Privacy Policy for Haglerdesigns (DBA "Haglerdesigns")

Effective Date: September 8, 2025

Haglerdesigns (a sole proprietorship doing business as "Haglerdesigns") (“we,” “our,” or “us”) values your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our sports pick’em website and related services (the “Service”).

1) Information We Collect

Account Information: Name and email address you provide at signup; password (stored in hashed form). If you choose "Sign in with Google", we receive your Google email address, profile name, profile picture URL, and Google user ID (the stable identifier Google issues to identify you across sign-ins). No additional Google data scopes are requested.
Technical & Usage Data: IP address, device/browser information, pages viewed, actions taken (e.g., picks, leaderboard participation), approximate geolocation derived from IP address for analytics and security purposes.
Marketing Preferences: Your choices regarding marketing emails and cookies.

We do not intentionally collect postal addresses or dates of birth. If you believe we have collected such data in error, contact us to remove it.

2) How We Use Information

Operate the Service: Account creation, authentication (including via Google Sign-In when you choose it), security, and troubleshooting.
Personalization: Provide tailored picks/insights and in-product recommendations.
Community Features: Show your handle/picks on leaderboards and activity feeds (per your settings).
Communications: Send transactional emails (e.g., account notices). Send marketing emails if you opt in (you may opt out anytime).
Analytics & Improvement: Measure performance, improve features, analyze usage patterns, and generate geographic analytics using IP-derived location data.
Legal Compliance: Enforce terms, prevent fraud/abuse, and comply with applicable laws.

3) Disclosure of Information

We do not sell your personal information. We may disclose limited information to:

Service Providers: Hosting (Bluehost), analytics (Google Analytics), advertising pixels (Google Ads/Facebook Pixel), payment services (Venmo, Cash App), and authentication providers (Google Sign-In, when you choose it). When you sign in with Google, your Google account is used only to verify your identity; we do not request access to your Google contacts, calendar, drive, or any other Google service data.
Legal/Protection: When required by law or to protect the rights, safety, and security of users, the Service, or others.

CCPA/CPRA Note: Some integrations may be considered "sharing" for cross-context behavioral advertising. California residents can opt out—see Your Privacy Choices.

4) Cookies & Similar Technologies

Functional Cookies – required for login and sessions.
Analytics Cookies – to understand usage and performance.
Marketing Cookies – to measure ad performance and deliver relevant ads.

You can manage preferences any time via Manage Cookies in the footer or the cookie banner.

5) Your Rights & Choices

Access & Portability – receive a copy of your data via your Account Settings.
Correction – request corrections to inaccurate data through your profile settings.
Deletion – request deletion of your data with a 30-day recovery period via our automated system.
Consent Management – change cookie preferences at any time.
California Opt-Out – turn off Marketing Cookies or contact us.

Data Management: Visit your Account Settings for comprehensive data control tools including export and deletion capabilities.

For other requests, email admin@haglerdesigns.com.

6) Data Retention & Account Deletion

Active Account Data

We retain your personal data while your account is active and as long as needed to provide services.

Account Deletion Process

30-Day Recovery Period: After requesting deletion, you have 30 days to recover your account by logging in.
Self-Reactivation: If you try to log in during the recovery period, you'll be offered the option to reactivate your account with all original data restored.
What Gets Deleted: Profile information, picks data, league memberships, friends lists, messages, and achievements.
Analytics Preservation: Statistical data is anonymized and preserved for platform analytics and improvement.
Anonymous Data: Anonymized records cannot be re-identified and are kept to maintain platform integrity.

Data Export Capabilities

CSV Format: Spreadsheet-compatible export for analysis and record-keeping.
JSON Format: Technical format suitable for data migration and developer use.
Summary Report: Human-readable HTML report with statistics and highlights.
Complete Data: Includes all picks, achievements, league history, and profile information.

Retention Schedule

Active Accounts: Data retained indefinitely while active.
Inactive Accounts: Archived after 2 years of inactivity.
Deleted Accounts: Personal data removed after 30-day recovery period.
Anonymized Data: Retained indefinitely for legitimate business interests.
Audit Logs: Compliance records retained for 7 years per legal requirements.

7) Security

We use appropriate safeguards including password hashing and access controls, but no system is 100% secure.

8) Children & Age Restrictions

The Service is for users 18+. We do not knowingly collect information from minors.

9) International Privacy Rights

GDPR Rights (European Residents)

Right to be Informed: This privacy policy explains our data practices.
Right of Access: View all your data via the Data Management Center.
Right to Rectification: Correct inaccurate information in your profile.
Right to Erasure: Delete your account with our automated deletion system.
Right to Restrict Processing: Limit how we process your data upon request.
Right to Data Portability: Export your data in machine-readable formats.
Right to Object: Opt-out of marketing and non-essential processing.

CCPA Rights (California Residents)

Right to Know: Access categories and specific pieces of personal information.
Right to Delete: Request deletion of personal information (with exceptions).
Right to Opt-Out: Prevent sale or sharing of personal information for advertising.
Right to Non-Discrimination: Equal service regardless of privacy rights exercise.

10) Geographic Scope

The Service is intended for U.S. residents. If you access from abroad, your data will be processed in the U.S. International users have rights under applicable privacy laws.

11) Contact Us

Haglerdesigns (DBA "Haglerdesigns")
Texas, United States
admin@haglerdesigns.com

12) Updates

We may update this Policy. Changes are effective upon posting with a new Effective Date.

By using the Service, you acknowledge this Privacy Policy.