Privacy Policy

1. Scope and Acceptance

This Privacy Policy (the "Policy") governs the collection, use, storage, disclosure and disposal of information by the operator of Predict '26 ("Predict '26," "we," "us" or "our") in connection with the website located at predict26.11011.dev and any related pages, features, interfaces and application programming interfaces (collectively, the "Service"). By accessing or using the Service, you ("you" or "User") acknowledge that you have read and understood this Policy. If you do not agree with this Policy, you must not access or use the Service.

2. Information We Collect

We collect only the following categories of information:

1. Account Information. When you elect to sign in through a third-party identity provider, presently Discord or X (formerly Twitter) (each, an "Identity Provider"), we receive and retain your display name, profile image, email address (where the Identity Provider furnishes one), the unique identifier assigned to you by such Identity Provider, and the access and refresh credentials issued to us for the purpose of authenticating you. Where an Identity Provider does not furnish an email address, a non-deliverable placeholder address is generated and stored in its stead.
2. User Content. Forecasts, confidence levels and notes you enter in respect of any race ("Predictions"); comments you post and votes you cast on comments; and the Users you elect to follow.
3. Session and Technical Information. For each signed-in session, the Internet Protocol address and browser user-agent string from which the session was established, together with session identifiers and expiration times. Our hosting provider may additionally process request metadata, including Internet Protocol addresses, in the ordinary course of serving and securing the Service.
4. Locally Stored Information. Predictions made before signing in, and certain interface preferences, are stored solely within your browser's local storage and are not transmitted to us unless and until you sign in, at which time such Predictions are associated with your account.

We do not knowingly collect sensitive personal information, payment information, precise geolocation or government identifiers, and we do not employ third-party advertising, analytics or cross-site tracking technologies.

3. Cookies

The Service uses only such cookies as are strictly necessary to authenticate you, maintain your signed-in session and protect against cross-site request forgery and abuse. Such cookies are not used for advertising or tracking purposes. Disabling them will prevent you from signing in.

4. Use of Information

We use the information described above solely to:

1. authenticate you and maintain your account;
2. store, display and score your Predictions, and compute leaderboards and aggregate crowd forecasts;
3. display your User Content and enable social features, including following other Users;
4. operate, maintain, secure and improve the Service, including by enforcing rate limits and preventing abuse; and
5. comply with applicable law and respond to lawful requests.

We do not sell, rent or otherwise exchange your personal information for consideration.

5. Information Made Public

You acknowledge and agree that, upon signing in, your display name, profile image, Predictions, score, ranking and comments may be displayed publicly on the Service, including on your profile page, on leaderboards and alongside races, and may be viewed by any person. Your Predictions also contribute, in aggregated and de-identified form, to crowd forecasts. Your email address and Identity Provider credentials are never displayed publicly. You may elect, by means of the privacy settings on your profile page, to conceal your display name, your profile image, or both, in which event a pseudonym and illustration assigned to your account shall be displayed in lieu thereof. Profile images are served through the Service's own servers, such that neither the address of the image nor the identifier assigned to you by an Identity Provider is disclosed to other Users.

6. Disclosure to Third Parties

We disclose information only as follows:

1. Service Providers. Cloudflare, Inc., which hosts the Service and its database and processes information on our behalf.
2. Identity Providers. Discord Inc. and X Corp., to the extent necessary to authenticate you at your direction. Your use of an Identity Provider is governed by that provider's own terms and privacy policy.
3. Legal Requirements. Where we believe in good faith that disclosure is required by law, regulation, subpoena, court order or other legal process, or is necessary to protect the rights, property or safety of Predict '26, its Users or others.
4. Successors. In connection with any transfer of the Service, provided that the recipient agrees to be bound by terms no less protective than those of this Policy.

7. Retention

We retain account information and User Content for so long as your account remains active, or until you request its deletion. Session records expire automatically no later than thirty (30) days after their creation. Following a verified deletion request, we will delete or irreversibly de-identify your personal information within thirty (30) days, save to the extent retention is required by law. Residual copies may persist in routine backups for a limited period before being overwritten in the ordinary course.

8. Your Rights and How to Exercise Them

Subject to applicable law, you may request (i) access to, or a portable copy of, the personal information we hold about you; (ii) correction of inaccurate information; (iii) deletion of your account and all associated personal information and User Content; and (iv) restriction of, or objection to, certain processing. Residents of certain jurisdictions, including the European Economic Area, the United Kingdom and the State of California, may hold additional rights under the General Data Protection Regulation, the UK GDPR or the California Consumer Privacy Act, as applicable, and may lodge a complaint with their competent supervisory authority.

To exercise any of the foregoing rights, send an email to data@11011.dev identifying the account concerned (for example, by your display name and the Identity Provider you used to sign in). We may take reasonable steps to verify your identity before acting upon a request, and will respond within thirty (30) days of receipt. We will not discriminate against you for exercising any such right. You may also clear locally stored Predictions at any time by clearing your browser's site data.

Where we rely upon a legal basis for processing under the GDPR, such basis is the performance of our agreement with you to provide the Service and our legitimate interests in operating and securing the Service.

9. Security

We implement commercially reasonable administrative, technical and physical safeguards designed to protect your information, including encryption in transit. No method of transmission or storage is entirely secure, however, and we cannot and do not guarantee the absolute security of any information.

10. International Transfers

The Service is operated from, and your information may be processed in, the United States and other countries in which our service providers maintain facilities, which may have data protection laws different from those of your jurisdiction. By using the Service, you acknowledge such transfer and processing.

11. Children

The Service is not directed to children under the age of thirteen (13), or such greater age as may be required by applicable law, and we do not knowingly collect personal information from such children. Should we learn that we have collected such information, we will delete it promptly. If you believe a child has provided us with personal information, please contact us at data@11011.dev.

12. Changes to This Policy

We may amend this Policy from time to time. Any amendment shall take effect upon publication of the revised Policy on this page, as indicated by the effective date above. Your continued use of the Service following such publication constitutes your acceptance of the revised Policy.

13. Contact

All inquiries, requests and notices concerning this Policy or your personal information shall be directed to data@11011.dev.