Privacy Policy

1. Data Controller

The data controller responsible for this website is Davide Ferigato. For any inquiries regarding your personal data, you can contact him at: d.m.f.s@outlook.it.

2. Personal Data Collected

This application collects the following categories of personal data:

• Identity Data: name, email address, profile picture (provided by Clerk during authentication).
• Technical Data: IP address, browser type, operating system, and other technical identifiers collected automatically when you visit the site.
• Game Data: TrumpBucks balance, total clicks, bets placed, badges earned, and prophecies generated.
• Newsletter Data: email address provided voluntarily for the newsletter subscription.

We do not collect any sensitive personal data (e.g., health, political opinions, religious beliefs).

3. Purposes of Processing

Your personal data is processed for the following purposes:

• To provide and maintain the core functionality of the site (authentication, user profile, game mechanics).
• To send the weekly newsletter, but only if you have explicitly subscribed.
• To ensure the security and proper functioning of the IT systems.
• To display aggregated, anonymous statistics (e.g., total prophecies invoked).

4. Legal Basis

• Consent: for the newsletter subscription and the sending of related emails.
• Legitimate Interest: for the operation of the website (authentication, user profile, game data, technical security).

5. Data Retention

Your personal data is retained for as long as your account remains active. If you request the deletion of your account, all associated data will be permanently removed within 30 days. Newsletter data is kept until you unsubscribe.

6. Data Sharing and Transfers

Your data is stored and processed through the following third‑party services, which act as data processors:

• Clerk – authentication provider (USA); standard contractual clauses are in place.
• Supabase – PostgreSQL database (EU region).
• Upstash – Redis cache (EU region).
• Resend – email delivery service (USA).
• Vercel – hosting platform (USA).

Some of these providers are based outside the European Union. In such cases, we ensure that adequate safeguards are in place, such as Standard Contractual Clauses or the provider's adherence to the EU‑US Data Privacy Framework.

7. Your Rights

Under the GDPR, you have the right to:

• Access your personal data.
• Rectify inaccurate or incomplete data.
• Request the erasure of your data ("right to be forgotten").
• Restrict or object to the processing of your data.
• Receive your data in a structured, commonly used format (data portability).
• Withdraw your consent at any time (for newsletter).
• Lodge a complaint with a supervisory authority.

To exercise any of these rights, please contact us at d.m.f.s@outlook.it. We will respond within 30 days.

8. Cookies

This site uses only technical cookies strictly necessary for authentication (Clerk) and for saving your language and theme preferences (via localStorage). No profiling or third‑party cookies are used. For more details, please read our Cookie Policy.

9. Changes to this Policy

This privacy policy may be updated from time to time. We encourage you to review it periodically.