Privacy

Data this site uses

Accounts use an email address, username and password hash maintained by WordPress. Login/session cookies and a signup security cookie are necessary for account access. Abuse controls use short-lived keyed hashes of IP addresses; hosting services may keep access logs.

Private records and Kalshi connections

Your manual bet records and league membership are stored on the server. A verified Kalshi Key ID and RSA private key are encrypted at rest, using a master key outside the web root. The private key is never returned to your browser after saving. Portfolio requests are read-only and account data is not deliberately cached. Disconnect removes the saved connection; revoke the key in Kalshi to invalidate it. SquadWager does not request sportsbook passwords.

Visibility and third parties

Private leagues are visible to members. Public league summaries and commissioner display names can be seen by signed-in members; member lists remain inside the league. ESPN serves score data and images. Kalshi receives signed portfolio requests only when you connect. Discord receives information when you follow its link or when an optional widget is enabled. External platforms have their own policies.

Retention and your rights

Owner to complete: contact for access/deletion requests, storage location, retention periods, hosting/backup policies, applicable privacy rights, subprocessors and incident notification. Deleting a user removes their tracker, encrypted connection and league memberships; leagues they commission are removed. Backups may require a separate retention policy.

New feature data notice — owner/legal review required

Favorites, alert settings, picks and friend-group membership are stored with your account. Public profiles are optional and display names only; published comments are visible after moderation. Following does not expose private trackers or connected-account credentials. Reports go to site moderators.

Browser push subscriptions are encrypted at rest. Notification delivery uses your browser’s push provider. Optional email alerts require address confirmation and can be disabled under Alerts. Signing out removes linked push devices. Notification records are retained for 30 days. Public Kalshi price samples are retained for 48 hours.

The installable app saves only its generic offline assets and up to seven date feeds of public scores on your device. It does not cache authenticated pages, private API responses, keys, bets, picks or profile settings. Clear browser site data to remove device caches. Delete-account requests and other privacy questions require an owner-provided contact method. This placeholder is not a reviewed legal policy.