Privacy Policy
Effective Date: April 4, 2026 · Last Updated: May 26, 2026
1. Overview
tipmarket ("Company," "we," "us," or "our") operates the website and application at tipmarket.co (the "Platform"). This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you use the Platform. It also explains your rights regarding your data and how to exercise those rights.
By using the Platform, you consent to the practices described in this Privacy Policy. If you do not agree, please do not use the Platform. This Privacy Policy is incorporated into and subject to our Terms of Service.
tipmarket is based in California, United States. Our contact email for all privacy inquiries is admin@tipmarket.co.
2. Information We Collect
2.1 Information You Provide Directly
| Data Category | Examples | When Collected |
|---|---|---|
| Account Information | Name, email address, username, password (hashed) | Account registration |
| Profile Information | Display name, handle, bio, avatar/emoji selection, theme preference | Profile setup and editing |
| User Content | Sports picks, predictions, analysis text, chat messages, comments, reactions | Posting content on the Platform |
| Payment Information | Billing details (processed and stored by Whop, not by tipmarket) | Purchasing subscriptions |
| Communication Data | Contents of emails or support inquiries you send us | Contacting support |
| Notification Preferences | Email notification opt-in/opt-out selections by category | Account settings |
2.2 Information Collected Automatically
| Data Category | Examples | Purpose |
|---|---|---|
| Device Information | Browser type, operating system, device type, screen resolution, browser language | Platform compatibility and optimization |
| Usage Data | Pages viewed, features used (e.g. follows, searches, pick views, pass purchases), timestamps, navigation flow | Analytics and product improvement |
| Session Data | Random session identifier (held in memory only, not stored on your device), time spent on pages, tab focus/blur events | Understanding engagement patterns |
| Referral Data | Referring URL when you first arrive on the Platform | Understanding how users discover tipmarket |
| Log Data | IP address, access times, referring URLs, error logs | Security, fraud prevention, debugging |
| Geolocation (derived) | U.S. state or region derived from your IP address using a locally stored geolocation database (MaxMind GeoLite2). Your IP address is not sent to MaxMind or any third party for this lookup. | Enforcing geographic restrictions on paid transactions in states where regulatory conditions require it (see our Terms of Service, Section 2) |
| Local Storage | Theme preferences, authentication state, cached subscription and pass data | User experience and performance |
2.3 Information From Third Parties
We may receive information from:
- Firebase Authentication (Google): UID, email address, and authentication provider when you sign in via Google Sign-In
- Whop: Subscription status, membership IDs, payment events (success, failure, dispute), and payout information for Sellers
- Sports Data Providers: Game data, scores, odds, and player statistics (not personal information)
3. How We Use Your Information
We use the information we collect for the following purposes:
| Purpose | Legal Basis (GDPR) |
|---|---|
| Operating the Platform and providing services | Performance of contract |
| Processing and managing subscriptions | Performance of contract |
| Sending transactional emails (subscription confirmations, trial reminders, cancellation notices) | Performance of contract |
| Sending notification emails (new followers, new subscribers) based on your preferences | Consent / Legitimate interest |
| Computing and displaying user statistics (accuracy, win/loss records) | Legitimate interest |
| Moderating content and enforcing Terms of Service | Legitimate interest |
| Detecting, preventing, and addressing fraud, abuse, and security issues | Legitimate interest |
| Improving and developing the Platform | Legitimate interest |
| Collecting anonymized first-party usage analytics (page views, feature usage, session data) | Legitimate interest |
| Complying with legal obligations (e.g., tax reporting, law enforcement requests) | Legal obligation |
| Enforcing geographic restrictions on paid transactions using IP-based geolocation | Legal obligation / Legitimate interest |
| Responding to your inquiries and support requests | Legitimate interest / Performance of contract |
We do not use your personal information for automated decision-making or profiling that produces legal or similarly significant effects. We do not sell your personal information to third parties for advertising purposes.
5. Cookies & Tracking Technologies
tipmarket uses limited tracking technologies:
5.1 Local Storage
We use browser local storage (not cookies) to store the following data on your device. This data is not transmitted to third parties:
| Key | Purpose |
|---|---|
| tm-theme | Your dark/light mode preference |
| tm-disclaimer-dismissed | Whether you dismissed the disclaimer notice |
| pw_sellers, pw_subs, pw_passes | Cached subscription and pass data for faster page loads |
5.2 First-Party Analytics
We collect anonymized usage data (pages visited, features used, session duration, referral source, and device type) and store it in our own database (Google Firebase Firestore). This system does not use cookies, does not store persistent identifiers on your device, and does not share data with third parties. A temporary session identifier is held in browser memory and discarded when the tab is closed.
5.3 Firebase SDK
Google Firebase may set cookies or use local storage for authentication session management and performance monitoring.
We do not use third-party analytics services, advertising cookies, retargeting pixels, or cross-site tracking technologies. We do not participate in ad networks or sell data for targeted advertising.
6. Data Retention
We retain your personal information for as long as your account is active or as needed to provide services, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods:
| Data Type | Retention Period |
|---|---|
| Account information | Until account deletion. Personal data (name, email, bio, social links) is removed immediately upon account closure |
| User content (picks, chat messages) | Active picks: duration of game relevance. Historical picks: anonymized immediately upon account deletion (username replaced with "Deleted User," personal identifiers removed; pick data retained for aggregate statistics integrity) |
| Email logs | 12 months, then deleted |
| Webhook and payment event logs | 7 years (tax and financial compliance) |
| Game chat messages | Deleted 3 days after game conclusion |
| Server and access logs | 30 days |
When you delete your account, we immediately initiate a data scrub process that: cancels your subscriptions and issues prorated refunds to your subscribers; anonymizes your picks (replacing your username with "Deleted User" and removing personal identifiers); deletes your follows, likes, and analytics data; wipes your user profile and frees your username; and deletes your authentication credentials. This process typically completes within seconds of your request. Server and access logs containing your IP address are retained for up to 30 days before automatic expiration.
7. Data Security
We implement reasonable technical, administrative, and organizational security measures to protect your personal information, including:
- Encryption of data in transit using TLS/HTTPS
- Password hashing via Firebase Authentication (bcrypt/scrypt)
- Server-side API key management for sensitive third-party integrations
- Role-based access controls for administrative functions
- Regular security review and monitoring
- Payment information processed exclusively by PCI DSS-compliant third parties (Whop/Stripe) — tipmarket never stores credit card data
While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security. If you discover a security vulnerability, please report it responsibly to admin@tipmarket.co.
8. Your Rights & Choices
Depending on your location, you may have the following rights regarding your personal information:
8.1 All Users
- Access: You can view your personal data through your account settings at any time
- Correction: You can update your profile information, email, and preferences in Settings
- Deletion: You can delete your account through Settings → Close Account, or by emailing admin@tipmarket.co
- Email Opt-Out: You can unsubscribe from notification emails via links in each email or through Settings → Notifications. Transactional emails (payment receipts, security alerts) cannot be opted out of while your account remains active
- Data Export: You can request a copy of your data by emailing admin@tipmarket.co
8.2 Response Times
We will respond to all data rights requests within 30 days of receipt. If additional time is needed (up to 60 additional days for complex requests), we will notify you of the extension and the reason for the delay.
9. California Privacy Rights (CCPA/CPRA)
If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) provides you with additional rights regarding your personal information:
9.1 Right to Know
You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which it was collected, the business or commercial purposes for collecting it, and the categories of third parties with whom we share it.
9.2 Right to Delete
You have the right to request deletion of personal information we have collected from you, subject to certain exceptions (e.g., legal compliance, ongoing transactions, fraud prevention).
9.3 Right to Correct
You have the right to request correction of inaccurate personal information.
9.4 Right to Opt-Out of Sale/Sharing
We do not sell or share your personal information as those terms are defined under the CCPA/CPRA. We do not engage in cross-context behavioral advertising.
9.5 Right to Non-Discrimination
We will not discriminate against you for exercising your CCPA rights. We will not deny services, charge different prices, provide different quality of service, or retaliate in any way.
9.6 Exercising Your Rights
To submit a CCPA request, email admin@tipmarket.co with the subject line "CCPA Request" or use the "Close Account" feature in Settings for deletion requests. We will verify your identity before processing any request. You may also designate an authorized agent to make a request on your behalf.
9.7 CalOPPA Compliance
In accordance with the California Online Privacy Protection Act (CalOPPA), we disclose: this Privacy Policy is accessible from every page of the Platform via the footer link; we describe our data collection and sharing practices above; we honor Do Not Track (DNT) browser signals by not engaging in tracking when a DNT signal is detected; and third parties may not collect personally identifiable information about your online activities over time and across different websites when you use the Platform.
10. European Privacy Rights (GDPR)
If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, the General Data Protection Regulation (GDPR) and equivalent local laws provide additional protections:
10.1 Legal Bases for Processing
We process your personal data under the following legal bases, as detailed in Section 3 above: performance of contract (providing Platform services), your consent (optional notifications), our legitimate interests (security, fraud prevention, product improvement), and legal obligations (tax reporting, law enforcement compliance).
10.2 Your Additional Rights
- Right to Restriction: You may request that we restrict processing of your data in certain circumstances
- Right to Portability: You may request your data in a structured, commonly used, machine-readable format
- Right to Object: You may object to processing based on legitimate interests, including for direct marketing purposes
- Right to Withdraw Consent: Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of prior processing
- Right to Lodge a Complaint: You have the right to lodge a complaint with your local supervisory authority
10.3 Data Transfers
Your personal data is transferred to and processed in the United States. We rely on Standard Contractual Clauses (SCCs) as approved by the European Commission and other lawful transfer mechanisms to ensure adequate protection of your data when transferred outside the EEA.
10.4 EU Representative
The Platform is directed at users in the United States and is not targeted at residents of the European Economic Area. If required under Article 27 of the GDPR, we will designate a representative in the EU. Contact us at admin@tipmarket.co for current representative information.
11. Children's Privacy
The Platform is not intended for anyone under 18 years of age. We do not knowingly collect personal information from anyone under 18. If we become aware that a user is under 18, we will promptly delete their account and associated personal information.
If you are a parent or guardian and believe your child has provided personal information to us, please contact us immediately at admin@tipmarket.co and we will delete the information within 48 hours.
12. Third-Party Services
The Platform integrates with and may contain links to third-party services. Each operates under its own privacy policy, and we are not responsible for their data practices. Key third-party services include:
- Google Firebase: Firebase Privacy Policy
- Whop, Inc.: Whop Privacy Policy
- Resend: Resend Privacy Policy
- QR Server (goqr.me): Used to generate QR codes for profile sharing. When you share your profile via QR code, your profile URL is sent to api.qrserver.com to generate the image. Privacy Policy
- MaxMind GeoLite2: We use MaxMind's GeoLite2 database to determine your U.S. state from your IP address for geographic restriction enforcement. This database is stored and queried locally on our servers — your IP address is not transmitted to MaxMind. MaxMind Privacy Policy
We encourage you to review the privacy policies of any third-party services you interact with through the Platform.
13. International Data Transfers
tipmarket is based in the United States. If you access the Platform from outside the United States, your data will be transferred to and processed in the United States, which may have different data protection laws than your country. By using the Platform, you consent to such transfers.
For transfers from the EEA, UK, or Switzerland, we implement appropriate safeguards as described in Section 10.3 above.
14. Data Breach Notification
In the event of a data breach involving your personal information that is likely to result in a risk to your rights and freedoms, we will:
- Notify affected individuals within 30 calendar days of discovery, in compliance with California law
- Notify the California Attorney General within 15 calendar days if the breach affects 500 or more California residents
- Notify relevant EU supervisory authorities within 72 hours if GDPR applies
- Provide details about the nature of the breach, the data involved, the steps we are taking, and what you can do to protect yourself
15. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:
- Update the "Last Updated" date at the top of this page
- Notify you by email or prominent notice on the Platform at least 30 days before the changes take effect
- Provide a summary of the key changes
Your continued use of the Platform after changes become effective constitutes acceptance of the updated Privacy Policy. If you do not agree with the revised policy, you should discontinue use of the Platform and delete your account.
16. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
tipmarket
Email: admin@tipmarket.co
Website: tipmarket.co
For CCPA/GDPR data rights requests, please include "Data Rights Request" in the subject line so we can prioritize your inquiry.
We aim to respond to all inquiries within 5 business days and to fulfill data rights requests within 30 calendar days.