Privacy Policy

This explains what personal data Vatic collects, why, and what rights you have. The data controller is [YOUR FULL LEGAL NAME OR BUSINESS NAME] (tax ID [YOUR NIF / NIE]), [YOUR POSTAL ADDRESS]. Contact for privacy requests: [YOUR CONTACT EMAIL].

1. What we collect

• Account: email address, password (stored encrypted by our login provider, never readable by us), and a record that you confirmed you are 18+ and accepted the terms.
• Profile: username, display name, bio, profile photo, theme, and links you choose to add (social media, shop).
• Activity: markets you create, predictions and Vpoints, ranked rounds, stars and ranks, comments, follows, reports you send, and cover pictures you upload.
• Plans survey (optional): if you answer the creator plans survey on /plans we store your answers. If you tick the box, we also keep that you agreed to receive one email when paid plans launch, and we use the email of your account for it. You can untick it any time, and deleting your account deletes your answers.
• Where you came from (aggregate): when you visit through a link with a campaign tag (for example from one of our social posts) or from another website, and you accept it in the cookie banner, we keep a short label of that tag or of the website's domain in a cookie for up to 30 days. When you create your account we save that label once, so we can see which posts bring players, and then delete the cookie. It contains no personal data and we do not track what you do on other sites.
• Technical: your IP address is read when you visit, to apply country restrictions and keep the service secure. We do not use it to build a profile of you.

2. Why we use it, and the legal basis

• To create and run your account and the game (contract).
• To keep the site safe, prevent cheating and multiple accounts, enforce the terms and handle reports (legitimate interest).
• To apply country restrictions and meet our legal obligations (legal obligation / legitimate interest).
• To contact you about your account or a prize you won (contract / legitimate interest).
• To email you about your results (a market you played resolved, or your streak is about to end), only if you switched this on in Settings (consent, which you can withdraw at any time, and every email has an unsubscribe link).
• To send you one email about the launch of paid creator plans, only if you ticked the box on the plans survey (consent, which you can withdraw at any time).

3. What is public

Your username, display name, photo, bio, links, rank, level, stats, followers, comments and markets are shown to other visitors. On open markets, your predictions (who put how many Vpoints on which option) are shown in the activity lists. Your email address is never shown.

Two things are shared only when you choose to: a "Called it!" win card has a secret link that shows the market, your call and your username to anyone who has the link, and a friend challenge shows your call to your opponent once they accept. If you report a market result, your reason is seen by the Vatic team only; the team's decision and note are public on the market.

4. Who we share it with

We use service providers that process data for us:

• Supabase: database, login and file storage.
• Vercel: website hosting.
• Price data providers (for example Coinbase and Kraken) receive no personal data from us.

Some providers may process data outside the European Economic Area. Where that happens it is protected by approved safeguards such as standard contractual clauses. We do not sell your personal data. Through our data API (see /developers) we share and may charge for crowd-level market data: probabilities, history, outcomes, crowd accuracy and creators' public records. It never includes anything that identifies a player.

5. Cookies and local storage

Essential (always on): the login session cookie; your light or dark theme; a short note of a league invite or invite link you followed, so it applies when you sign up (up to 7 and 30 days); and small flags in your browser so a view is counted once and guides you closed stay closed. The site can't work without them.

Optional, only with your consent: “Where you came from”, the short source label described above (cookie vatic-src, up to 30 days). You choose in the cookie banner, and you can change your mind any time with Cookie settings at the bottom of every page; refusing removes the cookie. Your choice is kept in your browser for about 6 months. We do not use advertising or cross-site tracking cookies. If this changes we will ask for your consent first.

Visit statistics and error reports: we count page visits and measure page speed with Vercel Web Analytics and Speed Insights. They use no cookies and don't identify you. When something breaks, an error report (what failed, the page address without its query, your browser type) may be sent to our error-tracking provider, Sentry, set up not to store personal data or IP addresses.

Phone notifications: only if you turn them on (Alerts > Phone notifications). We then store your device's push address, which your browser creates, and your choices (results, streak). Turning them off on a device deletes that device's push address. Deleting your account deletes all of them.

6. How long we keep it

We keep your account data while your account is open. When you ask us to delete it, we remove your profile, comments and personal data. Some records may stay in anonymous form (for example Vpoints totals in past markets) or be kept longer when the law requires it or to deal with a dispute.

7. Your rights

You can ask us to access, correct, delete or export your data, to restrict or object to some uses, and to withdraw consent you gave. Write to [YOUR CONTACT EMAIL]. You can also complain to your data protection authority (in Spain, the Agencia Española de Protección de Datos, aepd.es).

8. Children

Vatic is for adults only (18+). If we learn that someone under 18 has an account, we will close it and delete their data.

9. Changes

We may update this policy and will change the date above. If a change is important we will tell you on the site.