doddo.Find my money

doddo Privacy Policy

Effective date: October 12, 2026
Operator responsible for your information: TheLoop Holdings, LLC, a Delaware limited liability company
Business address: 131 Continental Dr, Suite 305, Newark, DE 19713, United States
Privacy and deletion requests: founders@holdtheloop.com

1. Scope

This Policy explains how TheLoop Holdings, LLC, which operates doddo (“doddo,” “we,” “us” or “our”), handles personal information when you use our website, app and related consumer services. doddo helps you discover potential claims, refunds and promotional opportunities. It does not operate sportsbooks or administer claims.

This Policy does not cover websites you visit through our links. Their operators handle information under their own policies. Separate arrangements may apply to business partners and creators.

2. Information we collect

Information you provide

  • Account information: email address, display name and password when you create an account. We store a salted password hash, not your plaintext account password.
  • Profile and matching information: age in years, selected state and answers about products or services you have used, approximate purchase quantities and other eligibility questions you choose to answer. Some questions can be skipped or answered “not sure.”
  • Planning information: amounts, selections and progress you enter into an opportunity calculator or plan. Certain plan information may be stored in your browser, as described below. If you track a bank or card bonus, we also store the dates you enter (such as when you opened the account or met a requirement), your chosen hold period and your reminder preference. We do not ask for account numbers, card numbers or balances.
  • Communications: messages and information you choose to send to our support or privacy contact.
  • Waitlist information: your email address and, if you answered it, your selected state when you join the waitlist while new accounts are paused.

We do not request your date of birth, Social Security number, bank account or payment-card details, sportsbook credentials, or precise GPS location to use this version of doddo. Please do not include these in messages to us. Age is entered as a number of years; a selected state is not a verification of your physical location.

An official claim administrator or provider may separately request identity, payment or tax information on its own website. Information you enter there is provided to that third party, not through a doddo claim-submission service.

Technical information

When you use doddo, our hosting infrastructure receives information needed to deliver and protect the service, such as your IP address, request time, requested path, browser or device information provided by the request, response status and error or security events. We use IP-based controls to limit abusive requests. These technical records may be processed even if you do not create an account.

We also process session identifiers, browser storage described below, and the state or other parameters needed for requests you make to our services. We do not use precise-location permissions in this version.

Analytics

On usedoddo.com we use two tools to understand how visitors use the site: anonymous statistics that we run ourselves, and Google Analytics 4.

Anonymous statistics. Unless you switch them off, we count visits with Umami, open-source analytics software that TheLoop Holdings runs on its own server. It sets no cookies and stores no ID in your browser. It records the page address (without query strings, except campaign tags such as utm_source), the page title, the referring website, your browser, operating system, device type, screen size and language, an approximate location (country, region and city) looked up from your IP address, and the actions listed below. To count unique visitors it combines your IP address and browser details with a secret value that changes every day; we don't store your IP address, and visits on different days can't be linked. We don't share these statistics, and we delete them after 13 months. They don't load if your browser sends a Global Privacy Control or Do Not Track signal, and you can switch them off at any time with the anonymous statistics switch at the end of this page.

Google Analytics. Google Analytics 4 is a service provided by Google LLC. When it runs, Google Analytics collects the pages you view and the page that referred you, device and browser information (such as device type, operating system, browser, language and screen size), and your approximate location (country, region and city), which Google derives from your IP address. Google Analytics 4 does not log or store IP addresses. It uses the first-party cookies described in Section 4 to recognize repeat visits from the same browser with a random identifier.

Both tools also record these actions:

  • clicks on a “Find my money” link, with the part of the page that was clicked (for example, the header or a guide);
  • clicks on links inside our guides, with the doddo page the link leads to;
  • clicks on links to an official source or official terms, with the destination website’s domain;
  • clicks on partner offer links, with our identifier for the offer and the destination domain;
  • clicks on other external links, with the destination domain only;
  • your first use of a public calculator or free tool during a page visit, with the tool’s name, and whether you downloaded its result image (the image is made in your browser and is not sent to us);
  • joining the waitlist, with the selected state only (anonymous statistics record the join without the state);
  • starting a bonus plan or a claim, with our identifier for the offer or claim.

We do not send your email address, name, password, profile answers, text you type, dollar amounts you enter or other account information to either tool. Google signals and ad personalization are turned off for our Google Analytics property, and we do not use analytics data for advertising. Both tools run only on usedoddo.com, not on our staging, preview or local versions, and neither loads when your browser sends a Global Privacy Control signal. Section 7 describes other ways to opt out.

Information from other sources

We obtain opportunity information from public sources and data providers. Partner links currently take you to the provider’s own website without referral codes, so partners do not report your activity to us. If we join a referral program, a partner may tell us that a referral happened and whether a qualifying action was completed, so that we can be paid. We will update this Policy before that starts. We never need your sportsbook login or betting history to identify a referral.

3. Why we use information

We use information to:

  • create and secure accounts, maintain sessions and provide saved profiles;
  • match opportunities to your age, state and answers and provide requested calculations;
  • deliver the website and its content, diagnose problems and prevent abuse;
  • measure how visitors use the site and which pages, tools and links are useful, using the analytics described above;
  • respond to questions, support requests and privacy requests;
  • meet legal obligations, resolve disputes and protect lawful rights;
  • send reminder emails you have turned on about bonus requirements, expected payments and closure dates you are tracking;
  • tell you when new accounts open, if you joined the waitlist;
  • measure qualifying referrals and account for partner compensation, if we join a referral program as described above.

We do not make the final eligibility or payment decision for a claim, refund or sportsbook offer. Our matching is informational; the relevant administrator, agency or provider decides under its own rules.

We use Resend to deliver reminder emails you have turned on. Resend receives your email address and the message content (institution, reminder type and dates). Reminder emails are service messages, not marketing; every one includes an unsubscribe link, and reminders can be turned off in your profile. We use our anonymous statistics and Google Analytics only for the site measurement described in Section 2; we do not use advertising pixels. We will update the Policy and provide any required notice or choice before enabling new uses of personal information. Marketing messages, if introduced, will provide an unsubscribe option and use consent where required.

4. Cookies and browser storage

We use an essential first-party session cookie to keep you signed in. It is marked HttpOnly and Secure on HTTPS and uses SameSite controls. The current account session lasts up to 30 days unless ended earlier, such as when you sign out. Browser cookie controls let you delete or block it; blocking it prevents features that require a signed-in session.

We use browser local storage for unfinished onboarding answers and certain opportunity-plan selections or progress. These entries are separate from your server account and may remain on that device until cleared, replaced or removed by the relevant flow. Clearing browser data removes local copies; it does not by itself delete information saved to your account. Signing out may not clear every locally stored opportunity plan, particularly on a shared device.

On usedoddo.com, Google Analytics sets two first-party analytics cookies: _ga, which holds a random identifier that distinguishes browsers, and _ga_<container-id>, which keeps session state for our Google Analytics property. They expire two years after your most recent visit unless you delete them sooner. They are not set when your browser sends a Global Privacy Control signal, and blocking or deleting them does not affect any doddo feature. Our anonymous statistics set no cookies; if you switch them off, local storage keeps a umami.disabled entry on that device to remember your choice. We do not use advertising cookies or advertising pixels. Third-party websites may use their own cookies after you follow a link. If other non-essential tracking is introduced on doddo, we will describe it and provide legally required consent or opt-out controls before it operates.

5. Who receives information

We limit disclosure to the purposes described in this Policy:

  • Hosting and infrastructure: The application and its storage run on a virtual server rented from OVHcloud US in the United States and managed by doddo. Application records are held in a database on that server. OVHcloud may process technical information needed to provide and secure hosting. Its Privacy Policy describes its own practices.
  • Other service providers: the providers named in this section are the only service providers that receive personal information from doddo. We will update this list before adding another.
  • Analytics: our anonymous statistics run on TheLoop Holdings' own server at OVHcloud US; no other company receives them. Google LLC provides Google Analytics and receives the usage information described in Section 2 when analytics runs. Google describes its practices in its Privacy Policy and in How Google uses information from sites or apps that use our services.
  • Email delivery: Resend, Inc. sends reminder emails on our behalf and processes your email address and message content under its Privacy Policy.
  • Receipt scanning: only when you use receipt scanning in Split, the receipt photo is sent to OpenRouter, Inc., which passes it to an AI model provider to read the items and amounts. OpenRouter describes its practices in its Privacy Policy.
  • External sites you choose to visit: following a link sends a request to that site, which ordinarily receives your IP address, browser information and any referral parameters in the link. Its own policy applies. We do not send your entire doddo profile or claim answers merely because you click an external link.
  • Affiliate attribution: we do not currently exchange referral information with partners. If we join a referral program, partners will receive only the limited referral and conversion information needed to attribute qualifying actions, and we will describe it here first.
  • Legal and security recipients: we may disclose information when required by law or when reasonably necessary to investigate abuse, establish or defend legal claims, or protect people and the service, subject to applicable law.
  • Business transfers: information may be transferred as part of a merger, acquisition or sale of the relevant business, subject to applicable protections and any required notice.

6. Retention and deletion

We retain personal information for the purposes described above, taking into account the type of information, whether it is needed to provide an active service, security needs and applicable legal requirements. We do not intend to keep personal information indefinitely without a continuing purpose.

Account and saved profile

While your account is open. We do not delete inactive accounts automatically. You can delete your account yourself from your profile, which immediately deletes it, your saved profile and your bonus trackers from our active systems. If you ask us to delete your account instead, we do so within 30 days of verifying the request. Either way, we may keep information as described below.

Shared expense groups

A Split group you create is shared with everyone who has its link. Deleting your account removes the group from your account but does not delete the group or the participant names, expenses and receipts in it.

Account sessions

Valid for up to 30 days; ended earlier on logout or revocation. Expired records are cleaned during session maintenance.

Waitlist

Until we tell you that new accounts are open and for up to 6 months after that, or sooner if you ask us to remove your email.

Bonus trackers and reminders

While your account is active or until you delete the tracker. Records of reminders we have sent are deleted together with the tracker.

Browser drafts and plans

Until removed by the relevant flow or cleared from the device; not necessarily deleted when a server account is deleted.

Request, error and security logs

Up to 90 days, unless we need them longer to investigate a specific incident or to comply with law.

Analytics data

We delete anonymous statistics 13 months after they are recorded. Our Google Analytics property is set to keep event-level data for 14 months, after which Google deletes it. Aggregated reports that do not identify individual visitors are not affected by this setting. Analytics cookies on your device expire as described in Section 4.

Support and privacy correspondence

Up to 2 years after we resolve your request, unless a legal obligation or dispute requires longer retention.

Referral records

We do not receive referral records today. If we join a referral program, we will keep them only as long as needed for attribution, payment reconciliation and tax and accounting obligations.

Backups

We keep daily database backups for 7 days, so deleted information can remain in a backup for up to 7 days. We use backups only for recovery and security, and if we restore one, we reapply any deletions you asked for.

We may retain limited records after deletion where required by law or necessary for a specific security, fraud-prevention or legal-claims purpose. Those records remain subject to appropriate restrictions. We may retain information that has been de-identified so that it cannot reasonably be linked to you, where legally permitted.

7. Your choices and requests

You can update supported profile fields in the service, turn reminder emails off in your profile or through the unsubscribe link in any reminder email, delete a bonus tracker, delete your account from your profile, choose not to answer optional questions, clear browser storage, and stop using the service. Leaving out information may reduce the relevance of results.

You can opt out of analytics at any time. We honor Global Privacy Control: if your browser sends the signal, neither our anonymous statistics nor Google Analytics load on doddo. Anonymous statistics also stay off when your browser sends Do Not Track, and you can switch them off for your browser with the anonymous statistics switch at the end of this page. For Google Analytics, you can also install Google’s browser add-on to opt out of Google Analytics, or block or delete cookies for usedoddo.com in your browser settings. Opting out does not affect any doddo feature.

Contact founders@holdtheloop.com to request access, correction or deletion of your personal information. Depending on where you live and which laws apply, you may also have rights to obtain a portable copy, object to or restrict processing, withdraw consent, opt out of certain uses, appeal a decision, use an authorized agent, or complain to a competent authority. We will handle requests within applicable legal timeframes and will not unlawfully discriminate against you for exercising a privacy right.

We may need to verify your identity using information reasonably necessary for the request, preferably through your existing account or email. Do not send an SSN, bank details or sportsbook credentials to verify a request. Withdrawing consent does not affect processing that was lawful before withdrawal. Deleting information from doddo does not delete information you independently submitted to a provider or administrator; contact them directly for that request.

doddo is offered to people in the United States. If a privacy law that applies to you gives you additional rights, we will honor them. If we decline a request, we will tell you why, and you can reply to ask us to reconsider.

8. Security and processing location

We use safeguards designed to protect information, including HTTPS, salted password hashing, access controls and protected session cookies. No method of storage or transmission is completely secure. Protect your credentials and contact us if you suspect an account security issue.

doddo is intended for people in the United States, and we store application data in the United States. Some of the service providers named in Section 5, such as Google, Resend and OpenRouter, may process information in other countries under their own safeguards.

9. Age restrictions

doddo is intended for adults aged 18 or older. Sportsbook-related features are restricted to adults aged 21 or older and locations where their use is lawful. We do not knowingly collect personal information from children under 18. If you believe a child has provided information, contact founders@holdtheloop.com so we can investigate and take appropriate action.

10. Changes and contact

We may update this Policy as our service and practices change. We will update the effective date and provide notice of material changes and obtain consent where required. A policy update does not by itself authorize a materially different use of previously collected information where notice or consent is required.

For privacy questions or requests, contact TheLoop Holdings, LLC, 131 Continental Dr, Suite 305, Newark, DE 19713, United States, founders@holdtheloop.com.