Legal

Privacy Policy

Effective Date: March 13, 2026 · Last Updated: March 13, 2026

CTW Digital LLC (“CTW,” “we,” “us,” or “our”) operates the Catch the W platform at catchthew.com and associated domains (collectively, the “Service”). This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our Service.

By using our Service, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Information You Provide

  • Account Information: When you create an account, we collect your email address, name, and password (hashed — we never store plaintext passwords). If you sign in with Google, we receive your Google profile name, email address, and profile image from Google’s OAuth service. You must confirm you are 13 years of age or older to create an account.
  • Profile Information: You may optionally provide your birthday (used for personalized zodiac features, birthday alerts, and Birthday Twin matching), favorite team, and timezone. Birthday is collected progressively when you engage with zodiac features — not at sign-up. We store the raw date for feature accuracy and compute derived data (zodiac sign, element, Chinese zodiac). Your raw birthday is never exposed in public API responses.
  • User-Generated Content: Activity logs, predictions, custom lists, and favorited players or teams.
  • Payment Information: When you subscribe to a paid plan, payment is processed by Stripe, Inc. Your credit card number, expiration date, and CVC are transmitted directly to Stripe and never touch our servers. We store only your Stripe customer ID and subscription status.
  • Communications: If you contact us at hello@catchthew.com, we retain the contents of your message and your email address.

1.2 Information We Collect Automatically

  • Usage Data: We log events such as page views, sign-ups, interactive feature submissions, daily activity logs, and subscription changes. Each event may include a cryptographically hashed version of your IP address, your user agent string, referrer URL, and a session identifier. We never store raw IP addresses.
  • Google Analytics: We use Google Analytics to analyze aggregate traffic patterns. You can opt out using the Google Analytics Opt-Out Browser Add-On.
  • Cookies and Local Storage: We use cookies for session management and localStorage for client-side preferences. We do not use third-party advertising cookies.
  • Push Notification Tokens: If you opt in to push notifications, your browser’s push subscription endpoint is stored. You can revoke push permissions at any time in your browser settings.

1.3 Information We Do Not Collect

  • Credit card numbers — handled entirely by Stripe.
  • Raw IP addresses — we store only cryptographic hashes.
  • Location data — we do not request GPS or fine-grained location access.
  • Data from children under 13 — see Section 8.

2. How We Use Your Information

We use your information to provide and maintain the Service, process subscription payments, send transactional emails, personalize features based on your profile, analyze usage patterns, prevent fraud, and comply with legal obligations.

We do not sell your personal information. We do not use your data for targeted advertising. We do not share your data with data brokers.

3. How We Share Your Information

  • Stripe, Inc. — to process subscription payments.
  • Google — if you use “Sign in with Google,” your authentication is governed by Google’s privacy policy. GA4 analytics data is shared with Google in aggregate form.
  • Infrastructure Providers — third-party hosting, CDN, security, and email delivery providers operating under data processing agreements.
  • Law Enforcement — if required by law, subpoena, court order, or government request.
  • Business Transfers — if CTW Digital LLC is acquired or merges, your data may transfer to the new entity. You will be notified before any such transfer.

4. Data Retention

  • Account data is retained for as long as your account is active.
  • Deleted accounts are soft-deleted for 90 days, then permanently purged. Anonymized aggregate analytics data may be retained.
  • First-party analytics events are retained for 25 months, then purged.
  • Payment records are retained as required by tax law (typically 7 years).

5. Your Rights

All users may access, export, correct, or delete their data via account settings or by emailing privacy@catchthew.com.

EEA, UK, and Swiss Residents (GDPR): You additionally have the right to object to processing, restrict processing, withdraw consent, request data portability, and lodge a complaint with your local data protection authority.

California Residents (CCPA/CPRA): You have the right to know what data we collect, request deletion, and opt out of the sale of personal information (we do not sell personal information).

6. Data Security

Passwords are hashed using industry-standard algorithms. All data is transmitted over HTTPS. Stripe handles all payment card data. API endpoints are rate-limited. If you discover a security vulnerability, please report it to hello@catchthew.com.

7. Athlete Data

We display publicly available information about professional athletes including names, positions, team affiliations, career history, and birthdays. Identity information (e.g., LGBTQ+ identity, heritage) is included only when self-disclosed by the athlete, with a verifiable public source URL. Athletes or their representatives may request corrections or removal by emailing privacy@catchthew.com.

8. Children’s Privacy

Our Service is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe your child has provided us with personal information, contact us at privacy@catchthew.com.

EU/UK residents: GDPR Article 8 sets the age of consent at 16 in most EU member states. If you are an EU/UK resident under 16, please do not use the Service without parental consent.

9. International Transfers

CTW Digital LLC is based in the United States. For EEA/UK residents, we rely on appropriate safeguards including Standard Contractual Clauses (SCCs) for international transfers.

10. Third-Party Links

Our Service may contain links to third-party websites. We encourage you to review the privacy policies of any third-party sites you visit through our Service.

11. Changes to This Policy

Material changes will be communicated via email or in-app notification. The “Last Updated” date at the top reflects the most recent revision.

12. Consent Tracking

When you accept this Privacy Policy or our Terms of Service, we record the version you accepted, the timestamp, and a hashed IP address in our consent log as required by GDPR Article 7.

13. Contact Us

Terms of Service →Back to Catch the W