Privacy

The short version

Lax Action is a lacrosse betting-analytics site. Almost all of it works without you telling us anything. The only personal information we hold is what you type into one of three forms — the newsletter signup, the feedback box, and (when it is offered) a premium waitlist — plus ordinary web analytics. We do not sell it, we do not have advertising trackers, and we keep the newsletter list separate from everything else on this page.

Newsletter signup and consent

If you subscribe, we store your email address, where on the site you subscribed from, the time, and the IP address the request came from. We also store the state of your consent — pending, confirmed, or unsubscribed — and the times it changed.

Subscribing is a two-step, confirmed opt-in: you are not on the list until you click the link in a confirmation email. That confirmation link is stored only as a one-way hash, so the link itself exists in your inbox and nowhere in our database, and it stops working once used or after it expires. Your unsubscribe link is stored as-is, on purpose, so that it keeps working forever — an unsubscribe link that expires is not an unsubscribe link.

You can leave at any time from the link in any issue, and you do not need to explain why. We keep a record that you unsubscribed, because the alternative is forgetting and mailing you again.

Premium waitlist and product research

Lax Action may at some point ask whether you would be interested in a paid product. If you fill in that form, we store your email address, the optional answers you give about how you bet, where you submitted from, the time, and the IP address. We use it to decide whether to build the thing at all, and to contact you about it.

These are two different lists and we do not mix them. Subscribing to the free newsletter is permission to send you the newsletter. It is not an expression of interest in a paid product, and we do not treat it as one, or count you in any research about pricing or paid features. Joining a waitlist is the reverse: it tells us you are interested in a product, and it is not permission to add you to the newsletter. Neither one signs you up for the other.

If you are on the newsletter list from before this notice was written, none of that changes for you. You were not moved onto any research list and you will not be.

Feedback

The feedback form stores what you wrote, which page you were on, your browser user-agent string, and — only if you choose to give it — your email address, so we can reply. Leave the email blank and the feedback is anonymous to us.

Analytics and error monitoring

We measure how the site is used with PostHog. We have deliberately turned off its automatic capture, which means we record a specific short list of events — which page you looked at, which filters you changed, which matchup you compared — and not everything you click. PostHog sets a cookie and uses browser storage to recognise a returning browser. Depending on configuration, the site may also load Google Analytics and Vercel Speed Insights, which measure traffic and page performance.

We use Sentry to record errors when something on the site breaks. Error reports can include the page you were on and technical details of the failure.

None of these analytics events are supposed to carry your email address or your name, and we keep a written list of what each one is allowed to contain specifically so that stays true.

Spam and abuse prevention

All three forms are protected by Cloudflare Turnstile, which checks that a submission came from a person rather than a script, and by a rate limit keyed to your IP address. This is why we store an IP address with a form submission: to stop the same source from submitting hundreds of times.

Who else can see it

The site is hosted on Vercel and the database is Supabase. Email, when we send it, goes through an email delivery provider. Analytics goes to the providers named above. Those companies process this data because they run the infrastructure; we do not sell personal information to anyone, and we do not run advertising trackers.

Needs review: The named-subprocessor list, retention periods, the legal basis for each collection, and the specific rights available to readers in the EU, UK, and California are not stated on this page. They are the parts of a privacy notice that most need counsel, and drafting them from the codebase alone would be guessing.

What does not exist

There are no user accounts on this site. There is no login, no password, no profile, and no saved settings tied to a person. There is no payment processing and no paid subscription, so we hold no card details and no billing records of any kind. If any of that changes, this notice has to change first.

Getting your data removed

Email support@laxaction.com and say what you want removed. For the newsletter, the unsubscribe link in any issue is faster and works immediately.