Privacy

Who we are

MAXED runs this site from the United States and is responsible for the data described here. Members can reach us with “Send feedback” on any page.

What we store

• Your email address and name, as Google or Discord share them when you sign in with them (the only ways to sign in). We never take your Google or Discord profile picture.
• Your username (@name), which you pick once. It's shown next to your display name so nobody can pass for you.
• A profile picture only if you upload one: cropped to 256 px with location and camera details removed, shown only to you and the site's admins, and deleted when you remove it or your account.
• Your Google or Discord account id and username, so the same account signs you in next time. We don't keep access to your Google or Discord account: the sign-in token is thrown away straight after.
• Your authenticator secret if you turn on two-factor sign-in. We never see your password: Google and Discord check it.
• The browsers you're signed in on (browser type, IP address, last activity) and recent security events, so you can review them under Security.
• How you use the tools: which pages you open and when, how long you spend on them, and what you click or filter there (button and row labels, filter values; never what you type into password, email or text boxes), how fast pages load, your screen width, and errors or repeated clicks that suggest something didn't work. It shows on your History page, puts the things you use first on your Home page, and tells us what to improve. It stays on our own systems, is kept for a year, and you can turn it off or clear it in your account.
• Bets you choose to track with “Track” on a tool: the game, market, side, book, odds, the stake if you enter one, when you tracked it, which tool it came from, and how it settled. It's shown on your My bets page and, added up per tool across members, tells us how the tools do. You can remove any bet there, and it's deleted with your account.
• Feedback you send with “Send feedback”, with the page you sent it from, kept until you delete your account.
• What you tell us when you set up your account: where you live (country and state or province), whether you're 21 or older, the betting apps and books you have, and, if you choose to answer, how you found us and roughly how much you bet with. We use it to show you only the sign-up offers you can claim and to decide what to build. You can change it under Settings.
• Where you first came to the site from (the referring site or a referral code in the link), recorded when you first visit, and the country your connection comes from.
• Whether you want the MAXED newsletter about new tools and sign-up offers (off unless you tick it). It goes to the email Google or Discord gave us, and you can stop it any time under Settings or from the email.
• Copy protection: how many requests your account makes each day and from how many devices, and a short record when use looks automated, kept for a day. Text you copy from the pages carries an invisible mark tied to your account, so a leaked copy can be traced to it. If an account is suspended we keep the reason.
• Your settings.

Cookies and browser storage

• Sign-in cookie. Keeps you signed in for up to 30 days and is removed when you sign out. The site can't work without it.
• Sign-in hand-off cookies. Last a few minutes while you go to Google or Discord and come back.
• First-visit cookie. If you arrive from another site or a tagged link before signing in, it remembers that site, the link's tags and the page you landed on, for up to 60 days. If you then make an account, we save it as where you came from. It isn't used to follow you on other sites.
• Browser storage. Some tool pages save your filters and choices in your own browser so they're there next time. That stays on your device.
• Our network provider may set a security cookie of its own to tell people from bots.
• We set no advertising cookies. If ads are turned on, see Ads below.

We don't track you across other sites, so there is nothing for a browser's “Do Not Track” signal to switch off, and the site doesn't change when it sees one.

Who else handles your data

• We don't sell your data or share it for advertising, and we don't give your account details (your email, name, username, settings or what you do on the tools) to advertisers.
• Cloudflare carries the traffic between your browser and our server and protects the site from attacks. To do that it handles your IP address and the pages you ask for, as our service provider. It also counts visits for us with a small script on each page (the page, the site you came from, your browser type and country, and how fast the page loaded), without cookies and without identifying you.
• Google and Discord. When you sign in with one of them, it learns that you signed in to MAXED, and tells us the email, name and account id listed above. What they keep is covered by their own privacy policies.
• Site staff can see account details, usage and feedback to run the site, fix problems and stop abuse.
• The law. We may disclose data if a law or court order requires it, or to protect MAXED and its members from fraud or abuse.
• A change of owner. If MAXED is sold or merged, your data passes to the new owner under this policy. We'll post a notice here first.

Pictures of players, teams and books come from MAXED's own servers: your browser isn't sent to the pick'em apps or any other image server to load them.

Where it's kept, and for how long

• Your data is kept on our own server in the United States, with a daily backup copy on a second machine we control. If you use MAXED from another country, your data is sent to and kept in the United States.
• Account details, settings, tracked bets and feedback: until you delete your account.
• Tool usage: one year.
• Signed-in browsers: until you sign out or the sign-in runs out (30 days). Security events: the newest 200.
• Copy-protection records: a day.
• Backups: 60 days. Anything deleted from the live site is gone from the last backup within 60 days.
• Server logs, which can include IP addresses, are overwritten as they fill up.

Ads

MAXED may show ads, now or at any point in the future, through Google AdSense. When ads are on:

• Google and its ad partners load the ads straight into your browser. They may use cookies, your IP address and similar technology to choose ads, limit how often you see the same one, and measure them, based on this page and on what Google already knows from your visits to other sites. That data is collected by Google under Google's own policies, not by us, and we don't send Google anything from your account.
• You can turn off personalised ads at Google's Ad Settings, or opt out of many ad networks at aboutads.info. You'll then see ads based only on the page you're on.
• In the UK, the European Economic Area and Switzerland we ask for your consent before personalised ads or ad cookies are used, and you can change your choice at any time. In US states with privacy laws that let you opt out of targeted advertising, you can do so the same way.

Your choices and rights

• See and change your details under Profile and Settings. History shows the tool usage we hold, and you can turn that tracking off or clear it in your account.
• Delete. Account → Security → Delete account removes your account, settings, history, usage, tracked bets, feedback and picture from the live site straight away. Backup copies are overwritten within 60 days.
• Newsletter. Off unless you tick it; stop it any time under Settings.
• A copy of your data, or a correction. Ask us with “Send feedback” and we'll send it or fix it within 30 days.
• We won't treat you differently for using any of these.

If you're in the UK or Europe. We use your data to run your account and the tools you asked for (our agreement with you); to keep the site secure, stop copying and abuse, see where visitors come from and understand how the tools are used (our legitimate interests); and, only with your consent, for the newsletter and personalised ads. You have the right to see, correct, delete, restrict or object to our use of your data, to get a copy you can take elsewhere, and to withdraw consent at any time. You can also complain to your data protection authority; in the UK that is the Information Commissioner's Office (ico.org.uk).

Age

MAXED is for people 21 and older and is not meant for children. We don't knowingly collect data from anyone under 18. If you believe a child has made an account, tell us and we'll delete it.

Security

The site is served over an encrypted connection. We never see your Google or Discord password, we keep sign-in tokens only in scrambled (hashed) form, and you can add two-factor sign-in under Security. No site is perfectly secure; if a breach ever affects your data, we'll tell you as the law requires.

Changes

When this policy changes, we post the new version here and change the date at the top.