Who we are
Comeback Betting is an informational and entertainment product that tracks live sports comebacks and can send you phone alerts. It is not a sportsbook: it does not accept wagers or hold betting funds. The “I took this bet” ledger and any dollar figures shown are self-reported and hypothetical. We do charge for an optional subscription, which is processed by Stripe — see Subscription and payment data below.
Information we collect
Account information
- Username you choose (shown publicly only if you opt in to the leaderboard).
- Password, stored only as a salted one-way hash — never in plain text, and never readable by us.
- A randomly generated personal alert topic used to deliver your notifications.
- An age affirmation: that you confirmed you are 21 or older, and the time you did so.
- An email address, if you add one, used only to verify your account and to send password resets — never for marketing.
Subscription and payment data
If you subscribe, we never see or store your card details. Payment is handled entirely by Stripe on Stripe's own hosted page; your card number never reaches our servers. What we store is only what we need to know whether your alerts should be switched on: your subscription status, the date your current period is paid through, whether you have claimed your free month, and the Stripe customer and subscription identifiers that link your account to your record at Stripe.
Preferences and activity
- Your alert and Lab settings (which sports, teams, odds windows, and formulas you choose).
- Your self-reported bet ledger: the picks you tap “I took this bet” on, the odds locked at that moment, timestamps, and the settled result. No money is involved.
Technical data
- Standard server logs, which may include your IP address, request time, and browser user-agent, kept for security and debugging.
- One essential session cookie — signed, HttpOnly, and (in production) Secure — that keeps you signed in. We use no third-party analytics, advertising, or tracking cookies.
How we use it
- To operate your account and deliver the alerts you configure.
- To show your own bet record and, if you opt in, your leaderboard standing.
- To secure, maintain, and debug the service.
We do not sell your personal data, and we do not use it for advertising.
Who your data touches
- Push delivery (ntfy). Alerts are delivered through ntfy.sh, a third-party notification service we do not operate, so your alert content and your personal topic pass through their servers to reach your phone. Your topic name is a long random string that is not published anywhere and is not derived from your username, but anyone who learns it could read the alerts sent to it, so treat it like a password and share it only with your own devices. We send ntfy no other information about you. See ntfy's privacy policy.
- Payments (Stripe). If you subscribe, Stripe processes the payment and holds your card details under its own privacy policy; we receive only your subscription status and identifiers, never your card number. See Stripe's privacy policy.
- Email delivery. If you add an email address, verification and password-reset messages are sent through a third-party email provider.
- Sports data providers. We receive odds and scores from third-party feeds (The Odds API, ESPN, and RotoWire). We send them no personal data about you.
- Hosting/infrastructure. The service runs on servers rented from a third-party cloud hosting provider, which stores our data on our behalf. Encrypted database backups may be held by a third-party storage provider.
How long we keep it
- Settled bet records are automatically pruned after 45 days.
- Your account and its data are kept until you delete the account.
- Server logs rotate automatically by size rather than on a fixed calendar schedule: we keep only the current log file and a small number of recent ones, and older entries are overwritten continuously as new ones arrive. We do not archive logs long-term.
- Backups of the database may persist for a short period after deletion before they are cycled out, so a deleted account can briefly remain in a backup copy.
Your rights and choices
From your account page you can, at any time:
- Download your data — a full JSON export of your account and bet ledger.
- Delete your account — permanently removes your account, your bet ledger, and your leaderboard presence, and frees your alert topic. This is irreversible.
Depending on where you live (for example under the GDPR or CCPA/CPRA), you may have additional rights to access, correct, port, or restrict processing of your data. The export and delete buttons above cover access, portability, and erasure directly; for anything else, email us at comebackbettingapp@gmail.com and we will respond. We do not sell or share your personal data, and we do not use it for targeted advertising, so there is nothing to opt out of.
Security
Passwords are hashed, traffic is served over HTTPS in production, session cookies are signed and HttpOnly, and the site enforces a strict Content-Security-Policy. No system is perfectly secure, but we take reasonable measures to protect your information.
Children
Comeback Betting is intended only for adults 21 and older and is not directed to children. We do not knowingly collect data from anyone under that age.
Changes
We may update this policy; material changes will be reflected by the effective date above and, where appropriate, communicated to account holders.
Contact
Questions or data requests: ComebackBetting · comebackbettingapp@gmail.com.