Privacy Policy

1. Information We Collect

We collect personal information that you provide to us, that we receive automatically when you use the Service, and that we receive from third-party services we use to operate the Service.

Information you provide

• Account information: When you create an account, we collect your email address and a password (stored as a one-way hash, never in plain text).
• Waitlist signups: When you join the Pro waitlist, we collect your email address and (optionally) a free-text description of what you would use Pro for.
• Subscription information: If you subscribe to a paid tier, we collect billing information through our payment processor (Stripe). We do not store full payment card numbers on our servers.
• Communications: If you contact us via email, we receive the contents of your message and your email address.

Information we collect automatically

• Usage data: We collect information about which pages you visit, the time and date of your visit, the duration of your session, and the referring website (if any). This is collected through our analytics provider (Plausible Analytics), which is a privacy-focused analytics service that does not use cookies and does not collect personally identifiable information beyond IP addresses (which are anonymized before storage).
• Technical information: We collect your IP address, browser type, browser version, operating system, and device type. This is used for security, debugging, and to ensure the Service works correctly across devices.
• Form interaction context: When you submit a form (such as the waitlist signup), we collect your user agent string and the referring URL for spam detection and analysis.

Information we do NOT collect

We want to be specific about what we do not do:

• We do not use third-party advertising cookies.
• We do not sell your personal information to advertisers or data brokers.
• We do not use third-party tracking pixels (Facebook Pixel, Google Analytics, etc.).
• We do not collect biometric information.
• We do not collect precise geolocation data.
• We do not knowingly collect personal information from children under 13.

2. How We Use Your Information

We use the personal information we collect for the following purposes:

• To provide, maintain, and improve the Service, including authenticating you, processing your subscription, and delivering the content and features you request.
• To communicate with you, including sending account-related emails (password resets, billing receipts, service announcements), responding to your support requests, and (with your consent) sending product updates.
• To analyze usage patterns and improve the Service, including understanding which features are most used, identifying performance issues, and informing product decisions.
• To detect, investigate, and prevent fraudulent transactions, abuse of the Service, and other illegal activities.
• To comply with our legal obligations, including responding to lawful requests from public authorities.

3. How We Share Your Information

We share your personal information only in the following limited circumstances:

Service providers

We rely on third-party service providers to operate the Service. These providers have access to personal information only to the extent necessary to perform their functions on our behalf:

• Supabase (Supabase Inc.): Database hosting and user authentication. Data is stored in their US-based infrastructure.
• Vercel (Vercel Inc.): Web hosting and content delivery.
• Stripe (Stripe Inc.): Payment processing. Your billing information is sent directly to Stripe and is not stored on our servers.
• Anthropic (Anthropic, PBC): We use Anthropic's Claude AI for generating certain content. User personal information is not sent to Anthropic; we only send anonymized statistical data about teams and games.
• Plausible Analytics (Plausible Insights OÜ): Privacy-focused usage analytics. Does not use cookies; does not collect personally identifiable information.

Legal compliance

We may disclose personal information when required by law, including in response to subpoenas, court orders, or other legal process; to investigate or prevent illegal activities; to enforce our Terms of Service; or to protect the rights, property, or safety of the Service, our users, or others.

Business transfers

If The Berserker Group Ltd is involved in a merger, acquisition, sale of assets, or other business transition, your personal information may be transferred to the new entity. We will notify you via email or a prominent notice on the Service before your personal information is transferred and becomes subject to a different privacy policy.

What we do not do

We do not sell your personal information for monetary consideration. We do not share your personal information with advertisers for advertising purposes.

4. Cookies and Tracking Technologies

We use cookies only for essential Service functions. We do not use advertising cookies or third-party tracking cookies.

Essential cookies

• Authentication cookies: Set by Supabase Auth when you sign in. Without these, you cannot stay logged in.
• Session cookies: Used to maintain your session state during your visit.

Analytics

Our analytics provider (Plausible) does not use cookies. Plausible uses a hashed identifier derived from your IP address and user agent to recognize returning visitors on the same day, but this hash is rotated daily and cannot be used to identify you personally.

5. Data Retention

We retain your personal information for as long as your account is active and for a reasonable period afterward to comply with our legal obligations, resolve disputes, and enforce our agreements. Specifically:

• Account information: Retained until you delete your account. After deletion, we retain a minimal record of the deletion (your user ID and the deletion date) for up to 1 year for legal compliance.
• Waitlist signups: Retained until you ask us to remove you from the waitlist, or up to 18 months after submission if Pro has not launched.
• Subscription / billing records: Retained for 7 years as required by US tax and accounting laws.
• Usage logs and analytics: Aggregated; individual session records retained no longer than 24 months.

6. Your Rights

You have the following rights with respect to your personal information:

• Access: You can request a copy of the personal information we hold about you.
• Correction: You can ask us to correct information that is inaccurate or incomplete.
• Deletion: You can ask us to delete your account and the personal information associated with it. We will honor this request subject to limited exceptions for legal compliance.
• Opt-out of marketing: You can opt out of marketing emails at any time by clicking the unsubscribe link in any marketing email or by contacting us directly.

To exercise any of these rights, contact us at support@fourthdowndata.com. We will respond within 30 days.

California residents

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), gives you additional rights:

• Right to know: You can request information about the categories of personal information we have collected about you, the sources of that information, the purposes for collection, and the categories of third parties with whom we share it.
• Right to delete: You can request that we delete personal information we have collected from you, subject to legal exceptions.
• Right to correct: You can request that we correct inaccurate personal information.
• Right to opt out of sale or sharing: We do not sell personal information, and we do not share personal information for cross-context behavioral advertising. There is nothing to opt out of.
• Right to non-discrimination: We will not discriminate against you for exercising any of these rights.

To exercise these rights, contact us at support@fourthdowndata.com with "California Privacy Request" in the subject line. We will verify your identity before responding to ensure we are providing information to the correct person.

Other state laws

Residents of other states may have similar rights under their state's privacy laws (e.g., Virginia's VCDPA, Colorado's CPA, Connecticut's CTDPA, Utah's UCPA). To exercise rights under these laws, contact us at support@fourthdowndata.com.

7. Children's Privacy

The Service is intended for adults aged 18 and older. We do not knowingly collect personal information from anyone under the age of 13. If you are a parent or guardian and believe your child has provided personal information to us, please contact us at support@fourthdowndata.com and we will delete the information.

8. Security

We take reasonable measures to protect your personal information from unauthorized access, alteration, disclosure, and destruction. This includes:

• Encrypted connections (HTTPS/TLS) for all data transmission.
• Password hashing using industry-standard algorithms (handled by Supabase Auth).
• Row-level security policies in our database to enforce access controls.
• Limited access to personal information on a need-to-know basis.

However, no system is completely secure. We cannot guarantee absolute security of your information. If we become aware of a security breach affecting your personal information, we will notify you in accordance with applicable law.

9. International Users

The Service is hosted in the United States and is intended for users in the United States. If you access the Service from outside the United States, your personal information will be transferred to and stored in the United States, where data protection laws may differ from those in your jurisdiction. By using the Service from outside the United States, you consent to this transfer.

If you are located in the European Economic Area, United Kingdom, or another jurisdiction with stricter data protection laws than the United States, please be aware that the Service has not been designed for use in your jurisdiction. We may decline service requests from outside the United States.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will post the updated policy on the Service with a new "Last updated" date. For material changes, we will provide additional notice (such as an email to registered users, or a prominent notice on the Service). Your continued use of the Service after the effective date of any changes constitutes your acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us:

• The Berserker Group Ltd
• Email: support@fourthdowndata.com