What we keep about you, and what we don't.

Draft. Not yet reviewed by a lawyer. Bracketed text is a placeholder, not a commitment.

Effective [date] · Last updated [date]

Who is responsible

Sweat is run by [full legal name], a sole proprietor doing business as Sweat. That person decides what Sweat collects and why, and answers for it. Addresses are at the end of this page.

The short version

Sweat keeps the least it can: your email if you make an account, which markets you watch and since when, positions you enter, your alert settings, reactions you make (under a salted device id), your display preferences, and the ordinary server logs any website keeps. None of it goes to Kalshi, Polymarket, Google, or X. There are no ads, no trackers, and nothing is sold.

What we collect, and where it comes from

• What you give us. Your email address when you make an account, positions you type in, alerts you turn on, and messages you send us.
• What your browser holds. The market you watch, when you started, and preferences such as hiding posts on X live in your browser's storage on that device. They are not sent to us until you have an account and choose to keep them there, with one exception: if you react to an item, the random device id below goes with the reaction.
• Reactions. When you react to an item, your browser sends a random device id it made for this purpose, and we keep only a salted hash of it beside your reactions, never the id itself. Counts are public and never say who. "Remove my reactions", at the end of a market's feed, deletes every reaction from that browser. We keep a reaction for 30 days, or until every market its item shows on has settled, whichever comes first.
• What we record automatically. Standard server logs: your IP address, browser type, the pages you requested, and when. We keep them for [30 days] to keep the service secure, find abuse, and fix faults. No analytics or advertising trackers run on Sweat.
• What others give us. With Google sign-in, only your email address. Nothing about you comes from Kalshi, Polymarket, or X. Position sync, when it exists, reads your open positions only after you connect it, and you can disconnect it at any time.

What we use it for

To run Sweat for you, to send the emails you asked for, to keep the service secure, and to meet legal obligations. Nothing else: no profiling, no advertising, no sale or rental of anything about you.

Never. Sweat never sells your data, never shows you ads, never emails you during the preview, and never sends your side or prices to analytics.

Without an account

You can look at any market and watch one without telling us anything. The market you watch and your preferences live in your browser only. Clear the site's data and they are gone. On our side there is the server log described above, which does not know who you are, and, if you react to items, your reactions under a salted hash of your browser's random device id. Clearing the site's data loses that id, so use "Remove my reactions" first if you want them gone.

With an account

An account is an email address. We send a sign-in link to it; there is no password to store. Your markers move from the browser to the account so they follow you across devices. [accounts are not built yet]

Email

We would email you only for a sign-in link you asked for, alerts you turned on, a receipt if you pay, a notice before a plan ends, and a notice of a material change to these pages. Never marketing you did not ask for. Every alert email carries a link that turns it off, and every email names the sender and a postal address.

Who we share it with

• Service providers, each for one job, each seeing the minimum that job needs and permitted to use your data only to do it for us: [hosting provider, region] runs the server and the database; [email provider] would send sign-in links, alerts, and receipts; [billing provider] would handle payments, and card details never reach Sweat. If this list changes, this page changes with it.
• Legal requests. We comply with valid legal process. Where the law allows, we will tell you before we hand anything over.
• If the business changes hands, for example if Sweat becomes a company or is sold, your data goes with it under these same promises, and you will be told.
• Never to Kalshi, Polymarket, Google, X, advertisers, or data brokers.

The markets' records

Prices, news, and posts on X are recorded per market, not per person. They belong to the market and are visible to everyone who opens it. Watching a market adds nothing about you to that record.

Posts on X

We keep a post's words only while the post is still available on X, and remove them within X's deadline when a post is deleted, an account is protected, or X removes it. We store no images or media. X's own terms govern what X does with your use of X; ours govern only what Sweat does.

Cookies and storage

Browser storage holds your markers and preferences. One cookie signs you in once accounts exist. No third-party cookies, no analytics, no advertising. Because we do not track you, a Do Not Track or Global Privacy Control signal changes nothing: there is already nothing to opt out of. [confirm the exact list at launch]

How long we keep it

• Account data: while the account exists, then gone as soon as you delete it, with backups cleared within [30 days].
• A comment you delete while it’s reported may be kept for up to 30 days so it can be reviewed, then it’s deleted.
• If you report a comment, we remember that you hid it for as long as you have an account, so you won’t see it again. Deleting your account removes this.
• Server logs: [30 days].
• Receipts, if you ever pay: as long as tax law requires, [7 years].
• The markets' records: they are not about you and stay.

Your rights

Wherever you live, you can ask to see what we hold about you, correct it, delete it, get a copy of it, or object to a use of it. Email [privacy@ address] and we answer within [30 days]. Deleting your account from the account page does most of this without asking.

If you are in California, you also have the right to know what we collect and why, to delete it, to correct it, to opt out of sale or sharing (we do neither), and not to be treated differently for exercising these rights. [add the CCPA notice at collection and any required disclosures]

If you are in the UK or the European Economic Area, our legal bases are: performing our agreement with you (running Sweat and sending what you asked for), our legitimate interest in keeping the service secure, and your consent for anything optional. Sweat's servers are in [region]; if that is outside your country, your data is transferred there under [the safeguard the lawyer names]. You may complain to your data-protection authority. [add the GDPR representative, if one is required]

Children

Sweat is for adults. The markets it shows are for people 18 and over, and so is Sweat. We do not knowingly collect anything from anyone under 18; if you believe a minor has given us data, email us and we will delete it.

Security

Sweat uses reasonable measures for its size: connections are encrypted, access to data is limited to the operator, and sign-in needs no password we could lose. No method is perfect. If a breach affects you, we will tell you as the law requires, and sooner where we can.

Changes

When this page changes, the date at the top changes. If a change matters, account holders get an email and the site says so before it applies.

Requests from authorities

We comply with valid legal process and nothing less. Where the law allows, we tell the person affected before we hand anything over.

Contact

Sweat is run by [full legal name], a sole proprietor doing business as Sweat, based in [city, state or country]. Sweat is independent and is not affiliated with, endorsed by, or connected to Kalshi, Polymarket, X, or Google. One person reads every address below.

Questions

[hello@ address]

Privacy and your data

[privacy@ address]

Legal notices

[legal@ address]

Copyright

[copyright@ address]

Security

[security@ address]

Post

[PO box or registered-agent address, not a home address]

Something wrong on a page

If something on a market's page looks wrong, send the market's link and the time shown beside it to [hello@ address].