Privacy Policy

• Account details. Your username, display name, optional bio, optional unit size, sport preferences, and a one-way hash of your password. We cannot see your password. We do not collect an email address, phone number, date of birth, or legal name.
• Age confirmation. That you ticked the box saying you are 21 or older when you signed up.
• Content. Your posts, bets, grades, replies, reactions, follows, room memberships, and any receipt images you upload, with the times they were created or edited.
• Technical logs. Our hosting provider and our edge network record the IP address, browser, requested page, and time of each request, as every website does. We use these for security and debugging and keep them only as long as those providers' default retention.
• One cookie. A signed session cookie that keeps you logged in. It contains a random session ID and nothing else. There are no analytics, advertising, or tracking cookies, and no third-party scripts other than the fonts noted below.

• To run the site: show your posts, compute your record, keep you logged in, and let rooms work.
• To keep the site safe: find abuse, spam, and attacks, and enforce the Terms of Service.
• To generate share-card images from public posts, profiles, and tags so links unfurl on other sites.
• We do not sell personal information, use it for advertising, or build profiles of you for anyone else.

• Your username, display name, bio, record, unit totals, unit size if you set one, public posts, receipts on public posts, replies, reactions, and your follower and following counts are visible to anyone, including people without an account and search engines.
• Posts in a room are visible to that room's members. A room's name and member list are visible to anyone with its link, and anyone with the invite link can join. Room pages are kept out of search engines.
• The people who run Tailthat can read everything in the database, including room posts, for moderation and support.

• Hosting. The site and its database run on Railway, in the United States. Railway processes data on our behalf and does not use it for its own purposes.
• Edge network. Traffic passes through Cloudflare, which provides DNS, TLS, and protection from attacks and sees request logs.
• Fonts. Pages load the Inter typeface from Google Fonts, which receives your IP address and browser details when the font is requested.
• Sports data. Schedules and scores are fetched from a third-party sports data source by our server. Those requests contain nothing about you.
• Legal requests. We will disclose data if the law requires it or to protect the site and its users from harm.
• If Tailthat is sold or merged, your data would move with it under this policy.

Account data and content stay until you delete them or your account is deleted. Deleting a post deletes its receipt image. Database backups may hold deleted data for a limited time before they roll off.

• You can edit your display name, bio, unit size, and sport preferences in Settings, and delete any of your posts.
• To delete your account, email [email protected] from any address and name your username. We will confirm it is you and delete the account, its posts, and its receipts. Self-service deletion is planned.
• You can ask for a copy of the data we hold about you at the same address.
• Because we do not sell data or track you across sites, there is nothing to opt out of. If you live in a place with specific privacy rights (California, the EU, the UK, and others), you may exercise them by email and we will not treat you differently for doing so.
• Blocking cookies in your browser will stop you from logging in but will not affect anything else.

Tailthat is for adults 21 and older. We do not knowingly collect information from anyone under 21, and never from anyone under 13. If you believe a minor has an account, email us and we will delete it.

Passwords are hashed with scrypt and never stored in the clear. Connections use HTTPS. The database is on a private network with no public address. Session cookies are signed, HTTP-only, and marked secure. No system is perfectly secure, so please use a password you do not use elsewhere.

We may update this policy. The new version will appear here with a new "last updated" date, and material changes will be announced with a notice on the site, since we have no email address to reach you at.

Shacklebolt Technologies, operator of tailthat.com. Email [email protected].