Privacy policy
Last updated: August 26, 2026
1. Overview
This policy explains what information Predicta ("we", "us") collects when you use our website, applications and APIs (the "Services"), how we use it, and the choices you have. Predicta currently runs as a blockchain-testnet environment — balances are test tokens with no monetary value — but we treat your personal data with production-level care.
2. Information you give us
Account data: an email address and display name (email sign-up), your Google account's basic profile (Google sign-in), and/or a blockchain wallet address that you cryptographically verify. Content you submit: comments, market proposals, uploaded images and newsletter subscriptions. Support messages you send us.
3. Information collected automatically
Activity and security data: IP address, approximate location derived from IP (city/country level), browser user-agent, sign-in events and session records — kept as an account activity trail and pruned automatically after the retention window (currently 90 days). Usage data: pages viewed and actions taken within the Services, used in aggregate to improve the product. We use localStorage and functional cookies to keep you signed in, remember language/theme preferences, and secure sessions; we do not run third-party advertising trackers.
4. Public blockchain data
When you link a wallet or make an on-chain deposit or withdrawal, the associated transactions — addresses, amounts and timestamps — exist on a public blockchain that we do not control and cannot erase. We store the link between your account and your wallet address, plus transaction references (hashes), to credit deposits and process withdrawals.
5. Public profile information
Your username, display name, avatar, market comments, proposals, trading statistics (volume, profit, win rate) and leaderboard placement are visible to other users of the Services. Trade history on a market's public tape shows your username. Your email address and wallet address are not shown publicly (a linked wallet indicator may appear on your own account page).
6. How we use information
To operate the Services: authenticate you, execute and settle trades, credit on-chain deposits, process withdrawals, resolve markets and show your portfolio. To communicate: transactional notifications in-app, and the optional Morning Line email briefing if you subscribe. To protect the Services: fraud, abuse and market-manipulation detection, security auditing and rate limiting. To improve the product: aggregate, de-identified usage analysis. We do not sell your personal data.
7. Service providers
We share data only with processors needed to run the Services: cloud hosting and storage (application servers and object storage for uploaded images), email delivery (for the briefing and account emails), Google (if you use Google sign-in), and public blockchain RPC providers and market-data feeds (which receive standard request metadata but not your account identity). These providers process data on our instructions.
8. Retention
Account data is kept while your account exists. The activity trail is pruned automatically after its retention window. Ledger, trade and settlement records are kept for the life of the test environment for integrity and audit purposes. Newsletter subscriptions are kept until you unsubscribe. Test-environment data may additionally be reset in bulk from time to time.
9. Deleting your account
You can delete your account from account settings. Deletion removes your profile, personal identifiers, comments authorship, wallet link and newsletter subscription from our systems. Anonymised ledger entries required for the integrity of past markets, and anything already recorded on a public blockchain, cannot be erased.
10. Your choices and rights
You can: use a wallet instead of an email identity; unsubscribe from the briefing with one click in any email; unlink your wallet at any time; and request a copy or correction of your data by contacting us. Depending on your jurisdiction you may have statutory rights of access, rectification, erasure, restriction and portability — we honour reasonable requests regardless of jurisdiction.
11. Security
Passwords are stored as salted bcrypt hashes; sessions use short-lived signed tokens with rotating refresh tokens; wallet sign-in uses nonce-based signature verification so we never see your keys; uploaded images are re-encoded server-side, stripping metadata such as location. Access to production systems is restricted and audited. No system is perfectly secure — use a unique password and protect your wallet keys.
12. Children
The Services are not directed at children and may not be used by anyone under 18. We do not knowingly collect data from children; if you believe a child has created an account, contact us and we will delete it.
13. Changes to this policy
We may update this policy from time to time. The 'Last updated' date reflects the current version, and material changes will be highlighted in the product. Continued use of the Services after a change means you accept the updated policy.
14. Contact
Privacy questions and requests: support@predicta.app.