Privacy Policy

What we collect

• Account data: user id, display name, avatar URL, profile fields stored in our database (e.g. via Supabase).
• Authentication: email and/or OAuth profile basics from your sign-in provider (e.g. Google) as configured in Supabase Auth.
• Content: markets you create, predictions you submit, and comments you post.
• Usage & technical data: standard server and client logs, security telemetry, and optional product analytics (e.g. page views) as enabled in your deployment.
• Moderation: reports you file, automated behavior flags, optional AI-generated labels (not raw model payloads), and admin action logs tied to moderator accounts.

Cookies & local storage

We use cookies and browser storage as needed for sessions (e.g. Supabase auth cookies), preferences such as locale, and security. Third-party scripts you add (analytics, error tracking) may set their own cookies.

Processors & infrastructure

Depending on deployment, data may be processed by providers such as Supabase (database and auth), Vercel or another host (HTTP delivery and logs), Google (OAuth), analytics vendors you configure, and an optional AI moderation API when MODERATION_AI_ENABLED is on — keys stay server-side; only derived labels are stored.

Retention & deletion

We retain data as long as your account exists and as required for moderation, security, and legal obligations. You may request deletion of personal data; some records (e.g. anonymized aggregates or legally required retention) may be kept. Contact: privacy@example.com (replace with your production address).