Privacy Policy
Last Updated: July 3, 2026
Your Privacy Matters
We are committed to protecting your personal information and your right to privacy. This policy explains what information we collect, how we use it, and your rights regarding your data.
1. Information We Collect
Personal Information You Provide
- Account Information: Email address, full name, password (encrypted)
- Payment Information: Processed securely through Stripe (we do not store full credit card numbers)
- Profile Data: Subscription tier, preferred analysis system, custom formulas
- Communications: Support requests, feedback, correspondence
Automatically Collected Information
- Usage Data: Pages visited, features used, time spent on platform
- Device Information: Browser type, operating system, IP address
- Analysis History: Races analysed, systems used, results generated
- Cookies: Session cookies for authentication, analytics cookies for service improvement
Behavioural Research Metrics (Aggregated & Anonymized)
As part of our harm minimisation research mission, we collect anonymized behavioural metrics to understand platform usage patterns. All data is aggregated and de-identified at the earliest possible stage.
What we collect (anonymized):
- Session frequency and duration
- Navigation patterns (pre-race vs post-race analysis usage)
- Time of day / day of week engagement
- Feature engagement (educational content, tools, reports)
- Abstention patterns (sessions with no action taken)
- Support resource engagement (GambleAware clicks, self-exclusion views)
- State/region (jurisdiction-level only, no precise location)
What we NEVER collect:
- Personal financial data (bank details, earnings, credit scores)
- Precise location data (GPS, exact postcode)
- Unique government identifiers
- Individual betting outcomes or loss trajectories
- Data that could identify problem gambling at individual level
If high-risk behavioural patterns are detected at cohort level, we trigger supportive interventions (encouraging breaks, linking to support services) — not punitive action.
2. How We Use Your Information
We use your information to:
- Provide Services: Deliver racing analysis, custom formulas, and premium features
- Process Payments: Handle subscription billing and payment processing
- Personalize Experience: Save preferences, analysis history, custom settings
- Communicate: Send account updates, subscription notifications, support responses
- Improve Services: Analyse usage patterns to enhance features and user experience
- Security: Detect and prevent fraud, abuse, and unauthorized access
- Legal Compliance: Meet regulatory requirements and respond to legal requests
3. Payment & Financial Data
We use Stripe for payment processing. Here's what that means for your data:
- What We Store: Last 4 digits of card, card brand (Visa/Mastercard), expiration date
- What Stripe Stores: Full payment details, billing address, transaction history
- PCI Compliance: Stripe is PCI DSS Level 1 certified (highest security standard)
- Encryption: All payment data is encrypted in transit and at rest
- No Access: We never see or store your full credit card number or CVV
Learn more about Stripe's security: stripe.com/docs/security
4. How We Share Your Information
We do NOT sell your personal information. We may share data with:
Service Providers
- Stripe: Payment processing and subscription management
- MongoDB Atlas: Secure database hosting (data encrypted at rest)
- Hosting Provider: Application infrastructure and deployment
- Email Service: Transactional emails (if implemented)
Legal Requirements
We may disclose information if required by law, subpoena, court order, or to protect our rights and safety.
Business Transfers
If we are acquired or merge with another company, your information may be transferred to the new entity.
5. Data Security
We implement industry-standard security measures:
- Encryption: HTTPS/TLS for all data transmission
- Password Security: Bcrypt hashing with salt (never stored in plain text)
- Database Security: Encrypted connections, access controls, regular backups
- Authentication: JWT tokens with expiration, secure session management
- Monitoring: Automated threat detection and logging
Note: No system is 100% secure. We cannot guarantee absolute security but employ best practices.
6. Data Retention
- Active Accounts: Data retained as long as your account is active
- After Cancellation: Account data retained for 90 days, then permanently deleted
- Payment Records: Retained for 7 years for legal/tax compliance
- Analysis History: Deleted with account or upon request
7. Your Privacy Rights
You have the right to:
- Access: Request a copy of your personal data
- Correction: Update or correct inaccurate information
- Deletion: Request deletion of your account and data (\"right to be forgotten\")
- Portability: Export your data in a machine-readable format
- Opt-Out: Unsubscribe from marketing emails (transactional emails required for service)
- Object: Object to certain data processing activities
To exercise these rights, contact us at support@thewrongprice.com
8. Cookies & Tracking
We use cookies for:
- Essential Cookies: Authentication, session management (required for service)
- Analytics Cookies: Understand usage patterns, improve features (optional)
- Preference Cookies: Remember your settings and preferences
You can disable cookies in your browser, but this may limit functionality.
9. Children's Privacy
Our service is not intended for users under 18 years of age. We do not knowingly collect information from minors. If you believe a child has provided us with personal information, contact us immediately to have it removed.
10. International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in compliance with GDPR and other privacy laws.
11. Changes to This Policy
We may update this privacy policy from time to time. We will notify you of significant changes via email or prominent notice on our platform. Continued use of our services after changes constitutes acceptance.
12. Contact Us
If you have questions about this privacy policy or your personal data:
