Legal

Privacy Policy

Last updated: 8 July 2026

EdgeFinder ("we", "the app") is a sports-betting research and analytics tool. This policy explains what personal data we collect, why, the legal basis for it, how long we keep it, and the rights you have. EdgeFinder does not accept wagers and does not process payments.

1. Who is responsible (Controller)

The data controller is EdgeFinder, reachable at the contact address below. For any privacy question or to exercise your rights, contact privacy@edgefinder.ltd.

2. What we collect and why

Category	Data	Purpose	Lawful basis (GDPR)
Account	Username, salted+hashed password, date of birth / age-eligibility flag, account creation time	Authentication, age verification, account security	Contract; legal obligation (age)
Preferences	Staking & de-vig settings, bankroll figure, tracked bets, alert settings	Provide and personalize the tool	Contract
Trading (optional)	Kalshi API key ID and RSA private key (stored locally, server-side only), trade journal	Connect your Kalshi account at your request	Consent
Technical	IP address (for rate limiting, security, and location eligibility), session token	Security, abuse prevention, jurisdictional access control	Legitimate interest; legal obligation

We do not collect payment data. We do not use advertising trackers. Passwords are stored only as scrypt hashes; Kalshi credentials are stored in a local server-side file and are never sent back to the browser.

3. Who we share it with

We do not sell or share your personal information (as "sell"/"share" are defined under the CCPA/CPRA). To provide odds and market data, the server queries third-party data providers (e.g. The Odds API, SportsGameOdds, ESPN, Kalshi); those requests do not include your personal data. If you connect Kalshi, trades you authorize are transmitted to Kalshi under their own terms and privacy policy.

4. How long we keep it

Account & preferences: until you delete your account.
Sessions: up to 30 days, then expired and purged.
Trade journal: retained for record-keeping; [specify period].
Server logs: [specify period, e.g. 30 days].

5. Your rights

Depending on your location (GDPR, UK GDPR, CCPA/CPRA and similar laws) you may have the right to:

Access / know — request a copy of the personal data we hold about you.
Delete — request erasure of your account and associated data.
Correct — fix inaccurate data.
Port — receive your data in a machine-readable form.
Object / restrict — to certain processing.
Opt out — we do not sell or share personal information, so there is nothing to opt out of, but you may confirm this.

To exercise any right, contact privacy@edgefinder.ltd. We will respond within the timeframe required by applicable law.

6. Security

Passwords are scrypt-hashed with per-user salts; session tokens are stored hashed; sensitive files are written with restrictive permissions. When the server is exposed beyond your own machine it must run behind TLS. No system is perfectly secure, and you use the app at your own risk.

7. Age

EdgeFinder is intended only for adults of legal age in their jurisdiction (21+ in most US states for sports-betting content). We do not knowingly collect data from anyone under that age.

8. Changes

We may update this policy; material changes will be posted here with a new "last updated" date.