1. Information We Collect

1.1 Information You Provide

• Email
• Username
• Password (hashed and salted)
• Profile information (bio, avatar, favorite teams)
• Notification preferences
• Privacy settings
• Payment info (processed by Stripe; we do not store full card details)

1.2 Automatically Collected Information

• IP address (hashed for unique viewer counts; raw IP not stored long-term)
• Device information
• Usage analytics (page views, clicks, time on platform)
• Cookies
• Metadata associated with narrative objects
• View, share, and fork statistics for indexes

1.3 User-Generated Content

Content you create — narrative objects, blocks, timelines, media, text — may contain personal data depending on what you include.

1.4 Future Authentication Options

If you use "Login with Google" or similar in the future, we may collect identifiers provided by that service.

2. How We Use Information

We use your information to:

• Operate and improve Sports Index
• Personalize content
• Authenticate users
• Prevent abuse and fraud
• Process payments
• Display narrative objects and rankings
• Communicate updates and changes
• Send transactional emails (verification, password reset, welcome)
• Send service announcements and policy updates

3. How We Share Information

We do not sell your information.

We may share data with:

• Hosting: Railway (infrastructure and hosting)
• Email: SendGrid (transactional emails)
• Payments: Stripe (payment processing)
• Legal authorities (if required by law)

User-generated narrative objects are public by default.

4. Cookies

We use cookies for:

• Authentication
• Session management
• Analytics
• User preferences

5. Data Retention

• Account information is retained until deletion.
• Backup copies may persist for 90 days.
• Narrative objects created by you may persist in derivative form even after account deletion.

6. Security

We use reasonable technical and organizational measures to secure your data, but no method is 100% secure.

7. Children's Privacy

The Service is not intended for users under 13. We do not knowingly collect personal information from children under 13.

8. Your Rights

As a U.S.-based service, your rights depend on state laws.

You may request:

• Access
• Correction
• Deletion

We may refuse unreasonable or abusive requests.

9. Account Deletion

If you delete your account:

• Personal info is removed from your profile
• Narrative objects may persist unless individually deleted
• Derivative/forked objects created by others remain

10. California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Request disclosure of personal information collected
• Right to Delete: Request deletion of personal information
• Right to Opt-Out: We do not sell personal information
• Right to Non-Discrimination: We will not discriminate against you for exercising your rights

To exercise these rights, contact us at privacy@sportsindex.app. We will verify your identity before processing requests.

11. Do Not Track Signals

Some browsers transmit "Do Not Track" signals. We currently do not respond to DNT signals, as there is no industry standard for compliance. We will update this policy if a standard is established.

12. Changes to This Policy

We may update this Privacy Policy. Continued use constitutes acceptance.

13. Contact Us

For privacy-related questions or to exercise your rights, contact us at:

• Privacy Inquiries: privacy@sportsindex.app
• General Support: support@sportsindex.app
• X (Twitter): @sportsindexapp