1. Who we are
The data controller is [YOUR LEGAL NAME], [YOUR ADDRESS]. Contact: [YOUR CONTACT EMAIL].
2. What we collect
- Account data: email address, display name, optional handle and avatar.
- Activity data: wallets, positions, ledger entries, leaderboard opt-in status.
- Technical data: IP address, browser user-agent, and basic request logs, kept for security and abuse prevention.
We do not knowingly collect data from children under 16.
3. Why we use it
- To provide the Service (contract, GDPR Art. 6(1)(b)).
- To secure the Service and prevent abuse (legitimate interest, Art. 6(1)(f)).
- To comply with legal obligations (Art. 6(1)(c)).
4. Sharing
We use the following processors to run the Service:
- Lovable Cloud (hosting, database, authentication, storage).
- Last.fm API (public music metadata; no personal data sent).
We do not sell personal data.
5. Retention
Account data is kept until you delete your account. Ledger and position data may be retained in anonymized form for statistical integrity of resolved markets. Request deletion at [YOUR CONTACT EMAIL].
6. Your rights
Under GDPR and similar laws you have the right to access, rectify, erase, restrict, port, and object to processing of your personal data, and to lodge a complaint with a supervisory authority.
7. Cookies
We use only essential cookies and local storage required for authentication. No advertising or third-party tracking cookies are set.
8. Security
We use row-level security, encrypted transport (TLS), and generous per-user rate limits to protect the Service. No system is perfectly secure; report vulnerabilities to [YOUR CONTACT EMAIL].
9. Changes
Material changes will be announced on the Service.