Privacy
Policy

CornermanAnalytics, LLC, 131 Continental Dr, Suite 305, Newark, DE 19713, USA, is the controller of the personal data described here. Write to hello@getcornerman.com about anything on this page, including a request to see or delete your data. A person reads that inbox.

Your email address

The only thing we ask for at sign-up. There is no password, because we sign you in with a one-time link instead. Your email is how we identify your account, send you sign-in links, and reach you about billing.

Your age confirmation

The date you ticked “I'm 21 or older” when you first signed in. Only the date: we never ask for your birthday or any ID.

Your bankroll and risk setting

The money you tell us you've set aside for UFC, if you set it, the budget you enter for a card, the risk level you pick, and the running profit or loss and remaining budget we derive from them. These are numbers you typed. We cannot see any real account and do not try to.

The bets you record

What you picked, the stake, the price, the potential payout, whether it won or lost, when it settled, and the stake our plan had suggested so that the product can show you where you diverged from it. Only the bets you choose to enter. We have no connection to any sportsbook.

Membership status

Your Stripe customer identifier, whether the membership is active, trialing, past due or cancelled, and when the current period ends. We do not store your card, your billing address or your invoices, because those stay with Stripe.

Notification subscriptions

If you turn on alerts for fight results, your browser gives us a subscription: a long web address belonging to your browser maker's notification service, and two keys that let us encrypt a message to that one device. Together they identify the device, not you, and we keep one for each device you switch alerts on for. We also note the country your browser last connected from, and nothing finer, so that results can be held until a card is over where in-play betting is restricted. Turning notifications off for CornerMan in your browser's settings makes the subscription dead, and we delete it the next time we try to use it.

Technical records

Our sign-in provider records the IP address and browser user agent attached to each session, along with sign-in timestamps, as an ordinary security measure. Our host keeps short-lived request and error logs which include IP addresses. Our own server logs deliberately record identifiers rather than people: no email address, no account id, and no stake amount is ever written to them.

Product analytics and error reports

We record a small set of product events against your account id so we can see where the product works and where it breaks: that you signed in, hit the paywall, started a session, recorded bets, started checkout, and that a subscription activated or cancelled. We also record page views, and a masked replay of your session. When something throws an error, the error and its stack trace are reported too. Section 05 says exactly what these do and do not carry.

This section is as load-bearing as the one above, so it is worth being specific. Inside the CornerMan app:

• No money figure ever leaves us as a number. Analytics events carry a band, such as "500-999", and never your budget, your stake or your P&L. A property reading your actual bankroll would be a targeting list, and on a product next to gambling that turns a routine vendor breach into a story about named people. Counts of things are sent as they are. A count is not a financial fact.
• Your email address is never sent to an analytics or error vendor. They see the same account id our database uses, a UUID that means nothing outside it. Our sign-in provider stamps your email onto internal requests, and our error reporter strips that header back out before anything is sent.
• No advertising pixels, no Meta pixel, no conversion tags, no remarketing of any kind.
• No card details. Payment pages are hosted by Stripe. Your card number never reaches our servers. We do keep the fingerprint Stripe derives from a card that has had a free first card, as a membership or as a single card, a code that identifies the card without revealing its number, so the free card can only be claimed once. It is kept if you delete your account.
• No personal data goes to our AI provider. We use Claude to help produce fight predictions, and the prompts we send contain fighter statistics and nothing else. No account identifier, no email address, no bankroll figure and no bet of yours has ever been in one.
• No click tracking and no keystroke capture. Automatic click capture is deliberately switched off, because on the slip the text of a button is a stake. Every event in the product is one we placed by hand and can name.

We do not sell personal information, and we do not share it for cross-context behavioural advertising. We never have, and the product has no mechanism that would let us.

To run your account and sign you in, to produce and show your plans, to take payment and manage membership, to answer your email, to keep the service secure and debug it when it breaks, and to meet our tax and accounting obligations.

For members in the UK and the EU, our lawful bases are: performing our contract with you, for everything needed to provide the service and take payment; our legitimate interests, for security, fraud prevention, debugging and keeping records of what we sold; your consent, for the analytics described in section 05, which we ask for before any of it starts and which you can withdraw at any time from Cookie settings at the foot of the page, by blocking it in your browser or by asking us, and for the old waitlist described in section 06; and legal obligation, where tax or accounting law requires us to keep something.

We do not use your data to make automated decisions with a legal or similarly significant effect on you. The product does size stakes automatically, but only for you to look at, and it never acts.

Two kinds of cookie. The first is the session cookie our sign-in provider uses to keep you signed in, plus a short-lived one during the sign-in exchange. Those are strictly necessary: without them you cannot stay logged in. The second comes from our analytics provider, PostHog, which also stores an identifier in your browser's local storage. Those are not strictly necessary, and there are no advertising cookies at all.

Session replay is on, so we can watch back how a page was used when something goes wrong. It is recorded with masking deliberately turned up: every form input is masked wholesale, the figures on your plan are masked at the point they are rendered, and network request bodies are not recorded, so stakes cannot escape on the wire where no amount of screen masking would reach them. The plan page shows a named person's finances, and an unmasked recording of it sitting in a third-party service is the exact thing that masking exists to prevent.

In the UK and the EU it works differently. Analytics does not load at all until you choose Accept on the banner we show you, so nothing is stored in your browser before you have said yes. Even then, session replay stays off: you get page views and the named events, never a recording. Cookie settings, at the foot of the page, lets you change your mind at any time.

If you are not signed in, we hold no person record for you at all: anonymous visitors produce events without a profile. Once you sign in, the browser's anonymous id is tied to your account id so the two halves of the funnel are one person rather than two, and signing out cuts that tie again, which matters on a shared computer.

Errors are reported to Sentry, separately. It is configured not to attach the things it would otherwise attach by default, meaning no IP address, no cookies and no request bodies, and it drops your email before an error is sent. It does not record replays.

You can block all of this with any content blocker, and the product will work exactly as before. If you would rather we simply stopped, email us and we will exclude your account.

Until 28 September 2026, getcornerman.com served a separate holding page with a waitlist. That page is gone, and the app you are using now carries none of its tracking. What it left behind:

• If you joined the waitlist, your email address was submitted to a Google Formand is stored in Google's services as well as reaching us. Email us and we will delete it.
• That page loaded Google Analytics 4 while it was live. Nothing on the current site does.
• It saved your email in your own browser's local storage, under the key cornerman_waitlist, to remember you had signed up. Clearing site data removes it.

We keep this list short on purpose. Each of these companies processes data on our behalf, under their own terms, and we have named what they actually receive.

Supabase

Runs our database and sign-in. Holds everything in section 02, including your email, your bankroll figures and your bet history. Also sends your sign-in emails, using Resend as its delivery service, which means Resend processes your email address and the contents of that message.

Vercel

Hosts and runs the application. Sees requests, including IP addresses and headers, and keeps operational logs.

Stripe

Takes payment. We send Stripe your email address and your CornerMan account id so the subscription can be matched to you. Stripe collects your name, billing address and card details directly from you, as an independent controller for its own fraud and compliance purposes, under its own privacy policy.

PostHog

Product analytics and session replay, on its US cloud. Receives your account id, the events named in section 02, page views and masked replays. Never your email address, and never a raw money figure. In the UK and the EU, nothing at all until you accept, and no replays even then.

Sentry

Error reporting. Receives the error, its stack trace and your account id. Configured to attach no IP address, no cookies and no request bodies, and to strip your email address before sending.

Anthropic

Provides the language model behind our predictions. Receives fighter statistics only. No data about you is sent, ever.

Your browser's notification service

If you turn on alerts, sending one means making a request to whoever makes your browser — Google for Chrome, Apple for Safari, Mozilla for Firefox — because that is the only route to a device that is not currently on our site. They receive the subscription described in section 02 and the timing of each message. They do not receive what it says: the text is encrypted with your device's own keys before it leaves us, and only your browser can read it.

TheRundown

Supplies odds and results. Receives nothing about you. We fetch prices for a card, not for a person.

Upstash

Triggers the scheduled jobs that refresh odds, predictions and results on a timer. Handles no personal data.

GitHub

Holds the code, and runs the job that refreshes our fighter statistics after each card. Handles no personal data.

Google

Holds the responses to the old waitlist form described in section 06. Nothing from inside the app.

We may also disclose data if the law genuinely requires it, to protect our rights or someone's safety, or to a buyer if the business is ever sold, in which case we will tell you first.

Our database, application and sign-in service run in the United States. If you are in the UK or the EU, using CornerMan means your data is transferred to and processed in the US. Our providers rely on standard contractual clauses and equivalent safeguards for those transfers.

Your account data stays for as long as your account exists. Bets and card sessions are kept as a permanent record, because the point of the product is to show you what happened over time, so they are not deleted automatically when a card ends.

When you delete your account, everything in section 02 goes with it. Host and sign-in logs age out on their providers' own short cycles. Stripe keeps its billing records independently of us, as it is required to for tax and anti-fraud reasons, and we cannot delete those on your behalf. You can ask Stripe directly.

You can ask us to show you the data we hold about you, correct it, export it in a portable form, delete it, or restrict or object to what we do with it. Wherever you live, we will honour those requests. We do not charge for this and we will not ask you why.

The quickest way to get a copy is to do it yourself: Download your data, on the Account page, gives you everything in section 02 as a single file you can keep or take elsewhere. Your payment history is in Stripe's billing portal, linked from the same page.

To delete your account and everything attached to it, sign in and use Delete account at the bottom of the Account page. It takes effect immediately. If you can't sign in, email hello@getcornerman.com from the address you signed up with and we will do it for you within 30 days.

Deleting removes your account, your card sessions, your plans, your bets, your notification subscriptions and your membership record together. If you have a membership, it is cancelled with Stripe first and you are not charged again; if that cancellation fails, nothing is deleted and we tell you, so you are never left paying for an account that no longer exists.

If you are in the UK or the EU and you think we have handled your data badly, please tell us first, but you are entitled to complain to your data protection authority, which in the UK is the Information Commissioner's Office. If you are in California, you have the right to know, delete, correct and opt out of sale or sharing. As section 03 says, there is nothing to opt out of, because we do not sell or share your data, and we will not discriminate against you for exercising any right.

We sign people in with one-time email links, so there is no password for us to store or for anyone to steal from us. Traffic runs over TLS. Access to the production database is limited to the operator of the service. Payment details never touch our infrastructure.

We are a small independent operation and we will not pretend to hold certifications we do not have. No service can promise perfect security. If we ever suffer a breach affecting your data, we will tell you and the relevant regulator as quickly as the law requires and as plainly as we can.

CornerMan is for adults aged 21 and over. We do not knowingly collect data from anyone younger. If you believe a minor has created an account, write to us and we will remove it.

When the product changes, this page changes with it, and the effective date at the top moves. If a change materially affects how we handle your data we will tell you by email or in the product before it takes effect, rather than quietly editing the page.

CornermanAnalytics, LLC
131 Continental Dr, Suite 305
Newark, DE 19713, USA
hello@getcornerman.com

See also our Terms of Service.