Privacy
Draft. To be reviewed before launch.
What we store
- Your email address, to send login links.
- When you confirmed you are 18 or over and accepted the Terms.
- A display name, if you choose one.
- Slips you save, and the results the bot posts for them.
- Your subscription status, from Stripe. We never see or store card details.
- For each request you type into the builder: when, which model read it, whether it worked and what it cost. Not the words you typed.
Who else handles your data
Draft. To be reviewed before launch.
Anthropic (an AI service provider) reads the message you type into the builder so that we can find the match and the kinds of leg you mean. We send it only the message text, not your email or any account detail. It does not write your slip or any figure on it. A short coded form of your message is kept by us for up to 30 days so that repeats are not sent again; the words themselves are not.
The leaderboard
Draft. To be reviewed before launch.
If you are a subscriber and have chosen a display name, that name appears publicly on the leaderboard, with how many legs on your saved slips landed and how many slips that covers. Nothing else about you or your slips is shown there. Every saved slip counts towards it, including slips you have hidden from your own list. Anyone logged in can report a display name; the report (the name, a reason and an optional note of up to 280 characters) is read by administrators only, who do not see who made it, and the member is not told. If you delete your account, reports about your name are deleted, and reports you made are kept without your identity or your note. Remove your display name, or delete your account, to stop appearing; slips you saved stay, anonymised, but no longer carry your name.
Cookies
We use one cookie, only on the login page or once you're logged in. It keeps you logged in and protects forms. We don't use analytics or advertising cookies.
Limiting abuse
To limit how many login links can be requested, we keep a one-way code derived from your email and IP address for up to a day. It cannot be turned back into either.
Your rights
You can download everything we hold about you from your account page, and delete your account there too.
If we change your display name
If a display name is reported or breaks our rules, an administrator can reset it to "Member" and a number. We keep a log of that (who did it, when, and the old name). The old name is erased from the log if you delete your account.
After a reset you cannot change your name for 30 days, and you cannot choose the removed name (or one that looks like it) again. To enforce that we store the date the lock ends and a coded form of the removed name. Both are deleted if you delete your account.
If you ask to delete your account while you have a subscription, we cancel it with Stripe first. If that fails, your account is not deleted; we keep a record that you asked, and when, so we can finish the job.
What deleting your account does
Your email address, display name and subscription record are removed from our database, any active subscription is cancelled, and you are signed out everywhere. Slips you saved are anonymised, not removed: they stay, with their results, but are no longer linked to you, so everyone else's history stays consistent. A slip holds only the legs and times you chose.
Stripe keeps its own customer and payment records, as the law requires of it. The one-way abuse-limiting codes described above expire within a day.