Privacy Policy

ParlayLab ("ParlayLab," "we," "our") provides research-driven MLB picks, projections, and a personal play tracker called MyLab. This policy explains what data we collect when you use our website (parlaylab.io), our mobile apps, and our APIs (collectively, the "Service"), how we use it, and the choices you have.

We do not take wagers. We do not sell your personal information. ParlayLab is for users 21 and over.

Information we collect

Account information

When you sign up, we collect the information your authentication provider (Clerk) shares with us: your email address, name (if you provide one), profile image (if you provide one), and a stable Clerk user identifier. If you sign in with Google, Clerk passes us the same fields plus a Google account identifier. We store a mirror of this identity in our database so we can attach your saved plays to your account.

Activity within the Service

We store the picks you save to MyLab, the slips you lock in, your appearance preference (light / dark / system), and your default sportsbook preference (when set). These are tied to your account.

Technical data

Our hosts (Vercel for the website, Fly.io for our API) record standard server logs including IP address, user agent, request path, and timestamp. We use these for security, abuse prevention, and debugging. They are not used to build advertising profiles.

Cookies and local storage

We use cookies and browser local storage for: keeping you signed in (Clerk session cookies), remembering your appearance preference, remembering your default sportsbook, and dismissing in-app banners. We do not use third-party advertising cookies.

Sources we read from on your behalf

ParlayLab consumes data from third-party sources to produce its picks and projections. These services do not receive any of your personal data; we read public data from them on the server side:

• The Odds API (odds + lines)
• SportsGameOdds (line history)
• MLB Stats API (schedules, lineups, player stats)
• Open-Meteo (weather)
• Baseball Savant / Statcast (advanced batting metrics)

How we use information

• To create and maintain your account
• To provide the picks, projections, and MyLab features you sign up for
• To sync your preferences across devices
• To detect and prevent abuse
• To respond when you contact us at team@parlaylab.io
• To send transactional email related to your account (confirmation, password reset, billing). We do not send marketing email without separate consent.

Sharing

We share information only with the service providers we need to run ParlayLab:

• Clerk — handles sign-in / sign-up and session management.
• Vercel — hosts the website.
• Fly.io — hosts the API and the Postgres database.
• Sentry (when enabled) — receives error reports. These may include your account id; they do not include passwords, payment data, or page contents.

If we ever sign affiliate agreements with sportsbooks (e.g. FanDuel, DraftKings), "Open in Book" links may include a tracked affiliate identifier. We will update this policy before that goes live.

We do not sell or rent your personal information to third parties. We will only disclose your information if required by law or to protect the rights and safety of our users.

Data retention

We keep your account data for as long as your account is active. Saved plays and locked slips are retained so you can review your history; you can clear them anytime from MyLab. If you delete your account by emailing us, we remove your account record and associated saved plays / slips within 30 days, except where we are required to retain certain information by law.

Your rights

Depending on where you live, you may have rights to access, correct, port, or delete your personal information, and to opt out of the sale of personal information (we do not sell). To exercise any of these rights, email team@parlaylab.io from the address associated with your account.

Residents of California, Virginia, Colorado, Connecticut, and Utah have specific rights under their state privacy laws, including the right to know what categories of data we collect and to request deletion. EEA / UK residents have rights under GDPR including the right to lodge a complaint with a supervisory authority.

Children

ParlayLab is not directed to anyone under 21. We do not knowingly collect information from anyone under 21. If we learn that we have collected information from someone under 21, we will delete it.

Security

We use TLS in transit, encryption at rest on our database provider, and the principle of least privilege for internal access. No system is perfectly secure; if you suspect your account has been compromised, email team@parlaylab.io immediately.

Changes

We may update this policy from time to time. When we make material changes, we will update the "Last updated" date and, where appropriate, notify you in-product or by email.

Contact

Questions about this policy? Email team@parlaylab.io.