Draft · pending legal review
RallyPools beta privacy
Draft. Pending legal review. This is not a finished privacy notice.
What we store
A beta account stores your email, a salted password hash, your display name, and an optional home place. Sessions are stored as hashes in an httpOnly cookie. Invite codes, wallet entries, feedback, and an audit log stay on the server.
What we do not do
There is no paid email provider in this beta. Password reset links are shown to an admin to copy. There are no third-party analytics trackers. The service-role key for storage stays on the server.
Payments
Real payments are off. If they are turned on later, card handling would go through Stripe, and this notice would be replaced after legal review. Until then, the product shows beta test credits only.
Who can see it
Other people see your display name on a rally you publish or a proof you submit. Admins can see accounts, wallets, invites, feedback, and the audit log. Proof photos are limited to the people who need to review them.