Privacy Policy

What we collect

Account information. If you create an account, we store your email address, a display name, and an avatar selection. Authentication is handled by Supabase Auth, which also stores your password in hashed form — we never see or store your password ourselves.

Things you post. Saved trades, scouting reports, comments and other community content, along with the account that created them. Anything you publish publicly is visible to anyone who visits the site.

Messages you send us. Support submissions, contact messages, and waitlist signups, including any email address and the page URL you were on when you submitted.

Usage data. Product analytics events (pages viewed, features used) and, if something breaks, an error report containing the technical details of the failure. Both may include your IP address and browser type.

We do not knowingly collect information from children under 13. If you believe a child has given us information, email us and we will delete it.

Why we collect it

• To sign you in and keep you signed in.
• To show your content to you and, where you chose to publish it, to others.
• To reply to you when you contact us.
• To understand which parts of the site are used, so we build the right things next.
• To find and fix bugs.
• To enforce our Terms & Conditions and prevent abuse.

If you are in the UK or EEA, our lawful bases are performance of a contract (running your account), legitimate interests (security, analytics, product improvement), and consent (marketing email, which you can withdraw at any time).

Cookies

We use cookies that are necessary for the site to work — chiefly the session cookie that keeps you signed in. We also use analytics cookies to count visits and understand feature usage. We do not run advertising cookies and we do not allow third-party ad networks to track you here.

Who we share it with

We do not sell personal information and we do not share it for cross-context behavioural advertising. We use a small number of service providers who process data on our instructions:

• Supabase — authentication, database and file storage.
• Vercel — hosting and content delivery.
• Resend — transactional and newsletter email.
• PostHog — product analytics.
• Sentry — error monitoring.

These providers may store data in the United States. We may also disclose information where we are legally required to, or where it is necessary to protect the rights and safety of our users.

How long we keep it

Account data is kept while your account exists. Support and contact messages are kept while they are useful for handling the issue and for our own records. Analytics and error data are kept on our providers’ standard retention schedules. Public content you posted may remain visible after your account is deleted unless you remove it first or ask us to.

Your rights

Wherever you live, you can ask us to show you the personal information we hold about you, correct it, or delete it, and you can ask us to stop sending marketing email — every newsletter has an unsubscribe link. Depending on where you live you may also have the right to a portable copy of your data, to object to or restrict certain processing, and to complain to your data protection authority.

To exercise any of these, email support@tankadelphia.com or use the contact form. We will not treat you differently for asking.

Security

Traffic is encrypted in transit, passwords are hashed by our authentication provider, and administrative areas of the site are restricted to named accounts. No system is perfectly secure, so please use a strong, unique password.

Changes

We will update this page when what we do changes, and will update the date at the top. If the change is significant, we will say so on the site.

Contact

Questions about this policy: support@tankadelphia.com, or the contact page.