Last updated: July 16, 2026
1. Who We Are
The Prospect Club is operated by Eric Mandelkern("Seller", "we", "us"), trading as The Prospect Club. We act as the data controller for the personal data we collect through the Service.
2. Personal Data We Collect
We collect the following categories of personal data:
- Account data: email address, password (hashed), and authentication tokens when you sign up or sign in.
- Profile / preference data: favorited players, app settings, and saved preferences.
- Usage and telemetry data: pages visited, features used, error logs, and device/browser information.
- Device identifiers and IP address: for security, fraud prevention, and rate limiting.
- Support communications: messages you send us.
3. Purposes and Legal Bases
- To provide the Service (account creation, authentication, delivering features) — legal basis: performance of a contract.
- To secure the Service and prevent fraud — legitimate interests.
- To improve the product (analytics, debugging) — legitimate interests.
- To provide customer support — legitimate interests / performance of a contract.
- To comply with legal obligations — where required by applicable law.
4. How We Share Your Data
We share personal data with the following categories of recipients:
- Service providers and subprocessors: hosting and database providers, error monitoring, analytics tooling, and email providers that operate the Service on our behalf.
- Data providers: we retrieve player statistics from third-party sports data sources (such as the MLB Stats API). These requests do not include your personal data.
- Professional advisers (legal, accounting) when reasonably necessary.
- Authorities where required by law, court order, or to protect our rights.
We do not sell your personal data.
5. International Data Transfers
Your data may be processed in countries other than your own, including the United States and the European Economic Area. Where such transfers occur, we use appropriate safeguards such as Standard Contractual Clauses or rely on adequacy decisions.
6. Data Retention
We retain personal data only as long as necessary to provide the Service and meet our legal obligations. Account data is retained while your account is active and for a reasonable period after deletion to handle disputes and comply with legal requirements, after which it is deleted or anonymized.
7. Your Rights
Depending on your jurisdiction, you may have the right to:
- access the personal data we hold about you;
- request correction of inaccurate data;
- request erasure of your data;
- restrict or object to processing;
- data portability;
- withdraw consent at any time (where processing is based on consent);
- lodge a complaint with your local data protection authority.
To exercise these rights, contact us through the Service. We aim to respond within one month.
8. Security
We use appropriate technical and organizational measures to protect personal data, including encryption in transit, hashed passwords, access controls, and regular security reviews. No system is completely secure, and we cannot guarantee absolute security.
9. Cookies and Similar Technologies
We use essential cookies and local storage to keep you signed in and remember preferences. We may use limited analytics cookies to understand product usage. You can manage cookies through your browser settings.
10. Children
The Service is not directed to children under 13 (or the equivalent age in your jurisdiction). We do not knowingly collect personal data from children.
11. Changes to This Notice
We may update this Privacy Notice from time to time. Material changes will be communicated through the Service or by email.
12. Contact
For privacy questions or to exercise your rights, contact Eric Mandelkern through the Service.