Privacy Policy

This policy explains how Bootlegged collects, uses, shares, and retains information when you use our app and website, including accounts, library synchronization, and the Good Race Challenge.

Information We Collect

• Account information: If you sign in by email, we process your email address and one-time sign-in code. If you use Sign in with Apple, we process the Apple account identifier provided for Bootlegged. We also create an internal account ID and store authentication and session records. We do not receive your Apple password.
• Library and listening activity: We store shows and series you follow, saved episodes, bookmarks, playlists you create, listening progress, and supported playback and notification preferences. Signing in lets us associate supported library data with your account and synchronize it across devices.
• Good Race Challenge: If you join, we store your enrollment, predictions and edits, submission times and eligibility, scores, personal standings, and challenge notification preferences. These records are associated with your account so we can show your results and season history.
• Installation and technical information: We process installation identifiers, device and app information, session credentials, and push notification tokens. Requests to our services also provide network information, such as an IP address. Authentication uses security records, including hashed network identifiers, to limit abuse and protect accounts.
• Support: If you contact us, we receive your contact details and the information you choose to include in your message.

Account-owned data is linked to your identity through your account or installation. You can browse and listen without signing in, although streaming and other online features still make network requests. Some settings and listening data are also stored locally on your device.

How We Use Information

We use this information to authenticate you, operate and secure the service, synchronize your library, resume playback, record and score challenge predictions, display your results, deliver notifications you enable, and respond to support requests. Your email address is used for sign-in and account-related communication, not automatically added to a marketing list.

We do not sell your personal information or use your account, library, or challenge records to track you across other companies' apps and websites for targeted advertising.

Service Providers and Sharing

Service providers process information needed to operate Bootlegged. These include our hosting providers, Apple for Sign in with Apple and push notification delivery, and Resend for delivering one-time email sign-in codes. For example, our email provider receives the recipient address and sign-in message, and Apple's push service receives the device token and notification payload.

Authorized operators may access account and challenge records to provide support, investigate abuse, review results, and maintain the service. We may also disclose information when required by law or necessary to protect the service and its users.

Podcast Hosts and External Services

Podcast audio and artwork are delivered by their publishers and hosting services. Playing an episode or loading artwork sends requests to those services, which can receive your IP address, request information, and information about the content requested. Podcast audio may include advertisements, and delivery may pass through a publisher's measurement or advertising services. Their collection and use of information are governed by their own privacy policies. Links to external sites, including poll results, are also governed by those sites' policies.

Storage, Security, and Retention

Bootlegged stores information on your device and on servers used to provide the service. We use safeguards such as encrypted connections to our API, protected authentication credentials, and access controls. No storage or transmission method can guarantee absolute security.

We retain account, library, and challenge records while needed to provide those features, unless you delete the records or your account. Sign-in codes expire, and temporary authentication and security records are cleaned up according to their operational purpose. Limited deletion records and security logs may remain to prevent deleted data from being restored or to address abuse. Backup copies may remain until they are replaced or rotated; we do not promise immediate removal from every backup.

Your Choices and Account Deletion

• Account deletion: Open the account screen from Settings and select Delete account. You may be asked to sign in again. Deletion removes account identities, synchronized library data, and account-linked challenge records from the active database, revokes sessions, and disconnects associated installations. Limited records and backups are handled as described above.
• Notifications: Manage notification permissions in your device settings and available episode or challenge preferences in the app.
• Local data: You can remove local app data using your device's app-management controls. Signing out or removing the app does not by itself delete your server-side account.
• Requests: Contact feedback@getbootlegged.com to ask about accessing, correcting, or deleting your information, or if you cannot access the in-app deletion option. We may need to verify your identity before acting.

Children's Privacy

Bootlegged is not intended for children under 13. We do not knowingly collect personal information from children under 13. Contact us if you believe a child has provided personal information so we can investigate and address it.

Changes to This Policy

We will post updates on this page and revise the date above. Where appropriate, we will also provide notice through the app or another suitable channel.

Contact Us

For privacy questions or requests, email feedback@getbootlegged.com.