Privacy Policy
Last updated: April 7, 2026
1. Information We Collect
When you create an account, we collect your email address and a bcrypt hash of your password. We do not store your password in plain text under any circumstances. We do not collect payment information, phone numbers, or any other personal data beyond what is listed here.
2. How We Use Your Information
Your email is used solely to: authenticate you when you sign in, and identify your account within the Service. We do not send marketing emails, newsletters, or promotional messages.
3. Data Storage
Account data (email and password hash) is stored in a PostgreSQL database hosted on Supabase. Prediction data, picks, and model outputs are stored in Cloudflare R2 object storage. These are US-based cloud providers with industry-standard security practices.
4. Data Sharing and Sale
We do not sell, rent, or share your personal information with any third parties for marketing or commercial purposes. Data may be disclosed only if required by law or to protect the security of the Service.
5. Cookies and Local Storage
We use browser localStorage to store your authentication tokens (JWT access and refresh tokens) so you remain signed in between sessions. No tracking cookies or third-party analytics are used.
6. Data Retention
Your account data is retained for as long as your account exists. Pick history and prediction data is retained indefinitely for record-keeping and model validation purposes. You may request deletion of your account at any time.
7. Your Rights
You have the right to: access the personal data we hold about you; request correction of inaccurate data; request deletion of your account and associated personal data. To exercise these rights, contact the site operator via the GitHub repository issues page.
8. Security
Passwords are hashed using bcrypt before storage and are never transmitted or stored in plain text. Authentication uses short-lived JWT tokens. We take reasonable technical measures to protect your data, but no system is completely immune to risk.
9. Children
The Service is not directed at children under 18. We do not knowingly collect personal information from minors.
10. Changes to This Policy
We may update this Privacy Policy at any time. The "Last updated" date at the top of this page reflects the most recent revision.
11. Contact
Questions or requests regarding your data can be directed to the site operator via the GitHub repository issues page.