Privacy Policy

Effective date: February 11, 2026

1. Introduction

Lockstep ("Lockstep", "we", "us", or "our") is operated by an individual based in California, United States. This privacy policy explains how we collect, use, store, and protect information when you use the Lockstep platform. Lockstep is a gamified social pick'em platform, where users can make picks on the outcome of sports games, earn points, climb leaderboards, and more. Lockstep does not offer gambling, wagering, or monetary rewards. Points have no cash value.

2. Information We Collect

2.1 Account Information

We use Clerk to provide authentication and account management services. When you create an account, we collect account information such as your email address, username, authentication identifiers, account creation date, account activity, and optional profile image.

2.2 Platform Activity

The Lockstep platform also creates and stores data given your use of the platform. This includes, but is not limited to: picks made, points and history, and leaderboard position. This information is necessary to operate the service.

2.3 Cookies and Tracking Technologies

We only use Strictly Necessary Cookies for essential website functions. Clerk leverages cookies in a secure, privacy-compliant manner to facilitate seamless user authentication. We also use essential cookies provided by Cloudflare to protect the platform from abuse and ensure secure operation.

2.4 Technical Information

When you use Lockstep, certain technical information may be processed. This includes, but is not limited to: IP address, browser type, operating system, device information, and request metadata. This information is used for security, fraud prevention, analytics, and performance optimization.

2.5 Analytics

Analytics information is collected from users' use of the platform. Lockstep uses a third party provider that collects and displays these analytics, Plausible. The information they store is displayed only in aggregate and includes no personal data. There is no invasive and/or cross-site tracking, and their software is open source.

3. How We Use Your Information

We use your information to provide and operate the platform. This includes authenticating users, calculating and displaying scores, maintaining leaderboards, improving platform functionality, preventing abuse and fraud, and communicating important updates.
We do not sell personal information. We only share information with third-party service providers that are necessary to operate the platform.

4. Third-Party Service Providers

We use trusted third-party providers to operate Lockstep, including:

  • Clerk: We use Clerk for user authentication and account management.
  • Cloudflare: We use Cloudflare as our DNS and security provider.
  • Plausible: We use Plausible as our aggregate analytics provider.
  • Railway: We use Railway as our hosting provider of the Lockstep website and other Lockstep services.
  • The Odds API: We use The Odds API to provide odds for our games, which influences pick scoring.
  • Zoho: We use Zoho as our email provider.

5. Data Retention

We retain account and usage data while your account is active. You may request account deletion by emailing [email protected]. We will delete your account information and associated platform data, except where limited retention is necessary for legitimate purposes such as preventing abuse or complying with legal obligations.

6. Children's Privacy

Lockstep is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will delete it.

7. California Privacy Rights (CCPA Notice)

If you are a California resident, you have certain rights under the California Consumer Privacy Act (CCPA). You have the right to request access to your personal information, request deletion of your personal information, and know whether personal information is sold or shared.

Lockstep does not sell personal information.

To exercise your rights, please contact us at [email protected]

8. Additional Information for Users in the European Economic Area (EEA), United Kingdom, and Switzerland

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, the following information applies to you under applicable data protection laws, including the General Data Protection Regulation (GDPR).

8.1 Data Controller

Lockstep is operated by an individual based in California, United States. For purposes of EU data protection law, the data controller of your personal information is the operator of Lockstep. You may contact us at:

[email protected]

8.2 International Data Transfers

Lockstep operates from the United States. Your information may be transferred to and processed in the United States and other countries where our service providers operate.

When personal information is transferred outside the EEA, UK, or Switzerland, we rely on appropriate safeguards where required by law, such as Standard Contractual Clauses or equivalent mechanisms.

8.3 Automated Decision-Making

Lockstep uses automated systems to calculate scores and update leaderboards based on user activity. These processes do not produce legal effects or similarly significant effects concerning you.

8.4 Legal Basis for Processing

We process your personal information based on the following legal bases:

Performance of a Contract

We process account information (such as email address, username, and authentication details) and platform activity (such as picks and leaderboard data) as necessary to provide and operate the Lockstep service.

Legitimate Interests

We process certain information, such as IP addresses, login timestamps, and usage data, to maintain platform security, prevent abuse, improve performance, and ensure fair operation of leaderboards. We believe these interests are not overridden by your fundamental rights and freedoms.

8.5 Your Data Protection Rights

If you are located in the EEA, UK, or Switzerland, you have the following rights, subject to certain limitations:

  • Right to access your personal data
  • Right to correct inaccurate or incomplete data
  • Right to request deletion of your data
  • Right to restrict processing
  • Right to object to processing based on legitimate interests
  • Right to data portability
  • Right to withdraw consent (where processing is based on consent)
  • Right to lodge a complaint with your local data protection authority

To exercise any of these rights, please contact us at [email protected]

9. Security

We implement reasonable technical and organizational measures to protect personal information. However, no system can guarantee absolute security.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Continued use of the platform after changes are posted constitutes acceptance of the updated policy.

11. Contact Information

If you have any questions about this Privacy Policy, contact us at [email protected].