Privacy and data
What Volt Projections holds about you, who else can see it, and how long it lasts. The short answer is: very little, and we never sell it.
1The short version
In shortWe hold your Whop identity and a session cookie, and we run one advertising measurement pixel from Whop. We never sell anything about you.
- We run one third-party measurement tool: the Whop Pixel, which tells Whop that a visit came from an advert. There is no other analytics, and no ad network beyond Whop.
- We save display choices and the pixel opt-out in your browser, and cache site files. The pixel may also set its own identifier.
- Every other request the site makes goes to our own server. Fonts are served by us, not by a font network.
- We do not sell, rent or share member data for marketing, and we never see your card details.
2What we hold, and why
In shortEnough to know you are a paying member and keep you signed in. Nothing about your betting.
| What | Why we have it | Who else sees it | How long |
|---|---|---|---|
| Whop account id and username | To know which member you are and show your name in the console | Whop | Retained for access management and support; contact us about deletion |
| Email address, if Whop returns one | Service notices about your access | Whop | Retained for access management and support; contact us about deletion |
| Membership status | To grant or end console access | Whop | Access checks and entitlement evidence are retained server-side |
| A session token in one cookie | To keep you signed in and revoke this session when you sign out | Nobody | 30 days, or until you sign out |
| Server request logs, including IP address | Security, abuse prevention and debugging | Nobody | Rotated operational logs; retention varies by log and backup |
We do not ask for your name, address, phone number or date of birth, we do not know which books you use, and we have no way of seeing what you bet or whether you bet at all. The picks recorded on the Results page are the model’s, not yours.
3Who else sees it
In shortWhop, because that is how you sign in and pay. Our hosting provider, because the server runs somewhere. Nobody else.
Your information is shared with exactly two kinds of party, and only as far as the service needs:
- Whop — our identity and payment provider. Signing in sends you to Whop and back; we ask Whop who you are and whether your membership is valid. Whop is the data controller for your account and payment information under its own privacy policy.
- Our infrastructure provider — the server and database that run the service, acting on our instructions and not permitted to use your data for anything else.
Beyond that, and the Whop Pixel described under “Cookies and tracking”: no other advertisers, no data brokers, no analytics vendors, no affiliate networks, and no sale or sharing of personal information for money. We would only disclose data where the law requires it, and we would tell you unless we were forbidden to.
4Cookies and tracking
In shortSign-in storage, browser preferences and the Whop advertising measurement pixel described below.
The member sign-in cookie, volt_whop, holds a random session token, is marked HttpOnly and Secure so scripts cannot read it and it only travels over HTTPS, is scoped to this site, and lasts 30 days or until you sign out. Signing out revokes it on the server as well as removing it from your browser.
During Whop sign-in, volt_oauth_state binds the sign-in attempt to this browser and expires after 15 minutes. It is Secure, HttpOnly and SameSite=Lax. volt_session is a legacy cookie name, not the standard member sign-in cookie.
The site also loads the Whop Pixel from t.whop.tw on every page. It is an advertising measurement tool: it records that a page was viewed and lets Whop connect a purchase back to the advert that led to it. It may set its own identifier in your browser to recognise a return visit. It does not read our sign-in cookie, and we do not send it your name, email or anything about your betting. Whop is the controller of what it collects — their privacy terms apply to it.
Beyond that there is no other analytics, no cross-site advertising cookie of ours, and no fingerprinting. If you would rather not be measured, you can switch the pixel off right here, and the site works exactly the same without it. We also check for a Global Privacy Control or “do not track” signal before loading the pixel and do not load it if your browser is sending one, so a tracking blocker or that browser setting works too.
Browser preferences include volt-board-view, volt-tour-board, volt-game and volt-no-pixel. These store view, tour, esport and tracking choices. The service worker caches static site files; it does not cache the API or member-page HTML.
5Where the match data comes from
In shortPosted lines and official box scores come from an esports data supplier. None of it is about you.
Projections are built from publicly posted prop lines, published match results and official box scores, supplied to us by a third-party esports data provider under a commercial agreement. That data describes professional matches and players, not members.
Nothing about you is sent to that supplier, or to any book. Opening a book from the Lineups page is an ordinary outbound link: they will see the visit as they would any visitor, under their own privacy policy, and we pass nothing with it.
6How long we keep things
In shortSession expiry and deletion of stored records are different. Contact us about data retention or deletion.
Member sessions expire after at most 30 days and sign-out revokes the session. Account and entitlement evidence is retained to manage access and support. Expiry does not mean every related database row, log or backup is immediately deleted.
Operational logs and backup copies have their own retention. We do not promise an automatic account-deletion deadline here. You can request access or deletion using the contact route below; applicable obligations may require some records to remain.
7Your rights and choices
In shortContact us to request access to or deletion of your data. Cancelling a subscription and deleting stored data are separate actions.
Depending on where you live you may have rights to access, correct, export or delete the personal information we hold, to object to or restrict its use, and to complain to your data protection authority. Because we hold so little, most requests are quick.
To exercise any of them, message us through your Whop account. Deleting your Volt data does not cancel your Whop subscription; cancel that in Whop. Requests about your Whop account or payments should go to Whop, since they hold that relationship.
8How it is protected
In shortHTTPS everywhere, a session you can revoke, a read-only database role, and access limited to what the service needs.
The site is served only over HTTPS with strict transport security and a content security policy that restricts script sources, including the permitted Whop Pixel host. Sign-in uses Whop’s OAuth flow with PKCE; we never receive your Whop password. Sessions are revocable server-side and access is periodically checked against membership evidence.
The service reads match data through a read-only database role that cannot write, and member records are kept separately from it. No system is perfectly secure, and we do not claim otherwise, but we will tell affected members promptly if a breach ever puts their data at risk.
9Changes and contact
In shortIf this policy changes materially you will see it here with a new date, and in the console.
We will post any material change on this page with a new date, and give notice in the console. The current version is dated 2026-10-06.
Data controller: Volt Projections. Privacy questions and requests can be sent through your Whop account.
Related pages: Terms of Service · Responsible gaming · How the model works