HaterPicks ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use the HaterPicks platform (the "Service").
We comply with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). By using the Service, you consent to the practices described in this policy.
1. Information We Collect
1.1 Information You Provide
- Account information: name, email address, and password when you register
- OAuth profile data: name and email from Google or Apple when you sign in via those providers
- Payment information: on the web, billing details processed securely by Stripe — we do not store your full card number. In the iOS and Android apps, subscriptions are billed by Apple or Google; we receive your subscription status, never your payment details
- Bet tracking data: bets you voluntarily log in the bet tracker
- Push notification tokens: device identifiers for delivering push notifications, if you enable them
- Support correspondence: emails or messages you send to us
1.2 Information Collected Automatically
- Usage data: pages viewed, features used, timestamps
- Device information: browser type, operating system, screen size
- IP address and approximate location
- Cookies and local storage: used for sign-in sessions and preferences, to record how you found us, and for product analytics (see section 4)
2. How We Use Your Information
We use your personal information to:
- Provide, maintain, and improve the Service
- Process payments and manage your subscription
- Authenticate your identity and secure your account
- Send transactional emails (account verification, password resets, billing receipts)
- Communicate service updates, changes to terms, or security notices
- Email account holders HaterPicks news and feature updates (see "Emails we send you" below)
- Process refund requests
- Detect and prevent fraud, abuse, and security threats
- Comply with legal obligations
Emails we send you. If you have a HaterPicks account, we may email you HaterPicks news and feature updates: new features, changes to how the Service works, and sports or tools we add. If you joined on or after 8 October 2026, we send these only if you ticked "Email me HaterPicks news and feature updates" when you signed up. If you are in the European Union, the European Economic Area, the United Kingdom or Switzerland, we send them only if you said yes, whenever you joined. We do not send emails on behalf of bookmakers or any other third party.
You can stop these emails at any time. Every one has an unsubscribe link, you can switch them off in the app under Profile › Notifications, or you can ask us at contact@haterpicks.com.au. We act on an unsubscribe request within five business days, and usually straight away. Unsubscribing does not stop the emails we need to send to run your account: sign-in codes, password resets, billing receipts, subscription confirmations and security notices.
We do not sell your personal information to third parties.
3. Third-Party Services
We share personal information only with the following categories of service providers, and only to the extent necessary:
- Supabase — authentication and database hosting (stores your account data)
- Stripe — payment processing (receives billing and card information)
- Vercel — application hosting
- Apple App Store / Google Play — in-app subscription billing in the iOS and Android apps
- RevenueCat — manages in-app subscriptions (receives your account ID and subscription status)
- Apple Push Notification service (APNs) — push notifications on iOS devices
- Firebase Cloud Messaging (Google) — push notifications on Android devices
- Google / Apple — OAuth authentication (only if you choose to sign in with these providers)
- Cloudflare — bot protection on sign-up and sign-in forms
- Anthropic — reads a bet slip image when you choose to scan one into the bet tracker
- Telegram — internal alerts to our own staff about account and billing events
- DigitalOcean — hosts our own servers in Sydney, which run the projection and odds engines, settle the bets you track, and send email
- Resend — delivers account email and, if you receive it, news email (receives your name, email address and the message)
- Upstash — rate limiting that protects the Service from abuse (briefly holds your account ID or IP address)
- PostHog — product analytics, hosted in the United States (receives the pages and screens you open, what you tap, where you came from, masked recordings of some sessions and your internal member number, never your name, email or anything you type into a form)
Each provider operates under their own privacy policy. We encourage you to review their policies. We do not share your information with advertisers or data brokers.
4. Cookies and Tracking
Essential cookies. We use cookies to keep you signed in and to run your account, such as remembering which country's version of the Service is yours. These are strictly necessary for the Service to work and cannot be switched off.
How you found us. The first time you visit, we save a cookie on your device that records how you arrived: the website that linked to us, the tags on the link (for example, a link in one of our social posts), the first page you opened and when. It lasts 90 days. A second cookie remembers the last tagged HaterPicks link you followed, and a third holds a random visitor number (for 180 days) so we can count visits before you sign up. If you create an account, we keep how you found us with it. These are our own cookies, and only we read them.
Product analytics. We use PostHog, an analytics service hosted in the United States, to understand how people use HaterPicks on our website and in our apps: which pages and screens are opened, which buttons are tapped, and where people came from. PostHog keeps a cookie and browser storage on your device to recognise it between visits. For signed-in members this is linked to an internal member number, never to your name or email address. We also record some sessions to see where the app is confusing. Those recordings hide everything typed into a form and members' names, and never include sign-in, payment or account settings screens. PostHog processes this data for us under its data processing agreement.
We use all of this only to understand and improve HaterPicks. We do not sell it, we do not use it for advertising, and we do not use third-party advertising cookies or cross-site tracking pixels.
In the European Union, the European Economic Area, the United Kingdom and Switzerland, we use only the essential cookies. When you visit from one of these places (we tell from your IP address), we do not set the "how you found us" cookies and we do not run PostHog, and if you signed up there we do not send PostHog your sign-up or subscription. One essential cookie remembers this for 30 days; it holds nothing about you.
5. Data Storage and Security
Your account data is stored in Sydney: our database (Supabase), the servers that run the website and apps (Vercel) and our own servers (DigitalOcean). Some of the service providers in section 3, including Stripe, Apple, Google, Anthropic, Resend and PostHog, may also process it outside Australia, mainly in the United States. Where that happens, we take reasonable steps, consistent with APP 8, to make sure they handle it in line with the APPs.
We implement industry-standard security measures, including encryption in transit (TLS), secure password hashing, and role-based access controls. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
6. Data Retention
We retain your personal information for as long as your account is active or as needed to provide the Service. If you close your account, we will delete or de-identify your personal information within 90 days, except where we are required to retain it for legal, tax, or compliance purposes.
Payment records are retained for 7 years in accordance with Australian tax law requirements.
7. Your Rights
Under the Australian Privacy Act, you have the right to:
- Access the personal information we hold about you
- Correct any inaccurate or outdated information
- Request deletion of your account and personal data
- Complain to the Office of the Australian Information Commissioner (OAIC) if you believe we have breached the APPs
To exercise these rights, contact us at contact@haterpicks.com.au. We will respond to access and correction requests within 30 days.
If you are in the European Union, the UK or Switzerland
HaterPicks is used around the world, so the EU and UK General Data Protection Regulations (GDPR) and the Swiss Federal Act on Data Protection apply to you as well. HaterPicks Pty Ltd, an Australian company, is the controller of your personal information. You can reach us at contact@haterpicks.com.au.
- Why we may use your information: to provide the Service you signed up for and your subscription (performing our contract with you); to keep it secure, prevent abuse and improve it (our legitimate interests); to keep records the law requires (legal obligation); and to send news and feature emails, only with your consent, which you can withdraw at any time.
- Your rights: to access, correct or delete your information; to restrict or object to how we use it; to receive it in a portable format; to withdraw consent; and to complain to your local data protection authority (in the UK, the Information Commissioner's Office).
- Transfers: your information is stored in Australia, and some service providers in section 3 process it in the United States. Where the law requires it, we rely on the European Commission's standard contractual clauses (and the UK addendum) or another lawful safeguard.
- Cookies: while you are in the EU, the EEA, the UK or Switzerland, we only use cookies that are strictly necessary to run the Service (section 4), so we do not ask for cookie consent.
We respond to a request about these rights within one month.
8. Children's Privacy
The Service is not directed at individuals under 18 years of age. We do not knowingly collect personal information from minors. If we become aware that we have collected information from a person under 18, we will delete it promptly.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email or an in-app notice. The "Last updated" date at the top of this page indicates when the policy was last revised.
10. Contact
If you have questions or concerns about this Privacy Policy or our data practices, contact us at contact@haterpicks.com.au.
You may also contact the Office of the Australian Information Commissioner at oaic.gov.au if you have an unresolved privacy complaint.