Legal
Privacy Policy
Effective Oct 27, 2026 · Applies to the United States
The short version. We collect your email address, the sports you follow and your 21+ confirmation, and we use them only to run your account and send the emails you choose. We do not sell or share your personal information. We run no advertising trackers and no third-party analytics; we only note which days signed-in members visit. The full text below controls.
- 1. Who we are
- 2. What we collect
- 3. We do not sell your data
- 4. Opt-out requests
- 5. Global Privacy Control
- 6. Service providers
- 7. Your rights
- 8. Security
- 9. Children
- 10. Changes
- 11. Contact
1. Who we are
CacheOut is operated by Cache Out, LLC, a Delaware limited liability company (“we”, “us”). We publish probability estimates for professional and college sports, and in-play cash-out signals for American football. We are not a sportsbook: we take no bets, hold no funds, and are licensed to accept wagers nowhere.
The service is offered only in the United States. We do not knowingly offer it to residents of the European Economic Area, the United Kingdom or Switzerland, and signups from those regions are refused. The service is built for US sports and US sportsbooks, and this policy is written against US law.
Privacy contact: privacy@cacheout.net.
2. What we collect
Everything we hold about you is in this table, including where in our database it lives. The final column says whether it is sold or shared; for every category the answer is no.
| Category | What it is | Why | Kept for | Sold or shared? |
|---|---|---|---|---|
| Identifiers | Email address, and the account identifier generated for it (app_accounts.email, .id). | To identify the account, sign you in, and send the alerts and service email you ask for. | For the life of the account, then 30 days after deletion. | never |
| Commercial information | Plan tier, subscription and trial status and dates, and whether a subscription is set to cancel (app_accounts.plan, .billing_status, .trial_started_at, .trial_ends_at, .current_period_end, .cancel_at_period_end). CacheOut is free, so for every account these now read as no plan and no subscription. | None now. They were kept for paid plans that CacheOut no longer offers, and remain part of the account record. | For the life of the account. | never |
| Account status | Membership state and when it last changed (app_accounts.status, .status_changed_at). | To decide what the account may see. | For the life of the account. | never |
| Authentication credentials | A one-way hash of your password, and a signed session cookie (app_accounts.password_hash). We never hold the password itself. | To sign you in and keep you signed in. | For the life of the account. The session cookie expires on sign-out. | never |
| Payment information | None. CacheOut is free and takes no payment, so we collect no card or payment details. | Not applicable. | Not applicable. | never |
| Communications data | Which service emails and cash-out alerts were sent to you and when (app_email_log, alert_deliveries), your cash-out alert preference, daily alert limit and which alerts you want (app_accounts.alerts_opt_in, .max_alerts_per_day, .min_live_prob), and delivery results from our email provider. | To send what you asked for, not to send it twice, and not more often than you chose. | 24 months from the date each message was sent, then deleted. | never |
| Alert feedback | If you answer "Was cash-out available?" from an alert email: your answer (yes, no, or you didn't bet), which alert it was about, and when (alert_feedback). | To learn when alerts arrive while a sportsbook's cash-out is unavailable, and time them better. | For the life of the account; deleted with it. | never |
| Referrals | The code in your invite link, and if you joined through someone's link, which account invited you (app_accounts.referral_code, .referred_by). | To know how people find CacheOut. Nothing is paid or rewarded for an invite. | For the life of the account; deleted with it, and cleared from accounts you invited. | never |
| Picks you took | If you mark a pick with "I took this": which pick it was and when you marked it (member_picks). No amounts are attached to a marked pick. | To show you your own record on the picks you followed, on your account page and in the weekly recap email. | For the life of the account; deleted with it. | never |
| Your bet log | If you log a bet on My bets: the game and pick as you typed them, the odds, your stake, the win chance and cash-out cut you entered, what you decided (held, cashed or partly cashed) with any cash-out amount, the result, whether it was your team, and which game we called it is linked to (member_bets); any cash-out targets you set, when one was reached and whether it was sent (cashout_targets); and, if you link Telegram, your chat id with the bot (app_accounts.telegram_chat_id) until you unlink it. | To show you your own bets graded by what each decision was worth when you made it, and to email you when a target you set is reached. It is not shown to anyone else, never used to target you, and never shared. | For the life of the account, or until you delete the bet; deleted with it. | never |
| Visits | Which days you opened the site while signed in, one entry per day (member_visits), and a cookie holding the date of the last one (co_seen) so it is noted once a day. Only the day, not what you looked at. | To see whether members come back after signing up, so we can tell what keeps CacheOut useful. | 400 days, then deleted; all of it is deleted with the account. | never |
| Internet or network activity | Server request logs kept by our hosting provider, which include IP address, user agent and timestamps. Apart from the visit days above, we run no analytics, no advertising pixels and no third-party trackers. | Security, abuse prevention, and diagnosing faults. | 30 days, by the hosting provider. | never |
| Inferences | None. We do not build profiles, score members, or infer characteristics about you. Every probability on this site is about a football game, not about a person. | Not applicable. | Not applicable. | never |
| Preferences | What you tell us at sign-up: that you are 21 or older and when you confirmed it, the sports you want to follow, and — for accounts made before CacheOut was free — the plan you said you would like (app_accounts.age_confirmed_at, .sports, .plan_preference). | To meet the age requirement, and to send alerts and summaries for the sports you chose where we offer them (cash-out alerts cover NFL, college and the NBA; the NBA, NHL, MLB and soccer get a pre-game email, and golf is board-only). | For the life of the account, then 30 days after deletion. | never |
We do not collect your name unless you give it to us, and we do not ask for your date of birth. No bet is ever placed here, and the only things we record about your betting are what you choose to tell us: the picks you mark as taken, and whether a cash-out was available when an alert arrived. We run no analytics package, no advertising pixel and no third-party tracker of any kind; the visit days in the table above stay in our own database. Besides the signed session cookie that keeps you logged in, we set two small cookies of our own: co_ref keeps an invite link's code for 30 days so sign-up can credit it, and co_seen holds the date of your last visit so it is noted once a day.
3. We do not sell your data
Until Oct 5, 2026, an earlier version of this policy allowed us to sell your email address, plan tier and account status to third parties. That stopped on Oct 5, 2026. We say so here because privacy law looks back twelve months, and you are entitled to know what the previous terms allowed.
If we ever wanted to sell or share personal information again, we would change this policy first, email every member at least 30 days before it took effect, and it would not apply to anyone who has opted out or whose browser sends a Global Privacy Control signal.
4. Opt-out requests
There is nothing to opt out of today. The Do Not Sell or Share My Personal Information form still works: no account needed and no reason required. We record the request, and it stays in force if this policy ever changes.
An authorized agent may submit the request on your behalf. Email privacy@cacheout.net with written proof of authorization.
5. Global Privacy Control
We honor the Global Privacy Control signal. If your browser or extension broadcasts GPC when you create an account, we record it as an opt-out at that moment. Nothing is sold today, so it changes nothing now; it means you would stay out if that ever changed.
6. Service providers
These companies process data to do a specific job for us. They may use it only for that job, which is why disclosing it to them is not a sale:
| Provider | What they do | What they receive |
|---|---|---|
| Vercel | Hosting and request logs | IP address, user agent, request metadata |
| Supabase | Database | Everything in the account record |
| Resend | Email delivery | Email address and message contents |
| Telegram | Cash-out target alerts, for members who link their chat | Your Telegram chat id and the alert's contents. Posts to our public channel carry no personal data. |
| Anthropic | AI features — news summaries and the chat assistant | Publicly available sports news, and whatever you type into the assistant. Your account record is not sent. |
7. Your rights
Residents of California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Florida and every other state with a comprehensive privacy law have the rights below. We extend them to every member regardless of state, because operating two standards would mean guessing where you live:
- To know what we hold, where it came from, why we have it, and who we disclosed it to.
- To a copy of it in a portable format.
- To correct anything inaccurate.
- To delete it, subject to records we must keep for tax and accounting. You can delete your account and its data yourself, at any time, from your account page.
- To opt out of any sale or share — there is none, and section 4 records the request anyway.
- To be free from retaliation for exercising any of these. Nothing about your price or access changes.
- To appeal a refusal. If we decline a request we will say why, and you may reply to that message to have it reviewed again.
Email privacy@cacheout.net. We respond within 45 days and will tell you if we need the single 45-day extension the statutes allow. We verify a request by asking you to confirm from the address on the account — we will never ask for a government ID or a photograph to prove who you are.
We do not use your data for automated decision-making or profiling, and we do not engage in targeted advertising as the state statutes define it.
8. Security
Passwords are stored as one-way hashes and never in readable form. Card details never reach our servers. The database refuses direct access: every read and write goes through a named function, and the member table has row-level security with no public policies at all. Sessions are carried in a signed, HTTP-only cookie.
No system is perfect. If we discover a breach affecting your personal information we will notify you and the relevant authorities within the deadlines the law sets.
9. Children
This service is for adults 21 and over, and sign-up asks you to confirm it. We do not knowingly collect personal information from anyone under 21, and we have never knowingly sold the personal information of a person under 16. If you believe someone under 21 has created an account, email privacy@cacheout.net and we will delete it.
10. Changes
We will post any change here and update the effective date. A change that would sell or share personal information, or use it for a new purpose, will be emailed to every member at least 30 days before it takes effect, and will not apply retroactively to data already collected.
Latest change: Oct 27, 2026: you can now log the bets you placed (game, pick, odds, stake, any cash-out and the result) on My bets, to grade your own decisions, and set cash-out targets on them that we email you about (and send to your Telegram, if you link it). It is not shown to anyone else; it is stored with your account and deleted with it.
11. Contact
privacy@cacheout.net, addressed to Cache Out, LLC, 131 Continental Dr, Suite 305, Newark, DE 19713. See also the Terms of Service.