PRIVACY POLICY

Last updated: October 15, 2026

This Privacy Policy explains how AutoDFS (“we,” “us,” or “our”) collects, uses, and protects your information when you use AutoDFS (the “Service”). By using the Service, you agree to the practices described here.

1. Information we collect

We collect only what we need to operate the Service:

Account information: your email address, created when you sign up and used to authenticate you and manage your account.
Payment information: when you subscribe, payment is processed by Stripe. We do not collect or store your full card number or other sensitive payment details on our systems — Stripe handles that directly. We retain limited billing metadata needed to manage your subscription (for example, subscription status and a Stripe customer reference). Unless your browser sends a Global Privacy Control signal, each checkout record at Stripe also keeps the IP address and browser details from your checkout visit, your Whop visitor ID, and the page where you started checkout, so the sale can be matched to the ad that brought you (see Section 4).
Usage data: basic technical information such as log data and preferences (e.g. your selected platform and entry type, stored in your browser) used to keep the Service working and to remember your settings.
Advertising and measurement data: when you visit our website, third-party advertising pixels described in Section 4 receive information about that visit — including your IP address, browser and device information, the page you are on, referring URL, and cookie identifiers those platforms have set (the Whop pixel also computes a fingerprint of your browser and device). If you complete a purchase, they also receive the plan name, the subscription value, and the currency. This happens on our public pages as well as inside the Service (the Whop pixel runs on certain public pages only), and it happens whether or not you have an account with us.

2. The AutoDFS One-Click browser extension

The optional AutoDFS One-Click Chrome extension fills a bet selection you choose in the AutoDFS Terminal into your own logged-in slip on a supported site (PrizePicks, Underdog, or Betr), so you can review and submit it yourself. With respect to the extension specifically:

It never sees, reads, or stores your sportsbook usernames, passwords, or logins. The fill happens locally in the tab you are already signed into.
It never auto-submits — your pick lands in the native slip on the book’s own site, and you place the entry yourself.
The only thing it stores is a single local on/off preference (the popup toggle), kept on your device. The extension does not itself transmit your data to us or to any third party.
It uses no remote code and does not track your browsing; it acts only on the AutoDFS Terminal and the supported sites listed in its permissions.

3. How we use your information

We use the information we collect to:

provide, maintain, and secure the Service and your account;
process subscriptions and payments through Stripe;
communicate with you about your account, billing, and support requests;
operate, debug, and improve the Service;
measure the effectiveness of our advertising and show ads for AutoDFS on third-party platforms.

4. Cookies, pixels, and advertising technologies

We use cookies and similar technologies. Some are set by us and are necessary for the Service to work; others are set by advertising platforms and are used for advertising and measurement.

Our own cookies. A session cookie keeps you signed in. We also set short-lived cookies to remember which pricing offer you arrived on, whether an offer email brought you here, and which affiliate referred you (so that affiliate can be credited).

Third-party advertising pixels. Our website loads advertising pixels from the platforms below. These run on every page, including before you sign in, and each sets its own cookies and receives the data described in Section 1. We use them to measure which ads lead to signups and to build advertising audiences.

Meta Platforms (Facebook/Instagram) — the Meta Pixel, which receives page views and purchase events (plan, value, currency).
X Corp. (Twitter) — the X advertising pixel, which receives page views and purchase conversions (plan, value, currency).
TikTok — the TikTok Pixel, which receives page views.

The Whop pixel. Whop (whop.com), which runs some of our advertising, provides a pixel that loads only on our home page and on our /start, /deal, /pricing, /proof, and post-payment (/claim) pages, never inside the Service. It sets cookies named _wuid and _wuid_link (kept for up to two years), stores similar identifiers in your browser storage, and computes a fingerprint of your browser and device from their characteristics, which can recognize your browser again even after you clear cookies. It reads the advertising cookies Meta and TikTok set on our site. It records each page you view, including its full web address with any ad and referral parameters, the page that referred you, the page title, how long you stay, your IP address, and browser and device details such as screen size, language, and time zone. It also collects any name, email address, or phone number that appears in the page address or that you type into a form on those pages.

When you make a purchase, including one inside the Service, we report it to Whop with your email address, the amount and currency, the purchase time, an order reference, your Whop visitor ID, the page where you started checkout, the IP address and browser details from your checkout visit, and, if you came from a Meta ad, Meta’s click ID, so the sale can be matched to the ad that brought you. Whop may share this information with advertising platforms such as Meta (Facebook/Instagram). If your browser sends a Global Privacy Control signal, the Whop pixel does not load and we do not report your purchases to Whop.

Each platform processes that data under its own privacy policy and for its own purposes, which we do not control. You can limit this — see Section 7.

5. Third-party services

We rely on a small number of trusted third-party providers to run the Service. Your information is shared with them only as needed to provide their function, and each handles data under its own privacy policy:

Supabase — our database and authentication provider, which stores your account email and application data.
Stripe — our payment processor, which handles subscription billing and your payment details.
Vercel — our hosting provider, which processes request data (including IP addresses) to serve and secure the site.
Meta Platforms, X Corp., TikTok, and Whop — advertising and measurement partners, as described in Section 4.

We may also share information where required by law, to enforce our terms, or to protect the rights, safety, and security of our users and the Service.

6. We do not sell your data

We do not sell, rent, or trade your personal information for money.

We do, however, want to be straightforward about advertising: as described in Section 4, the advertising pixels on our website disclose information about your visit to Meta, X, TikTok, and Whop, and those platforms may use it for cross-context behavioral advertising. Under some privacy laws — including California’s — that activity is treated as “sharing” (and in some states, “selling”) personal information, even though no money changes hands. You can opt out at any time using the methods in Section 7.

We do not share your account details or your picks, slips, or betting activity with advertising platforms. When you make a purchase, we do share your email address so the sale can be matched to an ad: in plain text with Whop (see Section 4), and in hashed (scrambled) form with X and Meta.

If you are or were a paying member, we may also upload your email address to these advertising platforms to build advertising audiences: for example, to show our ads to people similar to our members, or to stop showing our ads to people who are already members. Whop receives it in plain text; the others receive it in hashed form. The platforms use it to match you to an account on their service and do not receive anything else about your membership. You can opt out at any time by emailing us (Section 7), and we will leave your email address out of future uploads.

7. Your advertising choices and California privacy rights

You can limit advertising tracking in any of these ways:

Global Privacy Control. If your browser or an extension sends a GPC signal, we treat it as a request to opt out of sharing your personal information for cross-context behavioral advertising.
Browser controls. Blocking or clearing third-party cookies in your browser settings will stop most of this tracking, but not the Whop pixel’s: its cookies are set by our own site, and its fingerprint does not rely on cookies, so clearing cookies does not stop it from recognizing your browser. A Global Privacy Control signal (above) or a content blocker that blocks the pixel does stop it.
Platform settings. You can opt out of personalized ads in your Meta, X, and TikTok account settings.
Email us. Contact us at the address in Section 13 and we will process your opt-out request.

If you are a California resident, you have the right to know what personal information we collect and disclose, to request deletion or correction of it, to opt out of its sale or sharing, and not to be discriminated against for exercising those rights. We do not knowingly sell or share the personal information of anyone under 16.

8. Data retention

We retain your account information for as long as your account is active and as needed to provide the Service and meet legal, accounting, or reporting obligations. You may request deletion of your account and associated personal data by contacting us; some records may be retained where required by law.

9. Security

We take reasonable technical and organizational measures to protect your information, and we rely on established providers (Supabase, Stripe) that maintain industry-standard safeguards. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

10. Your choices

You may access or update your account email, cancel your subscription, or request deletion of your data at any time. To exercise these choices, use the in-app settings where available or contact us using the email below.

11. Children

The Service is intended for adults (18 or older) and is not directed to children. We do not knowingly collect personal information from anyone under 18.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above. Your continued use of the Service after changes become effective constitutes acceptance of the revised policy.

13. Contact

Questions about this Privacy Policy or your data? Email us at support@autodfs.com.

Enter the lab