Privacy Policy

What an account collects

An account is: your email address, a password (handled by our authentication provider, Supabase — we never store or see it), an optional display name you choose, a timestamped confirmation that you are 16 or older (we do not collect a birthdate), and your picks — the agree/disagree stances you record on published claims, their timestamps, and the scores computed when those claims settle.

Only if you choose a public profile: a username, a short bio, links to social accounts you name, and a profile photo. A photo is resized to a small square on upload and its metadata — including any location a phone embedded — is discarded; we keep only the resized image. All of it is optional, all of it is yours to edit or remove, and none of it exists until you fill it in.

Not collected: real names (a display name is whatever you choose), birthdates, location, phone numbers, payment details, biometrics, government IDs. There is no advertising, no sale of data, and no data brokers — the same posture as the rest of the site, now in writing for accounts.

Signing in uses an essential session cookie. The analytics choice on the cookie banner is unchanged by having an account: one optional category, off by default, and a Global Privacy Control signal is honored as a binding no.

Private by default

Your record is visible only to you until you switch on a public profile. A public profile is a page at /members/your-username showing your display name, bio, links, photo and your picks record — never your email. Any leaderboard shows the same. Switching it off, or deleting your account, removes the page.

Aggregate stance counts on a claim (“72% of readers disagreed”) are shown only when at least five members hold a stance on it, and never identify anyone.

Your controls

From your profile you can export everything we hold about you (JSON or CSV), and delete your account yourself — deletion removes the account, every pick, and every score, immediately and permanently. What survives: aggregate counts that no longer identify anyone.

For anything you cannot do self-serve, write to ben@thegoodapps.co. We answer privacy requests within 45 days, do not discriminate for exercising your rights, offer an appeal if you disagree with an outcome, and extend these rights to residents of all U.S. states.

Email

Transactional only: signup confirmation, password reset, and notices about your account — plus one optional weekly recap of your own picks, off by default, switched on only by you from your profile, skipped in any week where nothing of yours graded, and carrying a one-click unsubscribe link in every message. We keep a record of which weeks a recap was sent to you, and nothing else about it. No newsletter is being sent today.

Service providers

Supabase (database and authentication, US region), Vercel (hosting), and Resend (transactional email). No others hold member data.

Changes

Material changes to this policy will be announced at least 14 days before they take effect; continued use after the effective date is acceptance. The effective date at the top is the record.