LEGAL

Privacy Policy

Effective date: September 2, 2026

This Privacy Policy explains how Triple Threat collects, uses, discloses, and protects information when you use triplethreat.app and the Triple Threat member platform.

1. Information We Collect

Account information. When you create or maintain an account, Triple Threat may process your email address, authentication information, internal user identifier, profile information you choose to provide, account status, and security or session information. Passwords are handled through Supabase authentication and are not visible to Triple Threat in plaintext.

Community and feedback information. If you use community or feedback features, Triple Threat may process messages, profile content, images, reactions, votes, polls, and feedback you submit. Community content may be visible to other members depending on the feature.

Usage and analytics information. Triple Threat uses limited PostHog product analytics to understand core product use. This may include page views, signup completion, slate views, research opens, player-profile opens, WNBA research opens, community views, timestamps, internal or pseudonymous identifiers, and limited technical information needed to deliver and secure the Service.

PostHog is configured to discard stored client IP data. Broad autocapture, session replay, heatmaps and dead-click tracking, surveys and product tours, exception capture, and performance capture are disabled. Triple Threat does not intentionally send PostHog player names, selections, sportsbook information, wager amounts or history, email addresses, display names, chat content, or feedback content as analytics properties.

Technical and security information. Infrastructure and security providers may process network, device, request, cookie, log, and security information needed to host, protect, authenticate, and deliver the Service. Network providers may temporarily process IP addresses even where analytics storage of IP addresses is disabled.

2. Information We Do Not Currently Collect for the Product

Triple Threat does not currently process payments, does not accept or place wagers, and does not intentionally collect precise location for the product. Triple Threat does not currently require date of birth; membership eligibility is based on the required 18+ acknowledgment.

3. How We Use Information

• Create, authenticate, secure, and administer accounts.
• Provide the slate, research tools, player profiles, community, feedback, and other member features.
• Send account-related email such as verification or password-reset messages.
• Understand core product usage, activation, and retention.
• Maintain security, prevent abuse, troubleshoot errors, and protect users and the Service.
• Moderate community features and enforce Terms and Community Rules.
• Respond to support, feedback, or legal requests.
• Comply with applicable law and protect legal rights.

4. Service Providers

Current core providers include Cloudflare for web infrastructure and security, Supabase for authentication and database functions, PostHog for limited product analytics, and Resend for transactional email delivery. These providers may process information on Triple Threat's behalf or under their own applicable terms and privacy obligations as necessary to provide their services.

5. When Information May Be Shared

Triple Threat may disclose information to service providers as needed to operate and secure the Service; when you intentionally make information available through community or profile features; when required by law or valid legal process; to investigate fraud, abuse, security threats, or Terms violations; to protect rights, safety, property, or platform integrity; or in connection with a business transaction subject to applicable law.

Triple Threat does not currently sell personal information to advertisers and does not currently use the Service for targeted advertising.

6. Cookies and Similar Technologies

Triple Threat and its service providers may use cookies, local storage, or similar technologies for authentication, security, preferences, and limited analytics. Some technologies are necessary for account and Service functionality. Blocking necessary technologies can prevent parts of the Service from working.

7. Data Retention and Account Closure

Triple Threat retains information for as long as reasonably necessary to provide and secure the Service, maintain legitimate business records, resolve disputes, enforce agreements, investigate abuse, and comply with legal obligations. Retention periods may vary by type of information.

Closing an account currently operates as a soft closure: access is revoked and the profile is closed, but some account, community, security, analytics, backup, or business records may remain for legitimate operational or legal reasons. Triple Threat should delete or de-identify information when it is no longer reasonably needed, subject to technical and legal limitations.

8. Security

Triple Threat uses reasonable administrative and technical measures intended to protect information, including managed authentication and infrastructure services. No online service can guarantee absolute security. Users should use unique credentials and promptly report suspected account compromise.

9. Your Choices and Requests

Depending on your location and applicable law, you may have rights concerning access, correction, deletion, or other handling of personal information. You may update certain profile information or close your account through available product controls. Triple Threat may need to verify a request before acting on it.

10. Children and Minors

Triple Threat is a general-audience service intended only for users age 18 or older. Users under 18 are prohibited from creating or using member accounts. Triple Threat does not knowingly seek personal information from children under 13. If Triple Threat learns that it has collected personal information from a child under 13, it will take appropriate steps consistent with applicable law.

11. Third-Party Links

The Service may contain links to third-party websites or services. Their privacy practices are governed by their own policies, not this Privacy Policy.

12. Changes to This Privacy Policy

Triple Threat may update this Policy as its product, providers, or legal obligations change. The effective date will be updated when revisions are published, and additional notice may be provided when appropriate or required.

13. Contact

Privacy questions or requests should be sent through the official contact method published on triplethreat.app.