Privacy Policy

What we collect

• Account data: user id, display name, avatar URL, profile fields stored in our database (e.g. via Supabase).
• Authentication: email and/or OAuth profile basics from your sign-in provider (e.g. Google) as configured in Supabase Auth.
• Content: markets you create, predictions you submit, and comments you post.
• Usage & technical data: standard server and client logs, security telemetry, and first-party product analytics (anonymous session id cookie fo_sid, page path, referrer host, approximate device type, and country when provided by the host). We also use optional hosting analytics (e.g. Vercel Analytics) as configured in your deployment. We do not sell this data.
• Moderation: reports you file, automated behavior flags, optional AI-generated labels (not raw model payloads), and admin action logs tied to moderator accounts.

Cookies & local storage

We use cookies and browser storage as needed for sessions (e.g. Supabase auth cookies), preferences such as locale, security, and a first-party analytics session cookie (fo_sid) used only to count visitors and “online now” in the admin dashboard. Third-party scripts you add (analytics, error tracking) may set their own cookies.

Processors & infrastructure

Depending on deployment, data may be processed by providers such as Supabase (database and auth), Vercel or another host (HTTP delivery and logs), Google (OAuth), analytics vendors you configure, and an optional AI moderation API when MODERATION_AI_ENABLED is on — keys stay server-side; only derived labels are stored.

Retention & deletion

We retain data as long as your account exists and as required for moderation, security, and legal obligations. You may request deletion of personal data; some records (e.g. anonymized aggregates or legally required retention) may be kept. Contact: privacy@example.com (replace with your production address).