Last updated 7 October 2026. Crak'd is in beta and this will be updated as the product changes.
We collect what the product needs to work and what tells us whether it is working. We do not sell it, we have never sold it, we do not share it for cross-context behavioural advertising, and we do not send it to an advertising network. What other people can see is what you choose to make public: your username, any strategy you publish along with its results and the games behind it, and anything you post as a comment. Your email address is never shown to anyone.
“We” is Crak'd Software LLC, a Georgia limited liability company, which operates Crak'd and decides how the data described below is handled.
Your email address and password (stored hashed by Supabase, our authentication provider), the username you pick, the strategies you choose to save or publish, anything you post as a comment, and payment details handled entirely by Stripe, which means Crak'd never sees your card number. From Stripe we receive a customer reference, a subscription id, the plan and price you are on, your subscription status, the current period end and whether the subscription is set to cancel, plus the card brand and last four digits that Stripe shows on your billing page. We do not receive your full card number, and we do not ask Stripe for anything beyond what billing needs. When you sign up we also record that you confirmed your age and accepted these terms, with the date and the version you accepted, so there is a record of what you agreed to.
Your username is public. It appears next to every strategy you publish publicly and every comment you leave. Published strategies are public in their own right: the bet, the results, the games behind them and the date. Your email address is never shown to anyone.
We also record how the product is used: which backtests were run and what they returned, which pages produced a signup, and the text of any strategy the parser could not understand. That last one is how we find out what Crak'd needs to learn next, and it means the sentence you typed is stored even when it didn't work. Please don't put anything personal in that box; it only needs to describe a bet.
Our hosting and database providers keep ordinary server logs, which include IP addresses, for security and troubleshooting. If you send feedback from under a result, we store what you wrote along with the strategy it was about.
We process your account and payment data to provide the service you asked for and to meet our legal obligations. We process usage data on the basis of our legitimate interest in knowing whether the product works and in keeping it secure. Where the law where you live requires consent instead, we ask for it.
Publishing a strategy makes a page for it. Unlisted means anyone with the link can see it, and nothing lists it. Public means it is listed on our Published page under your username, can be commented on by other signed-in users, and can be found by search engines. Either way the page shows the strategy, its results and the games behind them, but never your email address.
A public strategy page is permanent. Private and unlisted ones you can change or delete whenever you like. A public one you can retire, which freezes its record at that moment and marks it retired, but the page stays at its address and stays listed. We are telling you this here as well as in the Terms because it is the one thing on Crak'd you cannot take back: a record that could be deleted after it went badly would tell nobody anything. If you want a public strategy gone, delete your account (from your account page, or by emailing crakd.app@gmail.com) and everything goes with it. A page that has already been indexed may linger in search results for a while after, and anything someone else has already copied is beyond our reach.
Comments are public to anyone who can see the strategy they are on, and are stored with your username and the time you posted. You can delete your own; so can the person who published the strategy, and so can we. Retiring a strategy closes it to new comments and keeps the ones already there. Deleting a strategy that was never public deletes its comments with it.
Running the service, billing your subscription, answering you when you write to us, keeping the service secure, meeting legal obligations, and understanding how the product is used so we can fix what doesn't work. We do not sell your data and we do not take money to feature a sportsbook.
Supabase (database and authentication), Stripe (payments), Resend (the emails we send you), Vercel (hosting and page-view counts), and Sentry (crash reports). Each processes data only to provide their service to us, under contract.
What Vercel counts. We use Vercel Web Analytics to see how many people visit and which pages they open. It sets no cookie and stores no identifier on your device, so a visit cannot be linked to you or followed from one day to the next. We do not use an advertising network or a third-party analytics company beyond this, and nothing about the strategies you run is sent to one.
What Sentry gets. When something breaks, we send the error, the stack trace, the page it happened on and the browser it happened in. We do not send session recordings, and we do not turn on the feature that records what you clicked and saw. If you sign in with Google, Google receives the fact that you are signing in to Crak'd; we receive your email address and name from them and nothing else.
We may also disclose information if the law requires it, to enforce our terms, to protect someone's safety, or in connection with a merger, acquisition or sale of the business, in which case we will say so here before your data moves.
Account email (confirmation, password reset, billing) always sends, because it is part of the service. Separately, if you have published a strategy, we send at most one email a week telling you what it did since the last one, and none at all in a week where none of your strategies had a qualifying game. Every one of those carries an unsubscribe link, and there is a switch on your account page. We do not sell or share your email address, and we do not send marketing to it.
You can change your username, delete saved strategies, and turn off the weekly email from your account page. A published strategy that was never public can be deleted; one that has been public can be retired, which freezes its record but keeps the page, as the Terms explain. Deleting your account removes all of it. To delete your account entirely, use Delete account at the bottom of your account page (or in the app), or email crakd.app@gmail.com and we will do it for you. Either way it removes everything attached to the account, comments included, and cancels any subscription first.
Depending on where you live, you may have the right to know what we hold about you, to get a copy of it, to correct it, to delete it, to limit how we use it, and not to be discriminated against for asking. California residents have these rights under the CCPA as amended. We do not sell personal information and we do not share it for cross-context behavioural advertising, so there is nothing to opt out of. To exercise any right, email crakd.app@gmail.com from the address on your account and we will respond within the time the law allows. We will not charge you for it or treat you differently afterwards.
Crak'd is for adults of legal wagering age and is not directed at children. We do not knowingly collect information from anyone under 13. If you believe a child has given us information, email crakd.app@gmail.com and we will delete it.
Account data for as long as you have an account. Usage events and failed strategy text are deleted after 24 months, and are not tied to anything beyond your account id in the meantime. Billing records are kept for seven years because tax and accounting rules require it. Backups roll off within 30 days. Delete your account and everything else goes with it, except a published public strategy, which stays as a record for the reason described above under “Strategies you publish” unless the whole account is deleted, in which case that goes too.
Passwords are hashed by our authentication provider and we never see them. Card numbers never touch our systems. Access to the database is restricted and connections are encrypted in transit. No service can promise perfect security, and we will not pretend otherwise; if a breach affects you, we will tell you as the law requires.
On servers in the United States, run by the providers listed above. Crak'd is intended for users in the United States. If you use it from elsewhere, you are sending your data to the US, where privacy law differs from your own.
We use cookies to keep you logged in. We also remember, in your browser only, which link brought you to the site, so we can tell which channels actually work; that never leaves your device until an account is created, and it is stored once and never updated. We do not use advertising or tracking cookies.
We will update this page as the product changes, and the date at the top always reflects the current version. If a change materially affects how we handle your data, we will email account holders before it takes effect.
Crak'd Software LLC, a Georgia limited liability company.
crakd.app@gmail.com