Privacy policy

Policy version 2026-11-08 · Private pilot draft

What is stored and why

Firebase Authentication handles sign-in and verification. FieldBet stores an internal account identifier linked to your Firebase identity, display name, email when provided, account creation time, policy versions and age confirmation. It stores your virtual wallet, ticket and cash-out receipts, refill records, saved drafts, preferences and notebook to provide and protect your account. Passwords are handled by Firebase and are never stored in FieldBet’s application database.

Your records are scoped to your authenticated account. Hosting uses Google Cloud Run and Cloud SQL PostgreSQL. Source requests go from the server to sports-data providers; your private notes and wallet are not intentionally sent to those providers. Hosting and authentication providers process operational information under their own policies. Service logs can contain request/error metadata and timestamps; credentials and private notes must not be logged.

Browser storage

The browser retains Firebase sessions and account-scoped caches for drafts and unsynced edits. An email address may be retained temporarily to complete an email sign-in link. Clear browser storage on shared devices after signing out. Guests rely on their browser session unless they link a sign-in method.

Retention and requests

Account records are retained while needed to operate the pilot. Cloud SQL backups use the configured seven-day retention; removed data can remain in backups until they expire. Ask the operator for access or correction of your account data. Delete your account and data from the account menu. Sign in again first if requested. Deletion removes the sign-in identity, wallet, bets, quotes and saved workspace. A one-way identity hash and deletion date remain to prevent accidental recreation by pending requests. The operator must confirm its identity, contact address and retention policy before public launch. Do not submit sensitive personal information in notes.

FieldBet is for adults 18 and older and does not knowingly invite children to participate. Age confirmation records an attestation, not an identity document or verified date of birth.