1. Information We Collect
Information You Provide
When you create an account using our OAuth providers (Google, Facebook, GitHub, Discord), we collect:
- Name: Your display name from the provider
- Email Address: Used for account identification and communication
- Profile Picture: Your avatar from the provider (optional)
- Provider ID: Unique identifier from the OAuth provider
Automatically Collected Information
- Usage Data: Pages visited, predictions viewed, time spent on site
- Device Information: Browser type, operating system, screen resolution
- IP Address: For security and analytics purposes
- Session Data: Authentication tokens (stored securely in cookies)
Note: We do NOT collect or store your OAuth provider passwords. Authentication is handled securely by the provider.
2. How We Use Your Information
We use your information to:
- Provide Services: Display personalized fight predictions and analytics
- Authentication: Manage your account and session security
- Improve Experience: Analyze usage patterns to enhance features
- Communication: Send important updates about predictions or service changes (with your consent)
- Security: Detect and prevent fraud, abuse, or unauthorized access
- Legal Compliance: Comply with applicable laws and regulations
3. Data Sharing and Third Parties
Third-Party Services We Use
- OAuth Providers: Google, Facebook, GitHub, Discord (for authentication)
- Hosting: AWS (Amazon Web Services) for infrastructure
- Analytics: Anonymous usage statistics (no personal identification)
We Do NOT:
- Sell your personal information to third parties
- Share your data with advertisers
- Use your email for spam or marketing (unless you opt-in)
- Track you across other websites
We may share information with law enforcement if required by law or to protect our rights and safety.
4. Data Security
We implement industry-standard security measures:
- Encryption: HTTPS for all connections, encrypted data at rest
- Secure Cookies: HttpOnly, Secure, SameSite attributes to prevent attacks
- Access Controls: Limited employee access to personal data
- Regular Audits: Security reviews and updates
- Session Management: 7-day session expiration, secure token storage
While we strive to protect your data, no method of transmission over the internet is 100% secure. Please use strong passwords and keep your account credentials safe.
5. Your Privacy Rights
You have the right to:
- Access: Request a copy of your personal data
- Correction: Update inaccurate or incomplete information
- Deletion: Request deletion of your account and data
- Portability: Receive your data in a machine-readable format
- Opt-Out: Unsubscribe from communications (except essential updates)
- Withdraw Consent: Revoke consent for data processing
How to Exercise Your Rights:
Contact us at support@mmaalmanac.com with your request and any necessary details. We will respond shortly.
7. Children's Privacy
MMA Almanac is not intended for users under 13 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with information, please contact us immediately.
8. Changes to This Policy
We may update this privacy policy periodically to reflect changes in our practices or legal requirements. We will notify you of significant changes by:
- Updating the "Last Updated" date at the top of this page
- Sending an email notification (for major changes)
- Displaying a prominent notice on our website
Your continued use of MMA Almanac after changes constitutes acceptance of the updated policy.
9. Contact Us
If you have questions about this privacy policy or your personal data, please contact us:
Email: support@mmaalmanac.com
Website: https://mmaalmanac.com