Privacy Policy

Last updated: 6 June 2026

This Privacy Policy explains how Outnumber ("we", "our", or "us") collects, uses, and protects your personal information when you use our website at outnumber.com.au and any associated services. We are committed to protecting your privacy in accordance with the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs).

1. What information we collect

We collect the following categories of personal information:

Account information. When you create an account, we collect your email address and display name. If you sign up via Google, we receive the name and email address associated with your Google account.

Usage data. We collect information about how you use the site, including pages visited, features used, number sets generated, draws viewed, and approximate session duration. This is collected via Google Analytics and our own application database.

Saved number sets and preferences. If you create an account, we store the number sets you save, your alert thresholds, and your notification preferences in our database.

Subscription and billing information. If you subscribe to Pro, we store your subscription status and billing history in our database. We do not store your card number, CVV, or bank account details. All payment data is handled directly by Stripe and governed by Stripe's Privacy Policy.

Communications. If you contact us by email, we retain the correspondence to resolve your enquiry.

2. How we use your information

We use your personal information to:

Create and manage your account
Deliver jackpot alerts and draw match reports you have opted into
Process and manage your Pro subscription via Stripe
Respond to your support enquiries
Improve the site by analysing usage patterns in aggregate
Send transactional emails such as payment receipts and account notifications

We do not use your personal information for unsolicited marketing without your explicit consent. You can unsubscribe from any optional email at any time using the link in each email.

3. Third-party services we use

We rely on the following third-party services to operate Outnumber. Each service is bound by its own privacy policy and, where applicable, data processing agreements.

Supabase stores your account data, saved sets, alert preferences, and draw history in a managed PostgreSQL database hosted in Australia. See supabase.com/privacy.

Supabase Auth manages user authentication (sign-up, sign-in, and session management). Supabase stores your email and name securely and issues encrypted session tokens. See supabase.com/privacy.

Stripe processes all subscription payments. We never see or store your card details. Stripe is PCI DSS Level 1 compliant. See stripe.com/au/privacy.

Vercel hosts the site and handles serverless function execution. Server logs may contain your IP address and request metadata, retained for a short period for security and debugging. See vercel.com/legal/privacy-policy.

Google Analytics (GA4) collects anonymised usage data including pages visited, session duration, approximate location (country/state level), and device type. IP addresses are anonymised. You can opt out using the Google Analytics opt-out browser add-on.

Resend is our transactional email provider, used to send jackpot alerts, match reports, and account notifications. See resend.com/privacy.

4. Cookies

We use the following types of cookies:

Analytics cookies (Google Analytics / GA4): These collect anonymised data on how visitors use the site to help us improve it. They are set by Google and persist across sessions.
Session / authentication cookies (Supabase Auth): These are essential for keeping you logged in. They are set when you sign in and expire when your session ends or you sign out.
Payment cookies (Stripe): Set during checkout to secure the payment flow. These are strictly necessary for subscription processing.

You can manage or disable cookies through your browser settings. Disabling authentication cookies will prevent you from staying logged in. For full details, see the Cookie Policy.

5. Data retention

We retain your personal information for as long as your account is active. If you request account deletion, we will delete your account data, saved sets, and personal information within 30 days. Billing records may be retained for up to 7 years as required by Australian tax law. Anonymised aggregated usage data may be retained indefinitely.

6. Your rights under the Australian Privacy Act 1988

Under the Australian Privacy Principles, you have the right to:

Access the personal information we hold about you
Correct inaccurate or out-of-date personal information
Request deletion of your personal information (subject to legal retention obligations)
Complain to us if you believe we have breached your privacy, and if unsatisfied, to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au

To make any of these requests, email us at hello@upgraded.au. We will respond within 30 days in accordance with APP 12.

7. Data security

We implement reasonable technical and organisational measures to protect your personal information from unauthorised access, disclosure, alteration, or destruction. All data in transit is encrypted via HTTPS. Database access is restricted via role-based access controls. Payment processing uses Stripe's PCI-DSS compliant infrastructure.

8. Children's privacy

This site is intended for users aged 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, please contact us and we will delete it promptly.

9. Changes to this policy

We may update this Privacy Policy from time to time. The date at the top of this page reflects the most recent revision. Continued use of the site after a policy update constitutes acceptance of the revised policy. We will notify registered users of material changes by email.

10. Contact us

For privacy-related enquiries, access or correction requests, or to make a complaint, contact us at: hello@upgraded.au