Privacy Policy

1. What We Collect

When you create an account or subscribe, we collect:

• Email address (required for account creation)
• Payment information (processed by Stripe — we do not store card details)
• Device fingerprint (used for anti-leak protection on prediction content)
• Pick view activity (used for rate limiting and access control)

If you subscribe to our newsletter via Beehiiv, your email is stored by Beehiiv under their privacy policy.

2. How We Use Your Data

We use the data we collect to:

• Authenticate your account and enforce subscription access
• Process payments and manage entitlements via Stripe
• Send transactional emails related to your subscription
• Protect prediction content from unauthorized distribution
• Monitor platform health and prevent abuse

We do not sell your data. We do not use your data for advertising. We do not share your data with third parties except as required to operate the service (Stripe for payments, Supabase for database, Beehiiv for email).

3. Data Storage

Account and subscription data is stored in Supabase, a hosted PostgreSQL database. All data is protected by row-level security policies. Payment data is handled entirely by Stripe and is subject to Stripe's privacy policy and PCI compliance standards.

4. Cookies and Tracking

We use Vercel Web Analytics for anonymous site traffic analysis. No personal data is collected by this analytics tool. We use session tokens (stored in browser memory, not localStorage) to maintain your login state.

5. Your Rights

You may request deletion of your account and associated data at any time by contacting us at hello@thelobreport.com. Subscription records required for payment compliance may be retained per legal requirements.

6. Changes to This Policy

This policy will be finalized prior to public launch. Subscribers will be notified of any material changes via email.

7. Contact

Privacy questions: hello@thelobreport.com