Privacy Policy

Your email address

to create your account and send the updates you ask for.

Your follows

the teams and leagues you choose, so we can personalize what we send.

Your profile

a display name, a handle and an avatar, if you set them. These are shown to other readers next to anything you post.

Your email settings

which newsletters you have on or off, and whether you have unsubscribed.

Email engagement

whether emails are delivered, opened, clicked, bounced or marked as spam, so we can tell what is worth sending and keep our mail deliverable.

Usage and device data

pages viewed, what you click, approximate location from your IP address, browser and device, and recordings of site sessions, collected when you visit the site.

Signup context

where you arrived from. The referring page, the landing page, any campaign tags in the link, and the Facebook click id if you came from an ad.

Membership and billing state

which plan you are on, whether it is active, and an identifier for your Stripe customer record. Stripe handles the card itself; we never see or store your full card number.

Invites and referrals

who you invited by email, whether they joined, and the free months you have earned. If a friend invited you, we keep the record that links the two accounts.

Picks and posts

the picks you make in Quick Picks and anything you post or react to in a game thread or league room.

We do not ask for your date of birth, your postal address, or your phone number, and we do not buy lists of people to email.

• To send and personalize the emails you subscribe to.
• To run your account, your follows, your picks and your posts.
• To take payment for a membership or an issue, and to pay out referral rewards.
• To operate, maintain, debug and improve the Service.
• To measure our own marketing, including which ads bring people who stay.
• To protect against fraud, abuse, and security issues, and to comply with the law.

We do not sell your personal information for money. We use the companies below to run the Service, and each of them gets only what its job needs:

CompanyWhat it does and what it gets

Supabase

our database and login. It holds your account, your follows, your settings and your posts.

Resend

sends our email and reports back delivery, opens and clicks.

Stripe

takes payment and holds your card details. We get back the state of your subscription, not your card.

Kickbox

checks an address is deliverable at the moment you type it, so our mail does not bounce.

PostHog

product analytics and session recording for the site.

Google Analytics and Ahrefs Web Analytics

traffic measurement.

Meta

see the next section.

SparkLoop

a newsletter recommendation and referral widget that loads on our pages.

Slack

our own team channel, where signups and unsubscribes are posted so we can see them.

We may also disclose information if the law requires it, and if the business is sold or merged, your data would move with it. We do not otherwise share your address with anyone who wants to email you.

We advertise on Facebook and Instagram. Our pages load the Meta Pixel, and when you sign up our server also reports that signup to Meta through their Conversions API. What Meta receives includes a one-way hashed copy of your email address, your IP address, your browser user agent, and the click id from the ad you came through. The hash lets Meta match you to an account they already have; it does not send them your address in readable form. This is how we tell which ads are working. Depending on where you live, sharing data with an advertising platform this way may count as “sharing for targeted advertising” under your local law, and the rights described below apply to it.

We do not sell advertising space on the site or in our emails, so there is no advertiser buying an audience from us. Meta receives the data above because we are the advertiser buying from them.

We use cookies and similar technologies to keep you signed in, to remember where you arrived from, and for the analytics and advertising tools listed above. Our emails include a tracking pixel and link redirects so we can measure opens and clicks. You can limit this in most email clients, and turning on Apple Mail Privacy Protection (or similar) reduces what we can see. Most browsers let you block or clear cookies.

• Unsubscribe any time, in one click, from any email, or turn individual newsletters on and off from the preference page each email links to.
• Update your follows, your display name and your avatar at any time from your account.
• Manage or cancel your membership from your account, which opens Stripe’s customer portal.
• Access, correct, or delete your data by emailing us. We will honor verified requests as required by law.

We keep your information for as long as your account is active or as needed to provide the Service, then delete or de-identify it. Records we have to keep for tax, accounting or fraud reasons, such as a record of a payment, are held for as long as the law requires. If you unsubscribe, we keep a record of the unsubscribe itself so that we do not mail you again. We use reasonable technical and organizational measures to protect your data, though no method of transmission or storage is completely secure.

We are based in the United States and the companies listed above process data in the United States. If you use the Service from somewhere else, your data will be sent to and held in the United States.

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we’ll delete it. Best Bets and the odds pages are written for adults, and sports betting is 21+ in most US states.

We may update this Privacy Policy from time to time. If we make material changes, we’ll update the date above and, where appropriate, notify you by email.

Questions about your privacy or your data? Reach us at hello@highlights.mainmarket.com, or write to MainMarket, Inc., 135 York St, Brooklyn, NY 11201.