we," "us") collects when you use the TVWStats website and mobile apps (the "Service"), and how it is used, shared, and protected.

1. Information we collect

Account information. When you create an account, we collect your email address, password, and optional username. Account authentication is handled by our backend provider, Supabase; your password is stored and managed by Supabase and is not visible to us in plain text.

Favorite teams and saved preferences. If you save favorite teams or other preferences, that data is linked to your account.

Howl Bot questions. If you use the Howl Bot AI assistant, we collect the question you type and send it — along with related on-screen context, such as the team, game, or stats you currently have open — to our AI provider (Google Gemini) to generate a response. Do not submit personal or sensitive information through Howl Bot.

Session data. To keep you signed in, we store an authentication token in your browser's or app's local storage. This is functionally similar to a cookie and is required for login to work — we don't use it for advertising or cross-site tracking.

Technical data. Our hosting provider (Render.com) and API providers may log standard technical information such as IP address, request timestamps, and error logs, as is typical for any web service.

We do not currently use third-party advertising or analytics trackers.

2. How we use your information

• To create and secure your account, and keep you signed in;
• To save and display your favorite teams and preferences;
• To generate answers through Howl Bot;
• To operate, maintain, and improve the Service, including diagnosing errors and abuse;
• To enforce rate limits and prevent misuse of the Service.

3. Who we share information with

We share limited information with the third parties that help us run the Service:

• Supabase — authentication and storage of your account and favorite-teams data.
• Google (Gemini API) — receives Howl Bot questions and related context to generate answers.
• Sports data providers (via RapidAPI, and historical stats archives) — provide the scores, standings, and statistics displayed on the Service. We send requests to these providers to fetch data; we do not send your account information to them.
• Render.com — hosts the Service and processes requests as part of normal server operation.

We do not sell your personal information, and we do not share it with advertisers.

4. Data retention

We keep your account information for as long as your account is active. If you delete your account from your profile settings, your account record and saved data (such as favorite teams) are permanently deleted. Some technical logs held by our hosting or API providers may persist for a limited time under their own retention policies.

5. Your rights and choices

• You can view and update your profile information while signed in.
• You can delete your account at any time, which removes your account and associated saved data.
• You can request a copy of the personal data we hold about you, or ask us to delete it, by emailing us (see below).

If you are in the EU/UK or California, you may have additional rights under GDPR or CCPA/CPRA, including the right to access, correct, delete, or export your data, and the right to object to certain processing. Contact us to exercise these rights.

6. Children's privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has created an account, contact us and we will delete it.

7. Security

We rely on industry-standard practices from our providers (such as Supabase's authentication infrastructure) to protect your information, but no method of transmission or storage is completely secure. We cannot guarantee absolute security.

8. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will update the "Last updated" date above. Continued use of the Service after changes take effect means you accept the updated policy.

9. Contact

Questions about this policy, or requests about your data? Contact noahfreeburg@gmail.com.