Privacy policy

Who this is for

This is the privacy policy for ParlayCapital Terminal, the player-prop research board from Parlay Capital LLC. It covers signed-in members and people who visit without signing in.

ParlayCapital Terminal is for research and entertainment. It is not a sportsbook and it does not take bets. You must be 21+ or of legal age for sports betting where you live. See the terms of service.

Summary

Accounts, payments, and membership live at Whop. From Whop we receive only your Whop user id. We keep a login record (when you first and last signed in), a record that you agreed to the terms, and any board filters you choose to save. After you sign in we set a signed session cookie. We keep no web access logs, and we run no analytics or ads. Every cookie and storage key is listed under Cookies and browser storage.

What we do not collect

Sign-in goes through Whop, and we ask Whop only for your Whop user id (the “openid” scope). Whop does not send us your name, email address, photo, or payment details, and we do not store passwords. We use the sign-in tokens once to read your id, then discard them.

We do not run analytics on this site. There is no Google Analytics, Mixpanel, or PostHog, and no advertising or tracking pixel. We do not sell personal data. We do not share your Whop id with sportsbooks or with the companies that send us odds and box scores. We do not give personal information to any company for its own marketing.

What we store

Session cookie

After you sign in with Whop we set a cookie named __Host-pf_session in production, or pf_session on localhost. Scripts on the page cannot read it. It is signed so the stored plan cannot be changed by the visitor. It holds:

• an opaque Whop id, used to ask Whop whether that account still has a Parlay Capital plan
• the plan last seen on that account
• the version of the terms you agreed to
• when we last checked the plan, and when you signed in

The cookie lasts 30 days from sign-in, or until you log out. On every app page, we re-check the plan with Whop about every five minutes. This cookie is what keeps you signed in. We do not attach a name, email, or card to it.

Login cookies

During Whop sign-in we set two cookies (__Host-pf_oauth_state and __Host-pf_oauth_verifier in production) so the login cannot be replayed. They last ten minutes and are deleted when login finishes. Those cookies do not log you out. The session cookie above is what keeps you signed in.

Login record

When you sign in, we keep one login record: your Whop id, the time you first signed in, and the time you last signed in. Each sign-in replaces the last time, so we keep no history of your visits. The record holds no IP address and no browser details.

Your agreement to the terms

Before you open the board, we ask you to confirm your age and agree to the terms. When you agree, we store your Whop id, the version of the terms, and the time. This is how we can show which terms you accepted. It holds nothing else.

Saved filters

If you save a board filter, we store a row keyed by Whop id: a name you choose, the filter settings already in the address bar, an optional Discord webhook, the props already sent so an alert does not fire twice, and when the filter was made and last sent an alert. Delete the filter in the app and we delete the row.

Discord webhooks

A Discord webhook is optional. If you paste one on a saved filter, we store it and send matching props to that URL after odds refresh. Each post carries the filter’s name and the matching props, not your Whop id. The URL can post into a Discord channel you control. The page shows whether a webhook is attached, not the URL. Edit or delete the filter to remove it. What Discord does with those posts is Discord’s rules, not ours.

Slip (this browser only)

The slip is stored in this browser under pf.slip. It is not written to our database. Clear this site’s data to delete it. It does not sync across devices. Building a slip is not placing a bet.

Request counts

To keep the site up for everyone, the server counts recent requests from each IP address and each signed-in session, and briefly refuses any that send too many. Those counts live only in the server’s memory for a few minutes. We never write them to disk.

Sports data

Odds, box scores, injury reports, and feed health are sports data used to draw the board. They are not about members. Our server gets them from the data companies and sends them on to you, so those companies never receive your IP address, your browser details, or your session.

House Discord feed

Parlay Capital can post a house feed from a webhook we operate. That channel belongs to Parlay Capital and is not tied to your account. It posts props, never member data.

Whop

Whop is the identity provider and where you pay. Your account, card, invoices, and membership live there. We receive an opaque id from Whop and ask whether that id currently has a Parlay Capital product, so we can open or close the board. We do not take or store card numbers.

Whop’s own rules are in its privacy policy (opens in a new tab) and terms of service (opens in a new tab). Close or delete a Whop account in Whop, not here.

Who else receives data

• Whop: your sign-in, your purchases, and our checks of your plan.
• Discord: the alert posts you turn on with a webhook, as described above.
• Our hosting company: it runs the server that holds our database and carries this site’s traffic.
• Anyone the law requires us to answer, such as a court order.

We put no ad network, analytics company, or other tracker on this site. Only one other company receives data from your browser: Whop, which runs the sign-in pages and the checkout. We do not control what Whop does with it, so Whop may collect information about your activity over time and across other websites. Whop’s privacy policy applies.

Logs

We keep no web access logs. Our web server does not record the pages you open, your IP address, or your browser, and the app writes no log files. The only exception is the short-lived request counts described above. Unsaved filters live in the address bar on your device and are not written to our database.

Why we store it

• to keep you signed in and to check that you still have access
• to show which terms you accepted
• to know which members use the board, and when they last signed in
• to restore filters you chose to save, and to send alerts you turned on
• to protect the site from abuse and overload
• to operate the site and fix problems

We do not use the id in the cookie to profile you, to target ads, or to choose which props you see.

How long we keep it

The session cookie lasts up to 30 days from sign-in, or until you log out. Saved filters last until you delete them in the product or ask us to delete them. If you delete your Whop account and do not tell us, a saved filter can remain under an id that can never sign in again. Email us and we will delete it. The login record stays until you ask us to delete it.

We keep the record of your agreement while you use the service, and after that only as long as we need it to show which terms you accepted. Request counts are gone within minutes.

We back up the database once a day and keep the last two copies, so a row we delete can stay in a backup for a few more days.

Your choices and rights

• Log out to drop the session cookie.
• Delete saved filters on the board, including any Discord webhook on them.
• Clear this site’s data in your browser to drop the slip and your settings.
• Manage or delete your Whop account, cards, and membership in Whop.
• Email theparlaycapital@gmail.com to ask what we hold under your Whop id, or to correct or delete it. We cannot turn that id into a name. Tell us the Whop account, or write while signed in, so we can find the rows. We will not treat you differently for asking.

We do not sell or share your personal information, as California law defines those words. If your browser sends a Global Privacy Control signal, we treat it as a request to opt out of selling and sharing. Because we do neither, the signal changes nothing here. We do not respond to Do Not Track signals, because we run no tracking that a signal could switch off.

Changes

When what this product stores changes, we update this page and the date at the top. If the change is important, we ask you to agree again before you open the board, the same way we do for the terms.

Outside the United States

ParlayCapital Terminal is offered to people in the United States. If you visit from another country, this page still lists everything we collect, and you can use the choices above by email.

Contact

Parlay Capital LLC
Email: theparlaycapital@gmail.com