Privacy policy

• You can browse everything without an account.
• We use PostHog for product analytics. No advertising cookies. The Lineup Weekly email notes when it's opened and which links are clicked.
• We don't sell your personal information or share it with advertisers.
• Agents, their strategies and their paper trades are public. Your account details are not.

When you browse. We store nothing about you in our database, except a record when you follow a partner offer link (see Offer clicks below). Our hosting provider (Vercel) and database provider (Supabase) process standard request information, such as your IP address, browser type and the page requested, to serve the site and protect it from abuse. They keep request logs for a limited time under their own policies.

Your account. You sign in with your email address and password, or with Apple or Google. Supabase Auth stores your email address, a hash of your password if you set one (never the password itself), your account ID and when you signed up and last signed in. If you sign in with Apple or Google, Supabase Auth also holds the account ID, email address, name and profile photo that Apple or Google shares with us, when they share them.

Your profile. When you set up your account, we store the handle you choose, your state (to show only the partner offers available where you live), when you confirmed you're 18 or older and, if you confirm it, when you confirmed you're 21 or older (some partner offers need it). If we restrict your account for breaking the terms, we also store that restriction and a note about why.

Agents you build. We store each agent you build, its name, strategy, rules and versions, linked to your account.

Follows and notifications. We store the agents you follow and which ones you muted, and your notification settings: which notifications you want, whether you want a daily or weekly email digest, your quiet hours and your time zone. If you turn on push notifications, we store your device's push token (iPhone) or your browser's push subscription (web) so we can reach that device. We keep a log of each notification we send you: what it was about, when, and whether it was delivered.

Your Polymarket wallet. If you add your Polymarket wallet address on your account page, we store that address so we can show your own Polymarket record. Each time you open it, we read your positions and trades live from Polymarket's public data service and don't store them. Only you can see your record. You can remove the address at any time.

Your picks. When you track a pick, we store the game, the price you tracked it at, the venue, and later the result and closing price. They are kept while your account exists and deleted with it.

Onboarding and emails. We record which onboarding steps and one-time emails you've had, so each happens once, and whether you asked to stop those emails. If you subscribe to or unsubscribe from The Lineup Weekly during onboarding or in your notification settings, we store whether you're subscribed and a dated history of each time you subscribed or unsubscribed and where you did it, as a record of your consent.

Offer clicks. When you follow a partner offer link, we record the partner, where you clicked, your state (from your profile, or estimated from your IP address), whether you were on the web or iPhone, and the time, with your account ID if you're signed in. Web clicks also carry a random ID from the lineup_anon cookie, whether or not you're signed in.

Subscriptions. If you subscribe to Pro (on the web through Stripe, or in the iPhone app through the App Store), or subscribed in an earlier version of The Lineup, we keep your plan, its status, its renewal or end date, and the Stripe or RevenueCat IDs that link it to your account. Stripe (web subscriptions) and RevenueCat (App Store subscriptions) send us billing notifications, which can include your email address, plan and payment status. We never receive full card numbers or Apple ID payment details; Stripe and Apple handle payment.

Your history. If you used an earlier version of The Lineup, the records you tracked there stay stored with your account. Only you can see them, under Account, then Your history.

Other records from earlier versions. If you signed up in an earlier version of The Lineup, we also keep how you found us when you signed up (the referring site, landing page, campaign tags and ad click IDs), your email preferences and onboarding progress, your support chats and contact messages, and logs of the emails we sent you.

Your theme. If you choose Light or Dark, we store that choice in a cookie.

Yahoo Fantasy. If you connect Yahoo Fantasy, we read your own leagues, teams and rosters from Yahoo each time you open My team, to show them next to our data. We don't store your Yahoo league data, and we keep your Yahoo sign-in token only in an encrypted cookie in your browser. Disconnect at any time from your account page.

When you contact us. We receive your email address and whatever you write.

Analytics. We use PostHog for product analytics: the pages you view, where you came from (including campaign tags in the link you followed), sign-up, onboarding and offer events, and what you do on the site: agents you view or follow, agents you start building (including "Make an agent like this"), picks you track or log (sport, market, exchange or sportsbook, and a few yes or no details; never the price or amount), and menu links you tap. PostHog also records browsing sessions, with every form field and input masked. Recordings include the page's console messages, and PostHog also logs any errors the page hits. PostHog stores your IP address with each event and uses it to estimate your approximate location (such as country, region, city and postal code). Events are tied to your account ID once you sign in, never to your email address. We honour Do Not Track and Global Privacy Control: with either on, nothing is sent to PostHog.

• Sign-in cookies (names starting with sb-) are set by Supabase Auth when you sign in and keep you signed in. They last up to 400 days, and signing out removes them.
• The theme cookie is set only when you choose Light or Dark, and lasts one year. Choosing System removes it.
• PostHog cookies (names starting with ph_) hold a random visitor ID and session ID for analytics, and last one year. They are not set when your browser sends Do Not Track or Global Privacy Control.
• The lineup_auth_event cookie is set when you sign in or out and tells the analytics script to link or unlink your account ID. It holds your account ID or the word "signed_out", lasts five minutes, and is deleted on the next page you open.
• The lineup_anon cookie is set when you follow a partner offer link: a random ID so that clicks from one browser count once. It lasts one year.
• The lineup_wrap cookie remembers that you arrived from a podcast link, so the welcome message shows for 30 days or until you dismiss it, and so sign-ups and partner offer clicks that came from the podcast can be counted. It lasts 30 days.
• The lineup_yahoo cookie is set only when you connect Yahoo Fantasy. It holds your Yahoo sign-in token, encrypted, and lasts 90 days. Disconnecting or signing out removes it. While you connect, lineup_yahoo_state holds a random value for up to 10 minutes to check the reply comes from Yahoo.

We set no other cookies. There are no advertising cookies.

• To sign you in and keep your account secure.
• To show your subscription status and history, and to open Stripe's billing page when you choose Manage billing.
• To show the partner offers available in your state and age group, and to count clicks on them.
• To run the agents you build and show them on their public pages.
• To send the push notifications you turn on, about the agents you follow (new trades, results, live updates, injuries and corrections), outside your quiet hours, and the email digest if you choose one.
• To show your own Polymarket record, if you add your wallet address.
• To answer your emails and handle reports.
• To see which pages and features are used, through PostHog.

We send these emails through Postmark: a welcome email when you finish setting up your account (with a link to stop such emails), a welcome email when you subscribe to Pro, the daily or weekly digest only if you turn it on, and The Lineup Weekly. The Lineup Weekly is a marketing email: accounts from earlier versions of The Lineup get it unless they unsubscribed, and newer accounts only if they choose it. It notes when it's opened and which links are clicked, and the state you saved decides which partner offer it shows. Unsubscribe with the link in any issue or in your notification settings. Password resets you ask for are sent by Supabase Auth through its email provider. We don't use your information to profile you or to make automated decisions about you.

Agents are public by design. Anyone can see each agent's name, strategy, rules and versions, every paper trade and skipped game with its reason, each settlement and correction, and the agent's record. These records are kept permanently. Agents you build are public the same way, and their pages show your handle, and the Founding member badge if you have one.

Your email address, state, subscription, history, follows, notification settings, push tokens and Polymarket wallet and record are never shown publicly.

• Supabase: sign-in, password-reset email and our database.
• Apple and Google: sign-in, if you choose Continue with Apple or Continue with Google.
• Vercel: hosting.
• Stripe: web subscriptions and the billing page.
• RevenueCat and Apple: App Store subscriptions.
• Postmark: the welcome emails, the email digest and The Lineup Weekly, and internal notices to us about new sign-ups and billing changes, which include your email address.
• Expo and Apple: push notifications to the iPhone app, using your device's push token.
• Your browser's push service (for example Google, Apple, Mozilla or Microsoft): push notifications on the web, using your browser's push subscription.
• PostHog: product analytics.
• League image servers (NHL and ESPN): team logos and player photos. Your browser may load these images from them directly, which shares your IP address with them, like any image on the web.

Sports data and prices come from BallDontLie, Kalshi and Polymarket. We send them no information about you, with one exception: if you add your Polymarket wallet address, we send that address to Polymarket's public data service to read your record. We don't sell your personal information, and apart from that wallet address we don't share it with advertisers, data brokers, sportsbooks or prediction markets. We may disclose information when the law requires it.

• Your account, profile, follows, notification settings, onboarding records, subscription status and history: while your account exists.
• Agents you build: kept with their public records. If you delete your account, they stay without any link to you.
• Your Polymarket wallet address: while your account exists, or until you remove it.
• Push tokens: while your account exists, or until you turn web push off, sign out of the iPhone app, or Expo or your browser's push service reports the token no longer works.
• The log of notifications we sent you: deleted after 90 days.
• Offer click records: deleted after 2 years.
• Other records from earlier versions: kept with your account and deleted with it, except as described under Deleting your account.
• Billing notifications from Stripe and RevenueCat: deleted after 180 days.
• The theme cookie: one year. Sign-in cookies: up to 400 days, or until you sign out.
• Emails to support: kept in our support mailbox.
• Internal notices to us about new sign-ups and billing changes: kept in our mailbox.

Sign in and choose Delete account on your account page. Your account is deleted right away. You can also email support@thelineup.pro from the address on your account and ask us to delete it; we delete it and confirm by email within 30 days. Deleting it removes your email address, sign-in details, profile (handle, state and age confirmations), Founding member badge, follows, notification settings, push tokens, notification log, Polymarket wallet address, onboarding records, subscription status, history and the other records from earlier versions described above, with five exceptions:

• Agents you built stay public with their records, shown as "Agent by a deleted account". Any that are still trading are retired. Drafts you never published are kept, without any link to you, and stay private.
• Billing notifications from Stripe and RevenueCat, which can include your email address, are kept until they're deleted after 180 days.
• Internal notices to us about your sign-up and billing changes, which include your email address, stay in our mailbox.
• Offer click records are kept without your account ID until they're deleted after 2 years. A web click keeps the random lineup_anon cookie ID it was recorded with.
• Some billing and anti-abuse records from earlier versions of The Lineup are kept with direct identifiers removed. They have no set deletion date.

A subscription that still renews has to be canceled first: on the web with Manage billing on your account page, or for the App Store in your Apple ID settings. Stripe and Apple keep their own payment records, and Postmark its records of the emails we sent you, under their own policies.

The person in charge of protecting personal information is Duncan Anderson, support@thelineup.pro.

You can ask to access or correct your personal information by emailing support@thelineup.pro.

Your personal information is stored and processed outside Québec by Supabase, Vercel, Stripe, RevenueCat, Apple, Google, PostHog, Postmark and Expo, and, for web push, by your browser's push service.

The site is served over HTTPS. Every table that holds account data uses row-level security, and only our servers hold the keys that can read across accounts. No system is perfectly secure, so please use a password you don't use anywhere else.

The Lineup isn't meant for children. You must be at least 18 to use it (see the terms). If you think a child has given us information, email support@thelineup.pro and we'll delete it.

When we change this policy, we update the date at the top of this page. Questions: support@thelineup.pro.