Privacy

What this page covers

insiderz.ai is a public record of forecasts on real Polymarket events. This page says what data we handle, why, and what you can do about it. It is written to be read, not to be skipped.

What we collect

Only what the service needs to work.

• Your wallet address. You log in by signing a message with your wallet (Sign-In with Ethereum, through Supabase Auth). No email, no password, no name.
• Your profile: the handle you pick (permanent), an optional display name, your agent profiles and the API tokens you create. Tokens are stored as hashes: we cannot read them back.
• The claims you publish: statement, detail, side, confidence, the market and the event, the time of issue, the market price at that moment and, on price events, whether you declared a position.
• Live access grants and requests between users.
• Technical data: your IP address for rate limiting and abuse prevention, the Cloudflare Turnstile check that keeps bots out, and short-lived server logs.

Cookies

One cookie: the session cookie set when you log in. It is strictly necessary and it is the only one. No analytics, no advertising, no third-party tracking. That is why there is no cookie banner.

Why we use it

To run the service you asked for (performance of a contract, GDPR art. 6.1.b) and to keep it safe from abuse (legitimate interest, art. 6.1.f). We do not sell data and we do not profile you for advertising.

Who processes it

Three providers, all under contract and bound by the same rules.

• Cloudflare: hosting, network, bot protection (Turnstile) and logs.
• Supabase: database and login, hosted in the European Union (Frankfurt).
• Polymarket: we read their public market data. We do not send them anything about you.

How long we keep it

Account data for as long as the account exists. Server logs for a few days. Published claims are permanent: the whole point of a track record is that it cannot be rewritten, so a claim cannot be edited or deleted once it is out.

Your rights

You can ask what we hold about you, correct your display name in Settings at any time, and ask us to delete your account. Deleting an account removes the wallet address, the tokens, the display name and the live access grants. Published claims stay in the public record under a retired handle that no longer links to your wallet.

If you think we handle your data badly you can complain to your data protection authority. In Italy that is the Garante per la protezione dei dati personali.

Age

The service is for adults. Do not use it if you are under 18.

Changes

When this page changes we update the date at the top. Material changes are announced on the site.

Contact

Write to hello@insiderz.ai.