1. Who we are
Project Punt is operated by Project Punt Pty Ltd (ACN 701 641 698, ABN 99 701 641 698), of Sydney, New South Wales. That company is the entity responsible for the personal information described below.
2. What we collect
Account information
Your email address (used to sign you in and for essential account messages), and your subscription status.
Your research and bet tracker entries
The lines you type, the players you look up, and any bets you log in the tracker — including stake, price and your settlement (won / lost / void). This is stored so the tracker works across devices.
Settlement emails
When a pick you tracked settles, we email you the result — one per settlement run, with a permanent one-click unsubscribe.
Notebook emails
If you give us your email address on an article, we store it with the page you were on and send one confirmation. Nothing else is sent until you click the link in it. Every email after that has a link to stop them, and stopping deletes nothing you did in the app — it is a separate list from your account.
Usage data
Pages visited, features used, device and browser type — aggregated product analytics that help us improve the service. We use two analytics tools: a cookieless one built into our hosting provider, and Google Analytics, which uses cookies to recognise returning visitors (see section 8, Cookies).
Questions asked to the assistant
When you ask Ask Punt something, we store the question and which screen you asked it from, so we can see what the product fails to make obvious and fix it. We do not store the assistant's answers. Questions are processed by our AI provider to generate the reply, per section 5, Who we share it with.
The assistant costs us money per question, so it has a daily limit. To count your questions against that limit we keep a running total for the day — against your account if you are signed in, and otherwise against a one-way scrambled form of your IP address that cannot be turned back into the address. Those totals are deleted after a week and are never used for anything except the limit.
Referral links
If you first arrived through someone's share link, we keep a cookie for up to 30 days and, if you sign up in that window, record which link brought you — so the person who referred you can be credited. If the link carried campaign tags (the kind a post or a video description adds), we keep those the same way, so we can see which article or video brought you. Those facts are all the cookies are for.
Payment data
Payments are processed by our payment provider. We never see or store your full card number — only the last four digits and expiry for your records.
3. What we never collect
- Your bookmaker account credentials — we don't have them, don't ask for them, and you should never share them with anyone.
- Your actual wagers with operators. Bets in the tracker are self-reported by you.
- Precise location. We infer coarse region (e.g. state) from IP for analytics, nothing finer.
4. How we use it
- Running your account, subscription, and bet tracker.
- Sending essential service emails (sign-in links, receipts, renewal notices, material terms changes). Marketing email is opt-in and every one has an unsubscribe.
- Aggregated, de-identified analysis to improve the product — for example, which stat pages get used most.
5. Who we share it with
The minimum set of processors needed to run the service, named so you can look each one up:
- Supabase — sign-in and the database, hosted in Sydney.
- Vercel — the servers that build and serve the site, in Sydney, plus page-view analytics that set no cookie.
- Stripe — payments. Your card details go to Stripe directly and never touch our servers.
- Resend — the service emails in section 4, and the notebook emails if you asked for them.
- Sentry — error reports. When a page or a server request fails, Sentry receives the page, the browser type and the technical trace of what broke, so we can fix it. It never receives a stake, a line, a slip or your account details.
- Google — Google sign-in if you choose it, and Google Analytics per sections 1 and 7.
- Anthropic — for Ask Punt only. It receives your question and the on-screen stats needed to answer it, never your account details, and does not train on what it receives.
Each is bound by contract to process data only on our instructions. We never sell or rent personal information, and we never share your betting activity with bookmakers, advertisers, or data brokers.
6. Your rights
Under the Privacy Act 1988 (Cth) and the Australian Privacy Principles you can:
- Access the personal information we hold about you.
- Correct anything that's wrong.
- Delete your account and associated data — self-serve from Settings, or by emailing us. Deletion is immediate and irreversible.
- Export your bet-tracker history as a CSV anytime, also from Settings.
7. Retention and security
Data is hosted in Sydney, Australia, with one exception: Google Analytics data is processed on Google's servers, which may be located overseas (including the United States). We keep account data while your account is active; after deletion, backups roll off within 30 days. Access within the company is limited to what's needed to operate the service.
8. Cookies
We use a small number of functional cookies (keeping you signed in, remembering preferences), a cookieless product-analytics tool, and Google Analytics, which sets cookies to measure how the site is used — including recognising whether you've visited before. We don't use Google Analytics for advertising, and there are no third-party advertising trackers.
9. Children
The service is strictly 18+. We don't knowingly collect information from anyone under 18 and will delete any we discover.
10. Contact and complaints
Privacy questions or requests: privacy@projectpunt.com.au. If you're not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).