Privacy

Short version: we keep what the app needs to work, for as long as the feature says, and we don't sell any of it. This page says exactly what that means.

If you just use the app (no account)

• A visitor cookie. A random id in a cookie called visitor_id so your conversation and your saved-trade tray come back to you. It lasts 30 days from your last visit and is renewed each time you use the app. It is not tied to your name, email or device.
• Your conversation with the GM (the trades you describe, the questions you ask) is stored on our server so the thread can continue. Starting a new session clears it.
• Your tray — every trade you check is saved to it. Signed out, a saved trade is kept 14 days, then pruned.
• Share links you mint (the /v/ pages and memos) are kept permanently — they never expire. They contain the trade and its verdict, not your identity, and they are marked noindex so search engines don't list them.
• Your IP address is used only for rate limiting, and only as a one-way hash — the raw address is never written to disk.

If you sign in

• Your email address — the only personal detail we hold. It's used to send you a one-time sign-in link (valid 15 minutes, usable once) and nothing else: no newsletters, no marketing, no tracking pixels in the email.
• A sign-in session (cookie session) that lasts 30 days from your last visit.
• Your tray follows your account across devices: kept 30 days on the free tier and the whole season on Writer. Share links never expire on any tier.
• Deleting your account (Account menu → Delete account) removes the account, its email and its tray immediately. Share links you already minted stay up, because other people may be relying on them.

Who else sees anything

• The GM is an AI. When you talk to the GM (not when you use the free legality check), the text of that conversation is sent to DeepSeek to generate the reply. When the GM needs to look something up, the query goes to Anthropic (claude-opus-4-8) and a web-search provider (Tavily). None of them receive your email or your cookie.
• Email delivery is handled by Resend — they see your address and the sign-in link, nothing else.
• Hosting is on Render; data lives on that server's disk.
• No analytics, no ad networks, no data brokers. We don't sell, rent or share your data with anyone for their own purposes.

"Report this row"

If you flag a roster or verdict row, the note you type (up to 400 characters) is stored with the row and a hashed IP, and it goes into the data-review queue. Those queue files are part of the project's correction record, so write the note as something you'd be fine seeing quoted — and don't put personal details in it.

Contact

Questions, or want your data removed by hand: hello@gmhoops.com.

This page is written to describe what the code does today. When that changes, this page changes with it.