Privacy Policy

ColesAlgoPicks ("the site," "we") operates mma.colesalgopicks.com (The MMA King) and related subdomains. This page describes what data we collect, why, and what your rights are.

Short version: we don't sell your data, we don't run ads, we don't share with third parties beyond what's needed to run the product. We collect the minimum required, and you can delete your account anytime.

What we collect

• Anonymous browsing: by default, nothing personal — we use your browser's localStorage for app state (watchlist, slips, tracker). That data lives on your device only.
• If you sign in with Discord (optional): we receive and store your Discord user ID, username, display name, and avatar URL — solely to identify you across devices and to determine your access. We use the identify scope (plus the read of your membership/role needed to grant access); no access to your messages, friends, or anything else.
• Account data: your synced app state, session tokens (hashed), and any profile fields you explicitly set.
• Server logs: standard Cloudflare HTTP logs (IP, user-agent, request URL, timestamp) used for abuse detection and uptime monitoring, retained briefly and then auto-deleted by Cloudflare.

What we don't collect

• No payment or card data. Subscriptions are processed by Winible as merchant of record — your card details go to Winible (and its payment processor), never to us. We never see or store your full card number.
• No third-party advertising trackers. No Google Analytics ad SDKs, no Facebook Pixel.
• No location data beyond what your IP implies for server logs.
• No background telemetry across other sites.

How we use it

• To deliver the product: cross-device sync, signed-in personalization, and granting/checking your paid access.
• To detect abuse: rate limiting, blocking malicious bots, investigating suspicious sign-in patterns.
• To improve the product: aggregate, non-identifying usage patterns — never individual behavior sold to anyone.

Who we share it with

Only the providers needed to run the service:

• Discord when you sign in — it validates your identity and access role via OAuth. Privacy policy: discord.com/privacy.
• Winible when you subscribe — as merchant of record it processes your payment and manages your subscription. Privacy policy: winible.com.
• Cloudflare hosts the site and processes every HTTP request. Privacy policy: cloudflare.com/privacypolicy.

Your rights

• Delete your account anytime — wipes your profile, sessions, and synced state. (Payment records held by Winible are subject to Winible's own policy.)
• Export your data — request a copy of everything we hold via our Discord.
• Stay anonymous — the public parts of the site work without sign-in.

Cookies

We set only first-party cookies needed to run the product. No third-party tracking cookies, and nothing is sold or shared with ad networks.

• cap_fv — free-view visitor id. Set on every visitor, signed in or not, the first time a metered page is served. It is a random identifier (a UUID, not derived from you or your device) whose only job is to count your one free article per 24 hours so the meter cannot be reset by clearing a single value. It is HttpOnly, Secure, SameSite=Lax and expires after 400 days.
• cap_grant — the free view you were just granted. Short-lived (15 minutes), HttpOnly, so a reload of the page you were let into does not burn a second view.
• Session cookie. HttpOnly and Secure, set only if you sign in, and shared across colesalgopicks.com so one account works on every site.
• CSRF token. Short-lived, used only during the Discord sign-in flow.

The meter also records a hash of your IP address alongside cap_fv, because a cookie alone can be cleared. Both are used solely to count free views and are not used to build a profile or to target advertising.

Contact

Questions, data requests, or concerns: open a ticket in our Discord.

Changes to this policy

We'll update the "Last updated" stamp and post a notice if anything material changes. We won't retroactively reduce protections on data you've already shared.