Your data, without the fog.

1. Controller and scope

NightlyPicks is a trading name of JJBX Limited, registered in England and Wales, company number 16992041. Registered office: 124 City Road, London, EC1V 2NX, United Kingdom.

JJBX Limited is the controller for personal data used to provide NightlyPicks, unless a separate notice says otherwise. This notice covers nightlypicks.com, NightlyPicks email subscriptions and associated account features.

2. Information we collect

• Account data: email address, generated or chosen username, credentials submitted to our identity service, email-verification state, profile image URL, account roles and session information, and a server-issued browser receipt recording the 21+ declaration and legal-notice versions accepted at signup.
• Email subscription data: email address, NBA/WNBA preference, consent metadata, confirmation state and unsubscribe or suppression status.
• Research-tool inputs: slip text, slip screenshots, selected legs and related game or market fields that you choose to submit for parsing, checking or a pre-game dossier. Avoid including your name, account number, balance or other unnecessary personal information in a screenshot.
• Usage and technical data: requested pages, browser and device information, IP-derived request/security information, timestamps, error logs and a small allowlist of cookieless product events. We deliberately remove query strings and fragments from analytics and do not attach email, username, pick text or form values to those events.
• Preferences: selected league, analytics objection and short-lived session recovery state stored in your browser.

3. Why we use it

• Provide, secure and troubleshoot accounts and requested tools.
• Send emails you specifically requested and manage preferences.
• Remember league context and essential session state.
• Understand aggregate product use and improve NightlyPicks without building cross-site advertising profiles.
• Prevent abuse, enforce our terms and meet legal obligations.

Under UK data-protection law, the corresponding bases are performance of a contract or steps you request before a contract, your consent for marketing email, our legitimate interests in security and restrained product improvement, and compliance with legal obligations. You can withdraw email consent at any time without affecting earlier lawful processing.

4. Service providers and disclosures

We use providers only where needed to operate the service, including:

• Mailflix for double-opt-in subscriptions, audience preferences, delivery and suppression.
• Vercel for website hosting, security and restrained web analytics.
• Our account identity service for authentication, account profiles and secure session cookies.
• Our grading and research services when you submit a slip or request a market check. These services receive the submitted research fields; do not include unrelated personal information.

We may also disclose information where legally required, to protect rights and security, or as part of a genuine corporate transaction subject to appropriate safeguards. We do not sell personal data.

5. International processing

Some providers may process information outside the United Kingdom. We are confirming each provider's processing locations and transfer mechanism and do not promise a particular storage region in this notice. Where UK transfer law applies, an applicable adequacy regulation or other lawful safeguard is required. The current vendor and transfer review is listed as an open launch-readiness item.

6. Retention

We keep account data while the account is active and for a reasonable period afterwards where needed for security, disputes or legal obligations. Newsletter records remain while you are subscribed; minimal suppression information may be retained after unsubscribe so that we honour your request. Operational and security logs are kept only as long as reasonably necessary for their purpose.

Retention for submitted slip material depends on the operational research service. Until a fixed deletion schedule is published, do not submit screenshots containing personal or account information.

7. Your rights

Depending on where you live, you may ask for access, correction, deletion, restriction, portability or an objection, and may withdraw consent. We may need to verify your identity before completing a request. UK users can also complain to the Information Commissioner’s Office.

Email subscribers can use the unsubscribe link in every marketing message. Analytics choices are available on the Cookie and Storage Notice.

The browser receipt is not our authoritative account acceptance log. Central account-side consent history and self-service data controls remain launch-readiness work.

8. Children

Betting-oriented NightlyPicks features are for adults aged 21 and over. We do not knowingly collect account or newsletter data from children. Contact us if you believe a child has supplied personal data so that we can investigate and remove it where appropriate.

9. Security and changes

We use technical and organisational measures intended to protect personal data, but no internet service is risk-free. We will update this notice when material practices change and identify the current revision date at the top of the page.

10. Privacy contact

Write to JJBX Limited at 124 City Road, London, EC1V 2NX, United Kingdom. We will add a dedicated privacy email here before paid access launches.