Privacy Policy

When you sign in with Google — the only production sign-in method — Google shares your name, email address, and profile picture with us, and confirms your email is verified. We don't receive your Google password or see anything else in your Google account.

In development/testing environments only, an email-and-password sign-up path may be available. If you use it, we store your username, email address, and a bcrypt hash of your password — never the password itself in readable form. This path is disabled in production.

Usage data — pages you visit, features you use (paper-trading orders and positions, watchlists, saved opinions, notification interactions), and standard request metadata (approximate timestamps, browser/device information). Paper trading uses simulated virtual currency against real, delayed market prices — no real money or brokerage account is ever involved, so we never collect real payment or bank details for it.

We do not knowingly collect information from anyone under 18.

• To create, secure, and identify your account.
• To operate the product you signed up for: your virtual wallet balance, paper-trading positions and history, watchlists, saved analyst opinions, and notifications.
• To detect and prevent abuse (for example, rate-limiting repeated failed sign-in attempts).
• To understand, in aggregate, which parts of the product are actually used, so we can improve it.

We do not sell your personal data, and we do not use it to serve third-party advertising. We do not share your data with anyone except as described below.

• Google, when you choose to sign in with Google — governed by Google's own privacy policy.
• Infrastructure providers (our database and hosting services) that process data strictly on our behalf, solely to run the product — they don't get to use your data for their own purposes.
• If required to by law, or to protect the rights, safety, or property of Street Verdict or our users.

We use a single session cookie to keep you signed in. We don't use third-party advertising or cross-site tracking cookies.

We retain account data for as long as your account is active. If you want your account and associated data deleted, contact us and we'll process the request.

You can ask us to access, correct, or delete your personal data at any time by contacting us below. If you signed up in a development/testing environment with a password, that password is stored as a bcrypt hash and is never visible to us in plain text.

We may update this policy as the product changes. Material changes will update the "Last updated" date above.

Questions about this policy or your data: support@predictfuture.app.