This policy explains what personal data Playbook collects, why, who we share it with, how long we keep it and the rights you have. Playbook is run by Playbook Insight Limited (our company details are in section 15 of the Terms), which decides how your personal data is used: that makes us the controller under UK data protection law. Our Cookie Notice explains each cookie we use in full, and section 6 summarises them.
1. What We Collect
Your account. Your email address, username, password (stored only in scrambled form, so nobody can read it), the date you joined, your sign in methods and two step verification settings, and your display settings.
Your profile and posts. Anything you add to your profile, your posts and picks, comments, likes, saves, follows, blocks and reports. Your username, profile and public posts can be seen by other members.
Your Tracker. The bets you record: sport, market, line, odds, stake, result and notes. If you import a bet slip screenshot, see section 3.
Payments. Your plan, its status and history, and your capper subscriptions. Stripe collects your card details; we never see or store your full card number. We receive from Stripe what we need to run your subscription, such as the last four digits of your card, its expiry month and your billing country.
Cappers and affiliates. If you sell capper subscriptions or join the Affiliate Programme, we keep your packages, sales, commission and payout records. To pay you, Stripe collects your identity and bank details and checks them; we receive only what we need to show your payouts, such as the last four digits of your bank account and whether Stripe needs more details. Stripe may ask you for tax information, and so may we.
How you found us. If you accept cookies, we note the link that brought you to Playbook (for example a campaign tag or an affiliate's link) and store it with your account when you sign up. If you decline, we record you as having come directly. Visits from tagged links are also counted per day, without anything about who you are.
Messages to us. What you send when you contact support or report something.
Technical data. Like every website, our servers and hosting provider receive your IP address, browser and device type with each request. We use this to keep Playbook running and secure, for example to stop abuse. We do not use analytics or advertising trackers, and we do not build profiles of you for advertising.
2. Why We Use It, and Our Lawful Bases
UK data protection law requires a lawful basis for each use.
To provide Playbook (contract). Creating and running your account, showing your boards, Tracker, posts and subscriptions, taking payments, paying cappers and affiliates, and sending emails about your account, such as sign in codes, receipts, renewal reminders and changes to these terms.
To keep Playbook safe and working, and to improve it (legitimate interests). Preventing fraud and abuse, enforcing the Terms, handling reports, fixing faults, and counting how many people arrive from each link and how many go on to subscribe, so we know which channels work. We use counts, not individual tracking, wherever we can.
With your consent. Setting the referral and campaign cookies (section 6). You can withdraw consent at any time by changing your cookie choice, which stops future collection.
Because the law requires it (legal obligation). Keeping financial and tax records, and answering lawful requests from authorities.
We do not use your data to make decisions about you that have legal or similarly significant effects without a person involved.
3. Bet Slip Screenshots
If you choose to import a bet slip screenshot into the Tracker, we send the image to Anthropic, which reads it and returns the bet's details for you to check. Nothing is saved until you confirm it. We do not store the screenshot: it exists only while it is being read. Anthropic processes it on our instructions and, under its commercial terms, does not use it to train its models. Only upload slips you are happy to share in this way, and avoid slips that show other people's details.
4. Who We Share It With
We never sell your personal data, and we never share it for advertising.
Service providers. These process data for us, only on our instructions:
- Supabase: our database, sign in and file storage.
- Stripe: payments, subscriptions, and payouts to cappers and affiliates. For identity checks and fraud prevention, Stripe also acts as an independent controller under its own privacy policy.
- Vercel: hosting the website.
- Anthropic: reading bet slip screenshots you choose to import.
Other members. Your username, profile, public posts and follows are visible to other members. Locked picks are visible only to your subscribers. Affiliates see their referrals only as anonymous IDs, never names or email addresses.
Others, when necessary. Our professional advisers, authorities when the law requires it, and anyone who buys or takes over Playbook, who would have to use your data under this policy.
5. International Transfers
Some of our providers are in, or use servers in, the United States, so your data may be processed outside the UK. Where that happens, we rely on the protections UK law requires, such as the UK Extension to the EU US Data Privacy Framework or the UK's approved contract terms for international transfers.
6. Cookies
We use a small number of cookies, and none for analytics or advertising. Apart from Stripe's on payment pages, every cookie on Playbook is our own.
Always on: cookies that keep you signed in, remember your cookie choice, carry the plan you picked to checkout and remember how you like the Feed. Stripe also sets its own cookies on payment pages to process payments and prevent fraud.
Only if you accept cookies: pb_ref, which credits the affiliate whose link you followed, and pb_src, which records the campaign link that brought you to Playbook. Each lasts 60 days.
Our Cookie Notice lists every cookie and every setting we keep in your browser, what each one does and how long it lasts. You can change your choice from the cookie banner or by clearing cookies in your browser. Declining does not stop anything working; it only means we do not credit an affiliate's link or record which campaign brought you.
7. How Long We Keep It
- Your account, profile, posts and Tracker: while your account is open. When you delete your account, we delete them, except as below.
- Payment, payout and commission records: 6 years after the end of the financial year they relate to, because UK tax law requires it. Records of payouts already made stay on file for the same reason.
- Referrals: if you were referred, the referral record stays for the affiliate's commission and our accounts, without your name or email once your account is deleted.
- Reports and records of enforcement: as long as needed to keep Playbook safe, and no longer than 2 years after the account concerned closes.
- Backups: deleted data can stay in encrypted backups for a short time, until they are overwritten.
- Daily visit counts: kept, as they contain nothing about any person.
8. Your Rights
Under UK data protection law you have the right to:
- get a copy of your personal data;
- have inaccurate data corrected;
- have your data deleted (you can delete your account yourself in Settings);
- restrict or object to our use of your data, including any use based on our legitimate interests;
- receive the data you gave us in a format you can take elsewhere;
- withdraw consent at any time, where we rely on it.
To use any of these rights, email support@playbookaps.com. We will answer within one month. We may need to confirm your identity first. These rights have some legal limits, for example where we must keep records for tax.
If you live in a US state with its own privacy law, you may have similar rights to know about, correct and delete your data, and we will honour them in the same way. We do not sell or share personal data as those laws define it.
If you are unhappy with how we handle your data, please tell us first. You can also complain to the Information Commissioner's Office at ico.org.uk.
9. Security
We protect your data with encryption in transit, access controls that let each member reach only their own private data, scrambled passwords and optional two step verification. Card and bank details are handled by Stripe and never touch our servers. No system is perfectly secure; if a breach puts your rights at risk, we will tell you and the ICO as the law requires.
10. Children
You must be at least 13 to use Playbook. We do not knowingly collect data from children under 13. If you believe a child under 13 has an account, email us and we will delete it.
11. Changes to This Policy
We will update this policy when how we use data changes. We will tell you by email or in Playbook before a change that matters takes effect. The date at the top shows when it last changed.
Effective: 18 October 2026