Privacy Policy

What data we collect

We try to collect as little as possible. The categories below cover everything the site touches.

• Technical data — IP address, browser type, device type, referring URL, and pages visited. Collected automatically by our hosting (Netlify) for security, abuse prevention, and basic operation.
• Error data — when something breaks, Sentry captures the error stack, your IP address, browser type, and the URL of the page. We use this only to fix bugs.
• Analytics data — Google Analytics 4 records anonymous pageviews and session metrics only after you accept analytics cookies in the consent banner. Without consent, no analytics cookies are set.
• Consent records — CookieYes stores your cookie consent choices in a first-party cookie (cookieyes-consent) so we respect your preferences across visits.
• Prediction data — prediction outputs and accuracy scores are stored in Supabase. These are not tied to an account unless you create one.

We do not collect payment information directly (we do not sell anything yet), do not run advertising networks, and do not buy or sell personal data.

Legal basis (GDPR Art. 6)

• Consent — analytics cookies and any future advertising/personalisation features. Withdraw anytime via the cookie preferences button.
• Legitimate interest — hosting logs (security, abuse prevention) and error monitoring (Sentry, to fix bugs). You can object at any time.
• Performance of a contract — if you create an account, processing the data you submit to provide the service.

Service providers (data processors)

We use the following third parties to operate the site. We have data-processing agreements in place where required.

International transfers

Some providers are based outside the EU/EEA (primarily the United States). Transfers rely on the EU-US Data Privacy Framework where the provider is certified, and on EU Standard Contractual Clauses otherwise. Where required, we apply supplementary measures (encryption in transit and at rest).

Data retention

• Hosting access logs: typically 30 days (Netlify default).
• Sentry error events: 30 days for non-paid retention tier.
• Analytics data (GA4): up to 14 months from collection, then auto-deleted.
• Cookie consent records: 1 year, or until you withdraw consent.
• Prediction records: retained as part of the public leaderboard dataset.

Your rights under the GDPR

If you are in the EU, EEA, or UK, you have the right to:

• access the personal data we hold about you;
• request rectification of inaccurate data;
• request erasure (“right to be forgotten”);
• restrict or object to processing;
• data portability;
• withdraw consent at any time, without affecting the lawfulness of processing before the withdrawal;
• lodge a complaint with your national data-protection supervisory authority.

To exercise any of these rights, email contact@exactpredictors.eu. We respond within 30 days.

Cookies

For details about specific cookies and how to control them, see our Cookie Policy.

Children

This site is intended for users aged 18 or older. We do not knowingly collect data from minors. If you believe a minor has provided us data, email us and we will delete it.

Changes to this policy

We may update this policy from time to time. Material changes will be communicated by updating the “Last updated” date at the top of this page and, where appropriate, by a more visible notice.

Contact

Email: contact@exactpredictors.eu