Last updated: April 3, 2026
PromoGrind is operated by VaultSpark Studios ("we", "us", "our"). This Data Use Policy describes how we collect, store, process, and protect personal data in connection with your use of PromoGrind at promogrind.com/.
For our full Privacy Policy, see Privacy Policy.
| Data Type | What It Is | Where Stored | Why |
|---|---|---|---|
| Calculator inputs | Numbers you type into calculators | Your browser only (never sent) | To compute results locally |
| App preferences | Dark mode, compact mode settings | Browser localStorage | To remember your preferences |
| Page visit analytics | Page URL, referrer, approximate country, device type | Plausible (no personal ID) | To understand which features are used |
| Data Type | What It Is | Where Stored | Why |
|---|---|---|---|
| Email address | Your email | Supabase (auth table) | Account creation, login |
| Password hash | Encrypted password (never plain-text) | Supabase (auth table) | Authentication |
| Bet tracker data | Sportsbook accounts you track | Supabase (promogrind_data.tracker JSONB) | Cross-device sync |
| P/L ledger data | Bet entries, outcomes, dates | Supabase (promogrind_data.ledger JSONB) | Cross-device sync, reporting |
| Vault Points balance | Earned points and streak data | Supabase (user_metadata) | Loyalty features |
| Leaderboard data | Your anonymized P/L (opt-in only) | Supabase (leaderboard view) | Community feature |
| Community promos | Promos you submit publicly | Supabase (community_promos) | Community feature |
| Wins wall entries | Win cards you share publicly | Supabase (wins_wall) | Social proof / community |
| Data Type | What It Is | Where Stored | Why |
|---|---|---|---|
| Subscription status | Active/inactive, tier, dates | Supabase (user_metadata via Stripe webhook) | Feature gating |
| Payment info | Card number, billing address | Stripe only (we never see or store this) | Payment processing |
| Stripe customer ID | Stripe's internal reference ID | Supabase (user_metadata) | Subscription management |
| Service | Purpose | Data Shared | Their Privacy Policy |
|---|---|---|---|
| Supabase | Database, auth, edge functions | Account data, app data | supabase.com/privacy |
| Stripe | Payment processing | Email, payment details | stripe.com/privacy |
| Resend | Transactional + newsletter email | Email address | resend.com/privacy |
| Plausible Analytics | Privacy-friendly web analytics | Page URL, referrer, approximate location, device type (no cookies, no personal ID) | plausible.io/privacy |
| Google Fonts | Typography (Space Grotesk) | Your IP address (Google's CDN) | Google Privacy Policy |
| Anthropic (Claude) | AI features (PromoChat, Advisor) | Text inputs you provide to AI features | anthropic.com/privacy |
PromoGrind does not use advertising cookies or tracking cookies.
sb-). This is how your session persists between visits.| Data Type | Retention Period |
|---|---|
| Account and app data (tracker, ledger) | For as long as your account is active + 30 days after deletion request |
| Auth session tokens | Until you log out or token expires (~1 week) |
| Browser localStorage data | Until you clear your browser data |
| Payment records (Stripe) | As required by Stripe's financial record obligations |
| Newsletter subscriptions | Until you unsubscribe |
| Community content (public wins, promos) | Until you request removal |
| Analytics data (Plausible) | Aggregate, anonymized — retained indefinitely |
Under the California Consumer Privacy Act (CCPA), California residents have additional rights:
VaultSpark Studios does not sell, rent, or trade your personal information to third parties for their commercial purposes. We never have and we don't intend to.
To exercise any CCPA rights, email [email protected] with the subject "CCPA Request". We will respond within 45 days.
If you are located in the European Union or United Kingdom, you have rights under GDPR/UK GDPR including:
Note: PromoGrind is primarily a US market product. If you are located in the EU/UK, you use it at your own discretion. Email [email protected] for GDPR requests.
We take reasonable measures to protect your data:
In the event of a data breach affecting your personal information, we will notify affected users as required by applicable law.
If you submit content to community features (Community Promos, Wins Wall, Leaderboard), note that:
PromoGrind is not intended for users under 18 years of age (21+ in most US states). We do not knowingly collect personal data from minors. If you believe a minor has registered an account, contact us immediately at [email protected].
We may update this policy to reflect changes in our data practices or legal requirements. The "last updated" date at the top of this page will reflect when changes were made. Material changes will be communicated via email to registered users where feasible.
Data and privacy inquiries: [email protected]
General support: [email protected]