Privacy notice

This notice explains how ForProphet handles information when you use our website, Fortune Teller learning game, Live Prophecies, optional account sync, leaderboards, wallet analytics, historical simulations, public share pages, and related operations. ForProphet does not connect wallets, execute trades, or custody assets.

• Account details: an email address and authentication method when you create an optional account. Supabase securely processes password credentials; ForProphet does not receive or store plaintext passwords.
• Waitlist details: the email address you submit when asking for beta access.
• Google sign-in details: when you choose Google, Supabase receives the basic identity information Google shares for authentication, such as your email and profile details. ForProphet does not store Google access or refresh tokens.
• Learning activity: settled rounds, predictions, confidence choices, scores, practice dates, and anonymous game-session identifiers. Guest progress is stored in your browser; signed-in progress is stored with your account.
• Live forecasting activity: the asset, sealed direction and confidence, frozen adjusted entry price, submission time, resolved market result, forecast score, and calibration feedback. Live Prophecies require an account.
• Leaderboard details: a generated anonymous alias and whether you opt in. Your email is not shown on leaderboards. If you separately enable social identity, signed-in members may also see your profile avatar and display name with that alias.
• Profile and community details: your generated or edited handle, display name, bio, investor archetype, preset avatar, member-since date, follows, celebrations, achievements, quest completions, and selected learning milestones. Profiles and activity are available only to signed-in members and are not public web pages.
• Tool activity: wallet addresses you search, simulation inputs, generated results, and share identifiers.
• Public market data: fills, positions, prices, and wallet activity retrieved from Hyperliquid's public interfaces.
• Security and operations data: request timestamps, errors, and a salted one-way hash derived from an IP address for abuse prevention. ForProphet does not retain the raw IP address in its application database.
• Notification details: if you opt in, your browser's private push endpoint, Web Push encryption keys, time zone, app-session identifier, delivery status, and optional account identifier. We do not use notification permission for advertising or background location tracking.
• Product analytics: redacted page routes and performance measurements used to understand reliability and improve the experience. PostHog analytics uses an anonymous, memory-only visit identifier and does not store its identifier in your browser. Wallet addresses, simulation identifiers, query strings, form contents, session recordings, and admin activity are excluded from application analytics.

We use information to settle historical rounds and live forecasts, calculate learning and quest progress, sync optional accounts, recommend member connections, generate milestone activity, operate opt-in leaderboards, provide wallet reports and simulations, operate share links, prevent misuse, troubleshoot failures, improve the product, and send the single daily reminder you request. We do not sell personal information or use activity to execute trades.

A simulation share link is public to anyone who has its URL and includes the analyzed wallet address and result. Opted-in leaderboard entries publicly show only a generated alias and performance metrics. Signed-in members can view member profiles, follows, milestone activity, and celebration counts; profile emails are never shown. Wallet addresses and on-chain activity are public by nature. We use service providers including Vercel for hosting, request processing, redacted analytics, and performance monitoring; PostHog for privacy-limited pageview analytics; Supabase for authentication and application storage; browser push services, including Apple Push Notification service on supported Apple devices, for opted-in notifications; and Hyperliquid to support wallet analytics. We also use Google when you choose Google sign-in and Cloudflare Turnstile to protect account forms from automated abuse. Those providers process information under their own terms and privacy notices.

• Wallet search activity is deleted after 90 days.
• Saved simulations and their public share links are deleted after 365 days.
• Hashed rate-limit buckets are deleted after 2 days.
• Learning rounds remain while your account is active so progress and reviews can be calculated. You may request deletion.
• Member profiles, follows, quest records, achievements, milestone activity, and celebrations remain while your account is active. Deleting the account removes these records and dependent social relationships through cascading deletion, subject to limited provider backup retention.
• Live Prophecies and their fulfilled results remain while your account is active so the Prophecy Book, progression gates, calibration, and optional rankings work. You may request deletion.
• A push subscription is removed when you disable notifications through the app or when its browser push service reports it expired. Repeated delivery failures disable the subscription automatically.
• Waitlist email addresses remain available for beta invitations unless you ask us to remove yours.

Infrastructure logs and backups may follow shorter or longer provider-controlled schedules where needed for reliability, security, or disaster recovery.

You may edit your profile and leaderboard identity preference in the app. You may follow or unfollow members and add or remove a celebration at any time. You may ask to access, correct, or delete account, profile, social, learning, or waitlist information associated with your email, or ask a privacy question, by contacting hello@forprophet.com. We may need to verify the request before acting on it. Removing a simulation makes its public share link unavailable. You can disable push notifications at any time in the app or your device settings.

We use access controls, encryption provided by our infrastructure, least-privilege database permissions, and automated abuse controls. No online service can guarantee absolute security. ForProphet is not intended for children under 18, and we do not knowingly collect their personal information. We may update this notice as the product changes and will revise the effective date when we do.