Privacy

u1jf9 is run by OWNER: company name. This page says what the site stores and who handles it.

• Your email address, to sign you in with a code. If you sign in with Google, we also receive your name, profile picture and Google account ID, and keep them with your login. We ask Google for nothing else. Supabase also keeps sign-in records: time, IP address and browser.
• Your age band, 16-17 or 18 and over, from the date of birth you enter at the start. We do not store the date itself.
• Your registration number.
• Your votes, your matches, and the notes you send to the slot. Every note is checked automatically (Claude on Amazon Bedrock) and may also be checked by TypeSafe. Every note is copied to the team on Slack, under your registration number, not your name.
• To limit abuse, opening the arena sets a random device cookie (one year), members included. Voting without an account sets a short bot-check cookie (10 minutes) after about ten votes. Arena votes and pairs are stored with a hash of that device token and a hash of your IP address that changes every day; slot notes with the IP hash. Never the address itself.
• Visit and usage counts (pages seen, first swipes, sign-ins, shares), with no cookies and no profile of you, through PostHog.

Supabase hosts the database. Vercel hosts the site. Resend sends the sign-in emails. Cloudflare runs Turnstile, a bot check that sees your IP address. Google, Amazon Web Services, TypeSafe, Slack and PostHog handle only what is described above. We do not sell your data.

A Google login that never completes the start is deleted within a day or two. Everything else stays until you ask us to delete it. When we delete your membership, your registration, votes and notes are detached from you or deleted; the text of a note may stay.

People aged 16 and 17 may join, with limits. Under 16 is not allowed: no membership is made, and a cookie remembers the refusal for 30 days.

To see or delete what we hold, write to OWNER: contact address. For help with something hard, see help.