Privacy Policy
PopCastly ("PopCastly", "we", "us") operates a prediction-market entertainment service at popcastly.com (the "Service"). This policy explains what data we collect, why we collect it, and the choices you have. We try to collect as little as possible.
1. Information we collect
Account data. When you sign in we receive your email address via our authentication provider (Supabase) and create a profile with a public handle, credit balance, streak, and timestamps.
Activity data. Trades, positions, and credit ledger entries are stored to operate the Service and power leaderboards and activity feeds. Handles are public; balances and ledgers are private to you.
Technical data. Standard server logs (IP address, user-agent, request path, timestamps) and session cookies set by our authentication provider.
Inquiry data. If you submit a form (e.g. partner inquiry), we store the fields you provide along with the page that referred you and your user-agent.
2. How we use it
- To run the Service: authenticate you, record trades, settle markets, and display public leaderboards.
- To prevent abuse and fraud, including multi-accounting, scripting, and reward-system bypass attempts.
- To respond to inquiries you submit through our forms.
- To comply with legal obligations.
3. Cookies and consent
We use a small number of strictly necessary cookies to keep you signed in. If we enable advertising or analytics cookies in the future, they will be set only after you grant consent through our consent banner. You can withdraw consent at any time by clearing localStorage.popcastly_consent in your browser.
4. Service providers (processors)
- Supabase — authentication, database, and session storage.
- Hosting / CDN — to serve the Service globally.
- Google (Ad Manager / AdSense) — when rewarded video advertising is enabled, Google may serve ads and process limited technical data on our behalf, subject to your consent and Google Consent Mode v2 signals.
5. Advertising
PopCastly may display rewarded video ads in exchange for in-app credits. When advertising is enabled, third-party ad partners may collect device and usage signals. These signals respect the consent state you set through our banner. We do not sell personal information.
6. Your rights
Depending on your jurisdiction (including the EEA, UK, and California), you may have the right to access, correct, delete, or export your personal data, and to object to or restrict certain processing. To exercise these rights, email privacy@popcastly.com. You may also lodge a complaint with your local data protection authority.
7. Data retention
We keep account and activity data for as long as your account is active. If you delete your account, we delete or anonymize personal identifiers and retain only aggregate, non-identifying data for analytics and integrity.
8. Security
We use industry-standard safeguards including TLS in transit, access controls, and audit logging. No system is perfectly secure; we will notify affected users in the event of a breach as required by law.
9. Children
The Service is not directed to children under 18 and we do not knowingly collect personal data from them.
10. Changes
We may update this policy. Material changes will be flagged on this page with a new "last updated" date and, where appropriate, by in-product notice.
11. Contact
PopCastly — [Legal entity name and address to be added]
Email: privacy@popcastly.com