Privacy policy

Principle

We collect only the data strictly required to run the service: account sign-in, credit management, invoice delivery and aggregated audience measurement. No data is ever resold.

Data collected

• Account: email address, display name, language, sign-up date, credit balance, prediction and transaction history.
• Sign-in: one-time codes stored as cryptographic hashes, with expiry date and attempt counter. Codes are never stored in clear text.
• Payment: payments are processed by Stripe. We never see your full card details; we keep the order reference, amount and date needed for invoicing.
• Technical: IP address as a salted hash (HMAC-SHA256, truncated), inferred country, language and timestamps. Salting makes brute-force re-identification impossible.

Retention periods

• Login codes: 10 minutes, then deleted;
• Accounts and credit history: for the duration of the contractual relationship;
• Invoices and accounting records: ten years, as required by law;
• Technical logs: thirteen months maximum.

Your rights

You may request access, rectification, erasure, restriction or portability of your data, and object to its processing. A written request to [email protected] is handled within thirty days. Deleting your account erases all data not subject to a legal retention obligation.

Cookies

Strictly necessary cookies (session, anti-CSRF token, language) are set without prior consent, as the service cannot work without them. Audience measurement cookies are only set after your consent, which you can withdraw at any time from the banner or the Cookie policy page.