Privacy Policy

1. Information We Collect

We only collect information necessary to provide, protect, and improve our services:

• Account Credentials: When you sign up or log in via Clerk, Google OAuth, or Apple OAuth, we receive your email address, name, and unique user identifier. We never store raw passwords.
• Usage & Preferences: Information regarding your saved virtual coupons, favorites, analysis requests, and platform interactions.
• Technical & Diagnostic Data: Standard web server logs, IP addresses (anonymized where applicable), browser type, and device information to ensure uptime, security, and fraud prevention.

2. How We Use Your Information

Your data is used strictly for legitimate platform purposes, including:

• Authenticating your identity and managing session security.
• Delivering personalized match insights, saved virtual coupons, and custom analysis requests.
• Monitoring model performance, platform reliability, and defending against automated abuse or multiple-account exploitation.
• Communicating critical account notifications or service updates.

3. Third-Party Service Providers

We do not sell, rent, or trade your personal information. We rely on industry-leading infrastructure partners who process data strictly under confidentiality agreements:

• Clerk: User identity, session tokens, and authentication management.
• Google & Apple: Secure OAuth sign-in authentication.
• Vercel & Cloudflare: Global edge delivery, DDoS mitigation, and bot protection.
• API-Football: Sourcing match fixtures, team statistics, and lineups.

4. Cookies and Local Storage

We use strictly necessary cookies to keep you signed in (__session), remember your preferred language (NEXT_LOCALE), and prevent Cross-Site Request Forgery (CSRF). We do not use third-party behavioral advertising or invasive tracking cookies.

5. Data Security and Retention

All data transmitted between your browser and Tipsilon is encrypted using modern TLS (HTTPS) standards. Sensitive backend operations verify cryptographically signed JSON Web Tokens (RS256). We retain personal data only as long as your account remains active or as required by applicable laws.

6. Your Rights and Choices

Depending on your jurisdiction (such as GDPR or KVKK), you have the right to access, rectify, export, or permanently delete your personal information. You can manage your profile settings or request complete account deletion at any time.

7. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy, please contact us at contact@tipsilon.com.