Legal
Privacy Policy
Effective 30 September 2026 · Applies to the United States
The short version. We collect your email address, your plan, and whether your account is active. We sell and share those three things with third parties, and we are paid for it. We never sell your password, your payment details, your messages or your activity logs. We run no advertising trackers and no analytics. You can stop the sale at any time, without signing in and without giving a reason — Do Not Sell or Share My Personal Information. The full text below controls.
- 1. Who we are
- 2. What we collect
- 3. We sell some of your data
- 4. How to stop it
- 5. Global Privacy Control
- 6. Service providers
- 7. Your rights
- 8. Security
- 9. Children
- 10. Changes
- 11. Contact
1. Who we are
CacheOut is operated by CacheOut LLC, a Delaware limited liability company (“we”, “us”). We publish probability estimates and in-play cash-out signals for American football. We are not a sportsbook: we take no bets, hold no funds, and are licensed to accept wagers nowhere.
The service is offered only in the United States. We do not knowingly offer it to residents of the European Economic Area, the United Kingdom or Switzerland, and signups from those regions are refused. This is a direct consequence of section 3 — selling personal information to a third party is difficult to do lawfully under the GDPR without separate consent from every member, and declining to serve those users is the honest answer rather than the technically arguable one.
Privacy contact: privacy@cacheout.net.
2. What we collect
Everything we hold about you is in this table, including where in our database it lives. The final column is the one that matters most, and it is the subject of the next section.
| Category | What it is | Why | Kept for | Sold? |
|---|---|---|---|---|
| Identifiers | Email address, and the account identifier generated for it (app_accounts.email, .id). | To identify the account, sign you in, and send the alerts and service email you ask for. | For the life of the account, then 30 days after deletion. | SOLD |
| Commercial information | Plan tier, subscription and trial status and dates, and whether a subscription is set to cancel (app_accounts.plan, .billing_status, .trial_started_at, .trial_ends_at, .current_period_end, .cancel_at_period_end). CacheOut is free, so for every account these now read as no plan and no subscription. | None now. They were kept for paid plans that CacheOut no longer offers, and remain part of the account record. | For the life of the account. | SOLD |
| Account status | Membership state and when it last changed (app_accounts.status, .status_changed_at). | To decide what the account may see. | For the life of the account. | SOLD |
| Authentication credentials | A one-way hash of your password, and a signed session cookie (app_accounts.password_hash). We never hold the password itself. | To sign you in and keep you signed in. | For the life of the account. The session cookie expires on sign-out. | never |
| Payment information | None. CacheOut is free and takes no payment, so we collect no card or payment details. | Not applicable. | Not applicable. | never |
| Communications data | Which service emails were sent to you and when (app_email_log), your cash-out alert preference (app_accounts.alerts_opt_in), and delivery results from our email provider. | To send what you asked for, and not to send it twice. | 24 months from the date each message was sent, then deleted. | never |
| Internet or network activity | Server request logs kept by our hosting provider, which include IP address, user agent and timestamps. We run no analytics, no advertising pixels and no third-party trackers. | Security, abuse prevention, and diagnosing faults. | 30 days, by the hosting provider. | never |
| Inferences | None. We do not build profiles, score members, or infer characteristics about you. Every probability on this site is about a football game, not about a person. | Not applicable. | Not applicable. | never |
| Preferences | What you tell us at sign-up: that you are 21 or older and when you confirmed it, the sports you want to follow, and — for accounts made before CacheOut was free — the plan you said you would like (app_accounts.age_confirmed_at, .sports, .plan_preference). | To meet the age requirement, and to send alerts and summaries for the sports you chose where we offer them (golf is board-only for now). | For the life of the account, then 30 days after deletion. | never |
We do not collect your name unless you give it to us, we do not ask for your date of birth, and we do not record anything about bets you place — we could not, as no bet is ever placed here. We run no analytics package, no advertising pixel and no third-party tracker of any kind. The only cookie we set is the signed session cookie that keeps you logged in.
3. We sell some of your data
What we sell: your email address and account identifier; your plan tier and subscription and trial status; and your account status with the dates it changed.
What we never sell, under any circumstances: your password or its hash; your payment card details or anything derived from them; the contents of your messages to us or the assistant; your IP address and request logs; and any inference about you — we build none.
CacheOut is free and takes no payment, so there is no payment data to sell.
What a buyer must agree to
A sale with no conditions attached is how an address ends up somewhere neither of us can account for. Every buyer is contractually required to:
- Honour every opt-out we pass on, and stop using the data when we tell them someone has opted out.
- Use the data only for the purposes named in the contract, and not resell it onward.
- Not attempt to re-identify, combine or enrich it against other sources to build a profile.
- Comply with the CCPA/CPRA and every applicable state privacy law in their own right.
- Delete the data when the contract ends.
We have not sold and will not sell the personal information of anyone we know to be under 16. See section 9.
4. How to stop it
Do Not Sell or Share My Personal Information — one form, one field, no account needed and no reason required. You do not have to sign in, and you do not have to be a member: if we hold anything for that address, the request applies to it.
It takes effect immediately and permanently. We will not ask you to reconsider for at least twelve months. Opting out costs you nothing: your price does not change, no feature is withdrawn, and no part of the service behaves differently. Members can also toggle it from your account at any time.
An authorised agent may submit the request on your behalf. Email privacy@cacheout.net with written proof of authorisation.
5. Global Privacy Control
We honour the Global Privacy Control signal. If your browser or extension broadcasts GPC when you create an account, you are opted out of the sale at that moment — you never enter it, rather than being removed from it later. You do not need to fill in any form, and we do not require you to sign in for the signal to count.
6. Service providers
These companies process data to do a specific job for us. They may use it only for that job, which is why disclosing it to them is not a sale:
| Provider | What they do | What they receive |
|---|---|---|
| Vercel | Hosting and request logs | IP address, user agent, request metadata |
| Supabase | Database | Everything in the account record |
| Resend | Email delivery | Email address and message contents |
| Anthropic | AI features — news summaries and the chat assistant | Publicly available sports news, and whatever you type into the assistant. Your account record is not sent. |
Some pages carry a clearly labelled affiliate link to a sportsbook. Following it tells that operator you arrived from us, and their privacy policy governs from that point. We are paid a commission for signups; it never influences a probability, price or pick on this site.
7. Your rights
Residents of California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Florida and every other state with a comprehensive privacy law have the rights below. We extend them to every member regardless of state, because operating two standards would mean guessing where you live:
- To know what we hold, where it came from, why we have it, and who we disclosed it to.
- To a copy of it in a portable format.
- To correct anything inaccurate.
- To delete it, subject to records we must keep for tax and accounting.
- To opt out of the sale or share — section 4.
- To be free from retaliation for exercising any of these. Nothing about your price or access changes.
- To appeal a refusal. If we decline a request we will say why, and you may reply to that message to have it reviewed again.
Email privacy@cacheout.net. We respond within 45 days and will tell you if we need the single 45-day extension the statutes allow. We verify a request by asking you to confirm from the address on the account — we will never ask for a government ID or a photograph to prove who you are.
We do not use your data for automated decision-making or profiling, and we do not engage in targeted advertising as the state statutes define it.
8. Security
Passwords are stored as one-way hashes and never in readable form. Card details never reach our servers. The database refuses direct access: every read and write goes through a named function, and the member table has row-level security with no public policies at all. Sessions are carried in a signed, HTTP-only cookie.
No system is perfect. If we discover a breach affecting your personal information we will notify you and the relevant authorities within the deadlines the law sets.
9. Children
This service is for adults. Sports betting is restricted to 21 and over in most of the United States and to 18 in a few, and nothing here is intended for anyone under 18 in any case. We do not knowingly collect personal information from anyone under 18, and we have never knowingly sold the personal information of a person under 16 — which California law forbids without opt-in consent. If you believe a minor has created an account, email privacy@cacheout.net and we will delete it.
10. Changes
We will post any change here and update the effective date. If a change would broaden what we sell beyond the three categories in section 3, we will email every member before it takes effect and it will not apply retroactively to data already collected.
11. Contact
privacy@cacheout.net, addressed to CacheOut LLC. See also the Terms of Service.