Privacy

What we collect

Sign-in email. If you sign in, we store your email so we can send a one-time link and keep your Record on your account. There is no password.

Age confirmation. Before a first pick or an account is created, we store a timestamp that you confirmed you are 18 or older, on that session or account.

Picks. When you take Yes or No, we store the market, your side, the time, and the play-money ticket (amount, shares, average price) against a session or account.

Watch list. Markets you pin are stored the same way.

Intuition Report signups. If you ask to get the next report, we store that email, when you signed up, and that you signed up from the Intuition Report page.

A session cookie. A random id named pp_session keeps guest picks and pins on this browser. It can last up to one year. After you sign in, that cookie becomes your account id.

IP addresses for rate limits. Sign-in, picks, and report signups read your IP from the request and keep a short-lived hashed count in the database so a burst of requests cannot knock the game over. We do not write raw IPs into the database.

Hosting logs and analytics, when they are on. We run on Vercel, which may keep request logs. Vercel Web Analytics records anonymous, cookieless page views. The app also loads Speed Insights and a few named events — a pick placed, a watch added, search used, share clicked, sign-in started — without your email, session id, or search terms. If something crashes, we write a short error line (path, method, error name) with emails and secrets stripped. If a Sentry key is configured, crash reports can go there too. We configure Sentry not to send emails, cookies, or query strings.

How we use it

We use this to run the game: sign you in, save your Record and Watch list, take Intuition Report signups, stop abuse, and keep the site up. There are no purchases, so we do not use it to sell you anything.

We never sell it

We do not sell your information. We do not rent it. We do not share it for advertising.

Who processes it

Vercel hosts the app, request logs, Analytics, and Speed Insights.

Turso (LibSQL) stores accounts, picks, pins, and Intuition Report signups. On a laptop, a local SQLite file does that job instead.

Resend sends the sign-in email when a mail key is configured. If that key is not set, we do not send mail.

Sentry receives crash reports only if we have turned that on.

How long we keep it

There is no automatic delete job for accounts, picks, pins, or report signups. We keep them until you ask us to delete them, or until we close the service. Magic-link tokens expire in 15 minutes and are then removed. Rate-limit counts are hashed keys that expire with their window (about 15 minutes) and are then removed. The session cookie can last up to one year. An age-confirmation timestamp stays with the session or account until you delete it. Vercel logs follow Vercel's own retention. Operational backups of Turso can hold a copy of users, picks, and report signups until those backups are replaced.

Download your data or delete your account

If you are signed in, the account page lets you download a JSON copy of your account, picks, and Intuition Report signup, and delete your account. Deleting removes your email, picks, pins, age confirmation, magic-link tokens, and matching Intuition Report signup from the live database and signs you out.

Ask us to delete it

You can delete your account from the account page, or email hello@prettypredictions.com to ask what we have, or to delete your account, picks, pins, and Intuition Report signup. Tell us the email you used. We will take it down from the live database. Backups and platform logs may take longer to age out.