Privacy Policy

This policy explains what personal data Guessers ("we", "us") collects when you use the Guessers website and app, why we collect it, where it is stored, and the choices you have. We keep it short because the honest answer is: we collect what the game needs to run, and not much else.

• Account data — your email address, username, and any avatar image you upload. Stored with our database and authentication provider, Supabase.
• Gameplay data — the events you create or join, your predictions and stakes, token and ticket balances and their transaction history, notifications, and friend connections. This is the game itself.
• Waitlist data — if you join the waitlist: your email address, the use case you pick, any optional note you write, and basic signup attribution (for example, which page variant or referral link brought you here).
• Purchase records — if you buy tickets: what was purchased, when, and a Stripe customer reference. Your card details go directly to Stripe on Stripe-hosted pages; we never receive or store card numbers.
• Support email — if you email us, we keep the correspondence so we can respond.

We do not collect precise location, contacts, or advertising identifiers, and we do not buy data about you from anyone.

• To operate the game: accounts, events, predictions, balances, settlement, and notifications.
• To sign you in and keep your session secure.
• To process ticket purchases and keep an accurate purchase ledger.
• To run the invite system and waitlist, including approving signups.
• To prevent abuse: rate limiting, security checks, and audit logs.
• To respond when you contact us.

We do not sell your personal data, and we do not use it for third-party advertising.

Authentication is handled by Supabase Auth. Depending on your account and current configuration, you can sign in with an email one-time code or magic link, an email and password, passkeys, or Google sign-in where it is enabled. If you use Google sign-in, Google shares your name, email address, and profile picture with us to create your session; we do not receive your Google password.

Guessers uses essential, first-party cookies only:

• Auth session cookies — set by our Supabase integration to keep you signed in. Without them, the app cannot work.
• A landing-page variant cookie — remembers which version of our landing page you first saw so it stays consistent between visits.

We do not use third-party advertising or analytics trackers today. If that ever changes, we will update this policy first.

We send transactional email only: sign-in codes and links, password resets, event invitations, waitlist approval notices, and ticket purchase receipts. Authentication emails are sent through Supabase; other transactional email is sent through Resend from guessers.app addresses. We honor bounce and suppression lists. We do not send marketing newsletters today.

We use a small set of service providers to run Guessers, each receiving only what their job requires:

• Supabase — database, authentication, and file storage (your account, gameplay data, and avatar).
• Vercel — application hosting and content delivery (processes requests, including IP addresses, to serve the app).
• Stripe — payment processing for ticket purchases (card data is handled entirely by Stripe).
• Resend — transactional email delivery.

Beyond these providers, your data is shared only within the product itself — your username, avatar, predictions, and results are visible to other members of events you join — or if the law requires us to disclose it.

We keep your data while your account is active. Purchase and balance ledgers are retained as long as needed for accounting, dispute handling, and legal obligations. When your account is deleted, we remove or de-identify personal data that we are not legally required to keep.

You can ask us at any time to access, export, correct, or delete your personal data. There is no self-serve deletion button in the app yet, so today this works through one channel: email hello@guessers.app from the address on your account, tell us what you need, and we will handle it. Depending on where you live, these rights may be backed by laws such as the GDPR or CCPA; we honor such requests regardless of where you live.

Guessers is for adults. You must be 18 or older to use the Service, and we do not knowingly collect data from anyone under 18. If you believe someone under 18 has an account, email us and we will remove it.

If we change what we collect or how we use it, we will update this page and the "Last updated" date, and for material changes we will notify you in the app or by email.

Privacy questions, data requests, or anything else: hello@guessers.app.