Privacy Policy

SidelineOS (“we,” “us,” or “our”) operates the websites at sidelineos.cc and app.sidelineos.cc (collectively, the “Service”). This Privacy Policy explains what information we collect, how we use it, and the choices you have.

1. Information We Collect

Account Information. When you create an account we collect your name, email address, and — if you sign up with email — a securely hashed version of your password. If you sign in with Google, we receive your Google profile name, email, and profile image through Google OAuth. We never store your Google password.

Payment Information. Subscriptions are processed by Stripe. We store only your Stripe customer ID and subscription tier. Stripe collects and stores your payment method details (card number, billing address) directly — we never see or store your full card number.

Usage Data. We collect information about how you interact with the Service, including pages viewed, features used, search queries, and content engagement. This data is sent to PostHog, our analytics provider.

Device & Log Data. When you visit the Service, we automatically collect your IP address, browser type, operating system, referring URL, and page-load performance data.

2. How We Use Your Information

• Provide, maintain, and improve the Service
• Authenticate your identity and manage your account
• Process subscription payments
• Send transactional emails (verification, password reset)
• Analyze usage patterns to improve the product
• Detect and prevent fraud or abuse

3. Third-Party Services

We share limited data with the following providers, each of which operates under its own privacy policy:

• Google — OAuth authentication. Receives auth tokens during sign-in.
• Stripe — Payment processing. Receives your email, name, and payment details.
• PostHog — Product analytics. Receives usage events, email, and account tier for identified users.
• Resend — Transactional email delivery. Receives recipient email addresses and message content.
• Vercel — Hosting and edge delivery. May process request metadata (IP, headers) as part of serving the application.

We do not sell your personal information to any third party.

4. Cookies & Tracking

We use essential cookies to maintain your authentication session. PostHog may use first-party cookies and local storage to attribute usage events to your account. We do not use third-party advertising cookies.

5. Data Retention

We retain your account data for as long as your account is active. Usage analytics are retained in accordance with our analytics provider’s retention policies. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law or legitimate business purposes (such as fraud prevention).

6. Data Security

We use industry-standard measures to protect your data, including encrypted connections (TLS), hashed passwords (bcrypt), and secure token-based authentication (JWT). However, no method of transmission over the internet is 100% secure.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and personal data
• Object to or restrict certain processing of your data
• Export your data in a portable format

To exercise any of these rights, contact us at support@sidelineos.cc.

8. Children’s Privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us personal information, please contact us and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by posting the updated policy on this page with a revised effective date. Your continued use of the Service after any changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy, contact us at support@sidelineos.cc.