Privacy Policy
This Privacy Policy describes how Ultra Rare Inc., operating as BetLogic ("BetLogic," "we," "us," or "our"), collects, uses, and discloses personal information when you visit betlogic.ai, create an account, subscribe to our email communications, or use our tools. We are based in Ontario, Canada. This policy is governed by the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Ontario privacy law, and section 9 sets out additional rights for residents of California and other US states.
1. Information We Collect
Information you provide
- Email address — when you subscribe to our daily digest or newsletter.
- Account information — if you sign in with Google, we receive and store your Google account identifier, email address, display name, and profile picture URL. We request only the openid, email, and profile scopes. We never receive your Google password.
- Subscription status — your plan, whether it is active, and when it expires. We do not receive or store your card number or payment details; see section 4.
- Referral information — your referral code, the code that referred you, and counts of referrals and rewards earned, if you take part in the referral programme.
- Partner verification email — if you claim complimentary access through a partner, the email address you used with that partner, so we can verify the claim.
- Anything you type into a tool — for example a search term or a bet description. Images and logos you add in the card builder are processed in your browser and are not uploaded to our servers.
Information collected automatically
- Usage data — pages visited, time on page, referring URL, browser type, and device type, via server logs, Google Analytics 4, and PostHog product analytics.
- Session recordings — we record screen-level sessions (mouse movement, clicks, scrolls, page navigation) via PostHog to understand how visitors use our tools. Text you type into form fields is masked. Text that is already visible on the page is captured as part of the recording. Recordings are retained by PostHog for 30 days.
- Cookies and local storage — see the table in section 2.
- IP address — logged for security and fraud prevention, and recorded with your email signup as a record of consent.
- Approximate location — our analytics providers derive an approximate country and region from your IP address. We do not collect precise or device-level location, and we never ask for it.
We do not collect health information, financial account information, government identifiers, or biometric information. We do not use your camera or microphone.
2. Cookies and Local Storage
You can block or delete cookies in your browser settings. Some features will not work as expected if you do.
| Name | Purpose | Lifetime | Set by |
|---|---|---|---|
| bl_sess | Keeps your session, including sign-in | 30 days | BetLogic |
| bl_ab | Keeps you in the same variant of a layout test | 180 days | BetLogic |
| bl_card | Card builder invite access | 180 days | BetLogic |
| bl_attrib | Remembers how you first arrived (referral code, campaign) | 30 days | BetLogic |
| bl_sub | Remembers that you already subscribed, so we stop asking | 1 year | BetLogic |
| bl_gatesrc | Which prompt led you to sign up | 24 hours | BetLogic |
| bl_mx | Counts free matchup views | 24 hours | BetLogic |
| ph_… (PostHog) | Analytics and session identifier | ~1 year | PostHog |
| _ga, _ga_… | Google Analytics visitor and session identifiers | ~2 years |
We also use your browser's local storage to remember preferences such as a dismissed banner, a recently viewed player, a chosen theme, and any card you are building. Card builder data, including an image you add, stays in your browser and is never sent to us.
3. How We Use Your Information
- To provide the Service, including signing you in and remembering your settings.
- To send daily digests and sports analytics emails you have subscribed to.
- To measure and improve the performance of our website, tools, and email content.
- To operate the referral programme and any subscription you buy.
- To detect and prevent fraud, abuse, or technical issues.
- To comply with legal obligations.
We do not sell, rent, or trade your personal information, and we do not share it for cross-context behavioural advertising. We do not run advertising on the Service.
4. Third-Party Services
We share personal information with the following providers, each acting on our behalf or under their own policy as noted. Several are located in the United States, so your information is processed outside Canada and may be accessible to authorities there under local law.
- Google Analytics 4 (US) — site traffic measurement. Sets cookies. Policy.
- PostHog (US Cloud) — product analytics and session recording. Requests are sent through in.betlogic.ai, a reverse proxy on our own domain; PostHog still receives the data and your IP address. If you are signed in, we send PostHog your user id, email address, name, and plan so we can recognise your account across sessions. Policy.
- Google Sign-In (US) — authentication, and the source of the account data in section 1.
- Google Fonts (US) — fonts are loaded from Google's servers, which means Google receives your IP address and browser information when a page loads.
- Amazon Web Services SES (US) — email delivery. Processes your email address on our behalf and does not use it for its own marketing.
- Pikkit (including QuickPick) — our bet-slip partner. When you use a bet-slip button, you are handed off to Pikkit with the selection you chose and a campaign tag identifying BetLogic. We do not send Pikkit your name, email, or account id. This is a paid partnership. Pikkit's privacy policy governs what happens on their service.
- Sportsbooks — FanDuel, DraftKings, BetMGM, and Caesars. Clicking an outbound link may allow them to set cookies. Their privacy policies govern data collected on their platforms. These are paid affiliate relationships.
- Whop (US) — subscription checkout and payment processing. Whop is the merchant of record and receives your payment details directly; we receive only your email address and plan status.
- Image and data CDNs — team logos and player photos are loaded directly from league and media CDNs including ESPN, MLB, and the NHL, which receive your IP address when an image loads. Some images are instead fetched by our own server and cached.
- ApiFlash (US) — a screenshot service used on our servers to render share images. It never receives visitor data.
- MLB, NFL, NHL, and NBA data APIs — public sports data used to power our tools. No personal information is shared with these services.
5. Email Communications (CASL)
Our email list operates under Canada's Anti-Spam Legislation (CASL). You provide express consent by submitting your address and then confirming it from a link we email you; we do not add anyone who does not confirm. We record the date, source, and IP address of that consent.
Every commercial email includes a functional unsubscribe link and our postal address. Unsubscribing takes effect immediately and we also add your address to a suppression list so it is not contacted again. Transactional messages, such as a sign-in link you requested, are not commercial email and are not covered by the unsubscribe.
We use Amazon Web Services SES to deliver email. Addresses that hard bounce or report our mail as spam are suppressed automatically.
6. Data Retention
- Email address: for as long as you remain subscribed, and afterwards on our suppression list so we do not contact you again.
- Account data: for as long as your account exists, and up to 12 months after closure for fraud prevention and legal records.
- Session recordings: 30 days, then deleted by PostHog.
- Analytics event data: retained by Google and PostHog under their own retention settings.
- Server logs and signup IP addresses: up to 90 days.
- Referral and subscription records: for as long as needed for billing, tax, and dispute records.
7. Your Rights (Canada)
Under PIPEDA, you have the right to request access to, or correction of, personal information we hold about you; withdraw consent for its use; and lodge a complaint with the Office of the Privacy Commissioner of Canada.
To exercise any of these rights, contact us at privacy@betlogic.ai. We will respond within 30 days.
8. Data Security
We implement reasonable technical and organizational measures to protect your personal information. Subscriber and account data is stored on password-protected servers, credentials are kept outside the public web root, and sign-in uses Google rather than a password we hold. No method of internet transmission or storage is 100% secure.
9. United States Residents, Including California
If you live in California or another US state with a comprehensive privacy law, you have rights over your personal information in addition to those above.
Categories we collect: identifiers (email address, Google account id, IP address, cookie and device identifiers); commercial information (subscription plan and status); internet activity (pages viewed, clicks, scrolls, session recordings, referring site); approximate geolocation derived from IP address; and inferences we draw about which tools you use. We collect these for the purposes in section 3, from you directly and automatically as you use the Service, and we disclose them to the providers in section 4.
We do not sell your personal information, and we do not share it for cross-context behavioural advertising, as those terms are defined under California law. We have not done so in the preceding 12 months. We do not knowingly collect personal information from anyone under 21, so we do not sell or share the personal information of minors.
Your rights: to know what we collect and how we use it; to request a copy of it; to request deletion; to request correction; and not to be discriminated against for exercising any of these. To make a request, email privacy@betlogic.ai with the email address associated with your account. We will verify your identity by confirming control of that address, and respond within 45 days. You may use an authorised agent, who must provide proof of authorisation.
10. Children's Privacy
BetLogic.ai is intended for users 21 years of age or older, and our Terms of Service set 21 as the minimum age for the entire Service. We do not knowingly collect personal information from anyone under 21, and we do not direct the Service to children. If you believe a child has provided us with personal information, contact privacy@betlogic.ai and we will delete it promptly.
11. Changes to This Policy
We may update this policy from time to time. The "Effective" date at the top reflects the most recent revision. Where a change is material we will make it prominent on the site. Continued use of BetLogic.ai after changes are posted constitutes acceptance of the updated policy.
12. Contact
Ultra Rare Inc. (operating as BetLogic)
4130 Parkside Village Dr, Unit 105
Mississauga, ON L5B 0L7, Canada
privacy@betlogic.ai