Privacy policy

Krishan Thushyanthan, carrying on business as WynFynd runs WynFynd and is responsible for your personal information. Its owner is the person accountable for privacy. Privacy questions and requests: support@wynfynd.com.

WynFynd is a business name registered in Ontario under the Business Names Act, BIN 1001798448.

• Your email address, to sign you in and to send account messages.
• Your settings, such as the betting sites you use and the ones you want us to add. Also your province, time zone, betting money (bankroll), Bet size, limits, which alerts you want and your quiet hours.
• When you confirmed you are 19 or older, and when you last unsubscribed. Whether you said yes to emails, and if you did, when you said it, which version of the words you agreed to and the screen where you said yes.
• Bets you log, and the money and limits you enter for each site. My bets, Bet next and the Each site card use them.
• Limits you tell us with Site took less? on a ticket, or with Site limited me after you tap Skip: the site, the game and bet, the price, the amount, how long before the start it was, and when you told us. A ticket also asks whether you set that limit yourself at the site. The bot does not ask, so a limit you send in Telegram is saved as a limit the site set. We use them to size the amounts on your tickets. A max you save this way can also become your max at that site, which alerts and Bet next use.
• The alerts and daily summaries we sent you, and where we sent them. Also whether you logged the bets or tapped Skip in Telegram, and any reason you picked. We use what you tapped to improve the score. If you pick Site limited me, the bot also asks for your new limit. If you pick Price was wrong, it also sends us a price report.
• If you report a wrong price: which bet it was, the site, what was wrong and when. In Telegram you do this with Skip, then Price was wrong. A ticket on the website may also show Wrong price under each bet. We use reports to find sites whose prices are often wrong.
• If you connect Telegram: your Telegram chat id and username, so the bot can send you alerts.
• If you connect Discord with a webhook: the webhook address you paste. If you connect your Discord account: your Discord user id and the direct-message channel between you and our bot. We use them to add you to our Discord server, so our bot can send you alerts as direct messages, and to give the Pro role when your plan has it.
• If you turn on phone or computer alerts: the push subscription your browser gives us (an address and keys) and your browser and device type.
• If you pay: your plan, billing status, trial and renewal dates, and your Stripe customer id. Payments go through Stripe. We never see or store your card number. If you pay with Apple Pay or Google Pay, your card goes to Stripe in a form only Stripe can read, and we never see the card number either. With Apple Pay in Chrome, Edge or Firefox, it passes through our server on the way, with your card's type and last 4 digits, and our server keeps none of it. For the reminder before a trial ends, Stripe tells us the last 4 digits of your card.
• If you cancel, pause or change your plan in our cancel steps: the reason you picked, anything you typed in the box, which offer we showed you, what you chose and when. Answering is optional. Before we store what you typed, we remove anything that looks like a card number, email address or key.
• If you start a free trial: one-way codes made from your email address, your card and your IP address, so each person gets one free trial. Stripe also holds the IP code with your new plan, usually for a few seconds, until we record the trial or stop it. Then we ask Stripe to remove it from your plan. When you look at or start a paid plan while signed in, we check your email address and IP address against these codes. We also ask Stripe whether your email address had a plan before.
• If you take a pause or a free month: one-way codes made from your email address and your card, so each person gets one pause or free month every 12 months, also on a new account. When you open the cancel steps on a monthly plan, we check your email address and card against these codes.
• If you sign in with Google: your email address, your Google account id, and the name and profile picture link Google shares with it. Our sign-in provider stores them with your account. We only use the email address.
• If you sign in with Apple: your email address, or the private relay address Apple makes if you choose Hide My Email, and your Apple account id. Apple may also share your name the first time, if you let it. Our sign-in provider stores them with your account. We only use the email address.
• If you write to us: your email address and what you wrote, so we can answer.
• Basic technical data our hosting providers record, such as IP addresses and browser type, to keep the service running and secure. Our website also holds your IP address in memory for a while, to stop too many requests from one address.

• We do not sell or rent your information.
• We do not use advertising or analytics trackers.
• We do not share your bets or your settings with any betting site.
• We do not send your information to the companies that supply our prices.
• We do not send your cancel reason, or what you typed, to Stripe.

We use it to run WynFynd:

• Sign you in and keep the service secure.
• Send the alerts you asked for.
• Show only the betting sites we list as legal in your province, the plans you can buy there, and your province's help line.
• Work out bet amounts from your betting money and limits.
• Show My bets and Bet next.
• Charge for paid plans and give each person one free trial.
• Improve the score and find sites whose prices are often wrong.
• Learn why people cancel, and give each person at most one pause or free month every 12 months.

We email the daily summary or news only if you ticked the box to say yes. Some emails are part of your account and need no yes, such as your sign-in code and notes about your free trial or your plan. Summary, trial and plan emails have an unsubscribe link. Once you use it, we send you no more of them.

These companies help us run WynFynd, and some of your information passes through them:

• Supabase: our database and sign-in, including the emails with your sign-in code.
• OVHcloud: the server that runs our website, price checks and alerts.
• Cloudflare: carries traffic to our website, protects it from attacks, and passes the emails you send us on to our inbox. On the sign-in page it may also check that you are a person.
• Stripe: payments and billing.
• Resend: sends our emails.
• Telegram: delivers alerts, summaries and reminders, if you connect it. We also get a short note on our own Telegram when you start a trial, make your first payment, cancel, pause, resume or switch your plan, take a free month, or have a billing problem. Each note has your email address, and your plan or subscription. A note about a cancel, a pause or a free month also has the reason you picked, but never what you typed.
• Discord: delivers alerts, if you connect it, as direct messages from our bot or to a webhook you paste. It also handles the link to your Discord account and the Pro role on our Discord server, if you use them.
• Google: sign-in, if you choose it. Google also runs the inbox where your emails to us arrive.
• Apple: sign-in, if you choose it. If you hide your email address with Apple, Apple passes our emails on to your inbox.
• Your browser's push service (Apple, Google, Microsoft or Mozilla): delivers phone and computer alerts, if you turn them on. Each alert is encrypted, so the push service cannot read it.

Telegram, Discord, Google, Apple and Stripe also have their own privacy policies, which apply when you use their services.

Our database is in Canada, at Supabase in Montreal. Some of the other companies keep data outside Canada, for example in the United States. The law there applies to it, and courts or the government there may be able to get it.

We keep your information while your account is open. After 120 days, we delete your alert history and our log of the short notes our Telegram bot sent you.

We keep your cancel answers while your account is open, and delete them after 24 months.

The limit reports you send with Site took less? on a ticket or Site limited me in Telegram are deleted after 90 days. Your max at each site, the one number per site that alerts use, stays until you change it or delete your account.

When you delete your account on your Account page, we cancel any paid plan. Then we delete your sign-in record, profile, settings, Telegram and Discord links, bets, money at each site, limits, limit reports, alert and summary history, price reports, cancel answers and devices.

We keep a few things after that:

• Billing records, such as Stripe payment events, for 7 years, then we delete them. Tax law asks us to keep them at least 6 years. They hold ids, plans and amounts, not your email address or card.
• The one-way trial codes, for 24 months, so a new account gets no second free trial. The pause and free month codes, for 12 months, so a new account gets no second pause or free month in that time.
• Our own Telegram notes about trials, payments, cancels, pauses, free months, switches and billing problems, for up to 24 months, then we delete them.
• Stripe's own record of you and your payments, under Stripe's rules.
• Messages we already sent you, in your Telegram, Discord or inbox, until you delete them.
• If we added you to our Discord server, you stay in it until you leave. The Pro role comes off.
• Emails you sent us, in our inbox, for up to 24 months, then we delete them.

Our other providers may keep backups and logs for a short time under their own policies.

Under PIPEDA you can ask to see the personal information we hold about you. You can ask us to correct it or delete it, and you can withdraw your consent. You can do most of this yourself:

• See it: Download my data on your Account page. The file has your profile, settings, bets, money at each site, limits, the alerts and daily summaries we sent you, our bot's notes to you, your price reports, your limit reports, your cancel answers and your devices.
• Correct it: change your settings on the Alerts page and your money at each site on Money. In My bets, delete a wrong bet and add it again. To change your email address, use Change email on your Account page.
• Delete it: Delete account on your Account page.
• Stop emails: the unsubscribe link in a summary or trial email, or the Email part of the Alerts page.
• Stop alerts: under Where alerts go on the Alerts page, turn off or disconnect Telegram, Discord or a device. You can also send /stop to our Telegram bot.
• Unlink Discord: Unlink in the Discord part of the Alerts page. Our bot stops messaging you within a minute, and the Pro role comes off.

For anything else, such as your billing records, write to support@wynfynd.com. We answer within 30 days. If you are not happy with our answer, you can complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca.

We use no ad or tracking cookies. Our own cookies and browser storage only make the website work, and they never follow you to other sites:

• Sign-in cookies keep you signed in. They last up to 400 days, or until you log out (Log out on your Account page). Clearing this site's cookies in your browser signs you out too.
• Two cookies while you sign up or sign in: one carries your 19+ tick to your first sign-in, and one remembers which page to open next. Each lasts a day at most, and we remove them once you are signed in.
• A cookie while you connect Discord, to check that Discord's answer is really for you. It lasts 10 minutes.
• A cookie on the Odds page that remembers the market you last picked, for up to a year.
• A cookie that remembers your province if it is British Columbia or Alberta, so the bottom of each page shows your province's help line. It lasts up to a year.
• A cookie that remembers you closed the Back at your sites card. It lasts 2 days.
• In your browser's own storage: your light or dark choice and whether you closed the ticket tips. Also when you last looked at each list and which bets you opened, for the New and Seen marks, and the email you last asked a sign-in code for, so Log in can fill it in. These stay on your device.

If you use our Chrome add-on, it keeps the last ticket you sent it, the cards you hid and its settings on your computer. On a betting site it reads only the page address, to know which site it is. It sends nothing to our servers or anyone else.

Stripe sets its own cookies on our Plan page, where you pay, and on its checkout and billing pages. They help keep payments safe from fraud. Cloudflare, which protects our website, may set its own security cookies.

Your browser reaches WynFynd over an encrypted connection. Our servers reach our database and the companies that help us run WynFynd over encrypted connections too. The database lets each person read only their own account data. Our secret keys are kept out of the website code your browser downloads and out of our code repository. No system is perfectly secure. If a breach creates a real risk of harm to you, we will tell you and the Privacy Commissioner, as the law requires.

WynFynd is only for people 19 and older. We do not knowingly collect information from anyone younger. If you think we have, write to support@wynfynd.com and we will delete it.

If we change this policy in a way that matters, we will tell you before it applies. The date at the top shows the latest version.

Krishan Thushyanthan, carrying on business as WynFynd · support@wynfynd.com