Grizzly Bulls

Grizzly Bulls Privacy Policy

Last Revised: September 19, 2026

This Privacy Policy explains how Grizzly Bulls collects, uses, and discloses personal information when you use our websites, accounts, subscription features, APIs, contact forms, and related services that link to this policy (collectively, the "Service").

This policy describes the current Service as implemented. It does not mean that every category described below is collected from every user.

Information We Collect

Account and Authentication Information

If you create or use an account, authentication is handled through Firebase Authentication. Depending on how you sign in, information can include:

  • your email address;
  • your display name or name;
  • your Firebase user identifier;
  • whether your email has been verified;
  • profile image information supplied through an identity provider such as Google;
  • authentication and session information needed to keep you signed in; and
  • records of explicit Terms of Service and Privacy Policy acceptance, including the applicable document versions and acceptance timestamp.

Grizzly Bulls supports email/password authentication and Google sign-in. Password authentication credentials are handled through Firebase Authentication rather than stored as plaintext passwords in Grizzly Bulls application records.

Account Profile and Preference Information

Account features may store information you choose to provide, including:

  • username;
  • profile biography or "about me" text;
  • avatar URL;
  • SMS number;
  • email and notification preferences;
  • account signup date;
  • subscription privilege or access level; and
  • whether an API key has been configured.

Some profile fields are designed for public display. Current public profile projections may include username, account privilege, profile biography, signup date, avatar, and user identifier. Do not place information in a public-profile field that you do not want other users to see.

Contact and Support Information

If you use the contact form, we collect the first name, last name, email address, message, submission time, and, if you are signed in, an account identifier that may be associated with the submission.

Contact submissions are stored in our application database. Operational notifications containing the submitted contact information may also be sent to a private Grizzly Bulls Discord channel through a configured Discord webhook so the request can be reviewed and answered.

Billing and Subscription Information

Subscription checkout is provided through Stripe. The hosted checkout flow can collect payment-card information, billing address, name, phone number, and related payment information directly through Stripe.

Grizzly Bulls receives and stores information needed to administer subscriptions, which may include:

  • Stripe customer and subscription identifiers;
  • selected product and price identifiers;
  • subscription status and subscription dates;
  • billing address;
  • payment-method type and limited payment-method metadata returned by Stripe; and
  • plan and access-level information.

Grizzly Bulls does not ask you to enter a full payment-card number or CVC into a Grizzly Bulls application form. Those sensitive card-entry fields are handled by Stripe's payment interfaces. Stripe may separately retain payment information under its own privacy policy and terms.

Technical and Usage Information

When you use the Service, Grizzly Bulls and its service providers may receive standard technical information associated with web requests and application operation, such as:

  • IP address and request metadata;
  • browser and device information;
  • pages or features used;
  • timestamps;
  • referring or destination pages;
  • application errors, security events, and operational logs; and
  • interaction or event data used to understand how public research and product surfaces are used.

We do not state a fixed retention period for web-server or infrastructure logs because retention can vary by system, provider, security need, and backup lifecycle.

Cookies and Similar Technologies

The Service uses an authentication session cookie named grizzlybulls-auth to support signed-in server-side sessions. The current session cookie is HttpOnly, SameSite=Lax, scoped to the Service, and configured for a session lifetime of up to 12 days unless cleared earlier.

Grizzly Bulls also uses Google Analytics where analytics configuration is enabled. Google Analytics and related browser technologies may use cookies or similar identifiers to measure page views, events, traffic sources, and product or research interactions.

Your browser may allow you to block or delete cookies. Blocking authentication cookies can prevent signed-in features from working correctly, and blocking analytics scripts may reduce measurement without preventing ordinary public-page access.

Information From Other Sources

We may receive information from service providers and integrations used to operate the Service, including:

  • Firebase and Google for authentication;
  • Stripe for subscription and payment administration;
  • Google Analytics for site and product measurement; and
  • identity providers you choose to use for sign-in.

We may combine information from those sources with information already associated with your account when necessary to operate the Service.

How We Use Information

We use personal information to:

  • create and authenticate accounts;
  • provide, maintain, secure, and troubleshoot the Service;
  • provide subscription access and administer billing;
  • respond to contact, support, licensing, correction, and research inquiries;
  • send account, security, service, and subscription communications;
  • honor email and notification preferences;
  • measure usage and improve product, research, and navigation experiences;
  • detect abuse, fraud, security incidents, and unauthorized access;
  • enforce applicable agreements and access controls;
  • comply with legal obligations and valid legal process; and
  • protect the rights, safety, and integrity of Grizzly Bulls, our users, and third parties.

How We Disclose Information

We may disclose personal information in the following circumstances.

Service Providers

We use service providers to operate important parts of the Service. Current integrations include:

  • Google/Firebase for authentication and application database services;
  • Stripe for hosted checkout, payments, billing, and subscription administration;
  • Google Analytics for traffic and product/research measurement; and
  • Discord for private operational notifications such as contact submissions, new account notifications, and subscription-status notifications.

We may also use hosting, infrastructure, security, communications, data, and other technical providers as necessary to operate the Service. Providers may process information subject to their own contracts, policies, and legal obligations.

Legal, Safety, and Enforcement Reasons

We may disclose information when we reasonably believe disclosure is necessary to comply with applicable law, regulation, legal process, or governmental request; enforce our agreements; investigate fraud or security incidents; or protect the rights, property, or safety of Grizzly Bulls, our users, or others.

Business Transactions

Information may be transferred as part of a merger, financing, acquisition, reorganization, bankruptcy, sale of assets, or similar transaction involving all or part of the business, subject to applicable law.

At Your Direction

We may disclose information when you ask us to, authorize an integration, publish information to a public profile, or otherwise direct the disclosure.

We may also use or disclose aggregated or de-identified information where it no longer reasonably identifies an individual, subject to applicable law.

Data Retention

We retain personal information for as long as reasonably necessary for the purposes described in this policy, including providing the Service, maintaining account and subscription records, handling support and correction requests, protecting security, resolving disputes, enforcing agreements, complying with legal obligations, and maintaining appropriate backups.

Retention periods vary by category, system, provider, and legal or operational need. When information is no longer reasonably needed, we may delete, anonymize, or allow it to expire in the ordinary course of system and backup lifecycle management.

Security

We use administrative, technical, and organizational measures intended to protect personal information. No network, storage system, authentication system, or transmission method is completely secure, so we cannot guarantee absolute security.

International Processing

Grizzly Bulls and some of its service providers operate in or process information in the United States and other countries. Information may therefore be processed in jurisdictions with laws different from those where you live, subject to applicable legal requirements.

Your Choices and Requests

Account and Profile Information

Signed-in users may be able to update certain profile fields and communication preferences through account features. Some account or billing information is controlled by the authentication or payment provider and may need to be updated through that provider's interface.

Promotional Communications

Where promotional emails are sent, you may opt out using the unsubscribe method included in the message or available account preferences. We may still send non-promotional communications that are necessary for account, security, billing, or Service administration.

Cookies and Analytics

You can use browser controls, extensions, or other device settings to block or delete cookies and scripts. Disabling certain technologies may affect account functionality or measurement.

Privacy Rights

Depending on where you live and which privacy laws apply to Grizzly Bulls, you may have rights relating to access, correction, deletion, portability, or certain uses or disclosures of personal information. Applicable laws can include additional verification, exception, and response requirements.

You may submit a privacy request through the contact page. We will respond as required by applicable law. This section does not state that a particular privacy statute applies to Grizzly Bulls in every jurisdiction.

Children

The Service is not intended for children under 13, and we do not knowingly direct the Service to children under 13. If you believe a child has provided personal information in violation of applicable law, please contact us.

Third-Party Sites and Services

The Service can link to or depend on third-party sites and services. Their privacy practices are governed by their own policies. This Privacy Policy applies to Grizzly Bulls practices, not independent third-party practices.

Changes to This Policy

We may update this Privacy Policy to reflect changes to the Service, our data practices, or applicable law. We will identify substantive revisions by updating the "Last Revised" date above and may provide additional notice when appropriate.

Contact Us

Questions or privacy requests may be submitted through the contact page.