Privacy Policy

Penumbra Partners ("we," "us," or "our") operates Credence Sports at credencesports.com. This Privacy Policy explains how we collect, use, store, and protect information about you when you use our Service.

We take your privacy seriously. We do not sell your personal information. We do not use your data to serve you advertisements. We collect only what we need to provide the Service.

Information You Provide Directly

Account information. When you create an account, we collect your email address and a password (stored as a secure hash — we never store your password in plain text). We use AWS Cognito to manage authentication.

Profile information. If you choose to provide it, we may collect your name and notification preferences including phone number for SMS alerts.

Bet log data. If you use the bet logging feature, we collect the bet records you enter including game, market, odds, stake, and outcome. This data is stored to provide you with performance tracking and is not shared with third parties.

Communications. If you contact us at support@credencesports.com, we retain those communications to respond to your inquiry and improve the Service.

Feedback. During the beta period, we may collect feedback you provide through the Service or directly to us.

Information Collected Automatically

Usage data. We collect information about how you interact with the Service, including pages visited, features used, picks viewed, and time spent on the Service.

Device and browser information. We collect basic technical information including browser type, operating system, and device type to ensure the Service works correctly across different environments.

Log data. Our servers automatically record information including IP address, request timestamps, pages accessed, and error logs. This data is used for security monitoring and debugging.

Cookies and similar technologies. We use session cookies to maintain your logged-in state. We do not use tracking cookies for advertising purposes. We do not use third-party advertising cookies.

Information We Do Not Collect

We do not collect:

• Payment card numbers or banking information (payment processing, if introduced, will be handled entirely by a third-party processor such as Stripe — we never see your card details)
• Government-issued identification numbers
• Precise geolocation data
• Biometric data
• Information about your actual betting accounts, balances, or activity on sportsbooks

We use the information we collect for the following purposes:

Providing the Service. To authenticate your identity, display picks and analytics tailored to your account, process your bet log entries, and deliver notifications you have requested.

Improving the Service. To understand how users interact with the product, identify bugs and performance issues, and prioritize new features during the beta period.

Communications. To send you notifications about new picks if you have opted in, to respond to your support requests, and to send important account-related communications such as password reset emails.

Safety and security. To detect, investigate, and prevent fraudulent or unauthorized activity, abuse of the Service, or violations of our Terms of Service.

Legal compliance. To comply with applicable laws and regulations and to respond to lawful requests from government authorities.

Analytics. To measure aggregate usage patterns and model performance. All analytics are performed on aggregated, anonymized data where possible.

We do not use your information for targeted advertising, selling to third parties, building profiles for resale, or any purpose not described in this Privacy Policy without your explicit consent.

We do not sell your personal information.

We share your information only in the following limited circumstances:

Service providers. We share information with third-party vendors who help us operate the Service, including:

• Amazon Web Services (AWS) — cloud infrastructure, authentication (Cognito), storage (S3), and compute (Lambda)
• Snowflake — data warehouse for analytics pipeline (model data only — no personal information)

These providers are contractually required to use your information only to provide services to us and in accordance with this Privacy Policy.

Legal requirements. We may disclose your information if required to do so by law or in response to a valid legal request such as a subpoena, court order, or government demand. We will attempt to notify you of such requests unless prohibited by law or court order.

Business transfers. If Penumbra Partners is acquired by or merges with another company, your information may be transferred as part of that transaction. We will notify you via email or prominent notice on the Service before your information becomes subject to a different privacy policy.

With your consent. We may share your information for any other purpose with your explicit consent.

Aggregate and anonymized data. We may share aggregate, anonymized statistics about Service usage with no information that could identify you individually.

The Service lets you connect a fantasy football league you own on a third-party platform — Yahoo Fantasy, ESPN or Sleeper — so that our projections and draft tools can be scored against your league’s real rules instead of a generic preset. Connecting a league is entirely optional and nothing on the Service requires it.

What we read

With your permission we read, from the league you select: its scoring rules, roster slots, team count and draft type; the list of teams in the league and which one is yours; and the players on those teams at the moment you import. We read only leagues you choose, one at a time. We never write anything back to the platform — every request we make is read-only — and we never see your password for that platform.

Yahoo. Yahoo access is granted through Yahoo’s own consent screen (OAuth). We hold a token that lets us read your Yahoo Fantasy leagues; we never receive or store your Yahoo password. Fantasy data provided by Yahoo Fantasy.

ESPN and Sleeper. Sleeper leagues are read from Sleeper’s public API using the league identifier you provide. ESPN leagues are imported from a league page you paste in yourself; that flow runs in your browser and does not send us an ESPN credential.

What we keep, and for how long

Your league settings are kept for as long as you keep the league. Scoring rules, roster slots, team count and any depth targets you set become your saved league configuration — the same object you would get by typing those settings in by hand — and they are yours to edit or delete at any time in League Settings.

Roster data is kept for at most 30 days. The rosters we copy from the platform — your team, and the other teams in your league — expire 30 days after we copy them. Once expired they are no longer readable by any part of the Service and are deleted from our store. Re-importing the league takes a fresh copy and starts a new 30-day window.

Disconnecting deletes the rosters immediately. If you disconnect a platform, we delete our copy of your access token and every roster we copied from that platform, without waiting for the retention window. Your league’s scoring settings are not deleted, because they are your own configuration rather than the platform’s data. Disconnecting on our side does not revoke the permission at the platform itself — for Yahoo, use your Yahoo account security settings to do that, and the Service links you there.

What we never do with it

League data imported from a third-party platform is used only to render your own personalized surfaces to you. Specifically, we do not:

• use it to train, fit or evaluate any predictive model — our projections are built from public play-by-play and statistical sources, never from user leagues
• send it to any large language model or other AI tool
• index it, or make it searchable or visible to any other user
• sell it, share it with advertisers, or disclose it to any third party except the infrastructure providers listed in the section above

Where a platform’s terms require it, we display that platform’s attribution and a link back to it on every screen showing its data.

We retain your personal information for as long as your account is active or as needed to provide the Service. Specifically:

• Account information is retained for the duration of your account and deleted within 90 days of account closure upon request
• Bet log data is retained for the duration of your account — this is your data and you can export or delete it
• Usage logs are retained for up to 12 months for security and debugging purposes
• Email communications are retained for up to 3 years
• Fantasy rosters imported from a third-party platform are retained for at most 30 days, and are deleted immediately when you disconnect that platform — see the section above

You may request deletion of your account and associated data at any time by contacting us at support@credencesports.com. We will process deletion requests within 30 days.

We implement industry-standard security measures to protect your information, including:

• All data transmitted between your browser and our servers is encrypted using TLS (HTTPS)
• Passwords are never stored in plain text — authentication is managed by AWS Cognito using secure hashing
• Access to production systems is restricted to authorized personnel only
• AWS infrastructure benefits from AWS's comprehensive security certifications and controls

However, no method of transmission over the internet or method of electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security. In the event of a data breach that affects your personal information, we will notify you as required by applicable law.

Depending on your jurisdiction, you may have certain rights regarding your personal information:

Access. You may request a copy of the personal information we hold about you.

Correction. You may request that we correct inaccurate personal information about you.

Deletion. You may request that we delete your personal information, subject to certain exceptions (such as information we are required to retain by law).

Portability. You may request that we provide your personal information in a portable format.

Opt-out of communications. You may opt out of non-essential communications at any time through your account settings or by contacting us.

Notification preferences. You can manage your push notification and email alert preferences in the Settings section of the Service at any time.

To exercise any of these rights, contact us at support@credencesports.com. We will respond to your request within 30 days.

Essential cookies. Required for the Service to function. These include session cookies that keep you logged in. You cannot opt out of essential cookies without discontinuing use of the Service.

Analytics cookies. We may use basic analytics to understand usage patterns. These are not advertising cookies and do not track you across other websites.

We do not use third-party advertising cookies. We do not participate in any advertising networks or retargeting programs.

You can control cookies through your browser settings. Disabling cookies may affect your ability to use certain features of the Service.

The Service may contain links to third-party websites or services, including sportsbooks and betting platforms referenced in our content. This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services you access through the Service.

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from anyone under 18. If we become aware that we have collected personal information from a person under 18, we will take steps to delete that information promptly.

If you believe we may have inadvertently collected information from a minor, please contact us at support@credencesports.com.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including:

• The right to know what personal information we collect
• The right to delete your personal information
• The right to opt out of the sale of your personal information (we do not sell personal information)
• The right to non-discrimination for exercising your privacy rights

To exercise your California privacy rights, contact us at support@credencesports.com.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy with a new effective date and, for significant changes, by sending an email to the address associated with your account.

Your continued use of the Service after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

For questions, concerns, or requests regarding this Privacy Policy or our data practices, contact us at: