Privacy Policy

This Privacy Policy describes how DailyTicketRankings ("we," "us," or "our") collects, uses, and protects your information when you use our services. By using DailyTicketRankings, you agree to the practices described here.

1. Information We Collect

We collect the minimum information needed to operate the service:

• Account information: email address, password (stored as a salted hash — never in plain text), first name, last name, billing address.
• Payment information: payment method details are handled and stored exclusively by Stripe. We never see or store your card number, CVV, or bank account details on our servers.
• Usage information: pages visited, time of access, IP address, and browser type — used to prevent abuse and improve the service.
• Session data: an authentication token stored in a secure, HTTP-only cookie so you stay signed in.

2. How We Use Your Information

• To authenticate your account and deliver the rankings you subscribed to.
• To send you transactional emails (signup confirmation, password resets, billing notifications, daily ranking alerts you opt into).
• To enforce our Terms & Conditions and prevent fraud (e.g., preventing a single user from abusing the free trial with multiple emails).
• To comply with legal obligations.

3. How We Share Your Information

We do not sell your personal information. We share data only with the following service providers, strictly as needed to run the product:

• Stripe — payment processing.
• Cloudflare — hosting, CDN, and database (D1).
• Brevo / Resend — transactional email delivery.

We may disclose information if required by law, subpoena, or to protect the rights, property, or safety of DailyTicketRankings, our users, or the public.

4. Cookies

We use a single essential cookie (dtr_session) to keep you signed in. It is marked HTTP-only, Secure, and SameSite=Strict. We do not use third-party tracking or advertising cookies.

5. Data Security

Passwords are hashed with PBKDF2 before being stored. Sessions are bound to secure cookies. All traffic is encrypted in transit over HTTPS. That said, no system is 100% secure — if you suspect your account has been compromised, change your password immediately and email us at support@dailyticketrankings.com.

6. Data Retention

We keep your account information for as long as your account is active. If you cancel your subscription and request deletion, we will delete your personal data within 30 days, except where we're legally required to retain records (e.g., billing/tax records).

7. Your Rights

Depending on your jurisdiction (GDPR, CCPA, etc.), you may have the right to:

• Access the personal data we hold about you.
• Correct or update your information (directly via your account page).
• Request deletion of your account and associated data.
• Export your data in a portable format.
• Opt out of marketing emails (transactional emails will still be sent).

To exercise any of these rights, email support@dailyticketrankings.com.

8. Children's Privacy

DailyTicketRankings is not directed at children under 16 and we do not knowingly collect personal data from children. If you believe a child has provided us personal information, please contact us and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent revision. Material changes will be communicated via email to active subscribers.

10. Contact Us

Questions about this policy? Reach us at support@dailyticketrankings.com.