Operator and current availability
Foretrace is currently an invited research beta. Commercial operator identification and a business correspondence address are pending; public signup and unrestricted purchasing remain closed. You can contact the operator through Support.
Information we process
For accounts we process email address, account identifier and authentication information through Supabase Auth. For the service we store membership/credit balances, saved markets, report access, research requests and usage. Payment records include order and provider references, chosen currency/network, price, status and verification events. Support stores the contact email and text you submit. Do not include private keys, seed phrases, passwords, API keys or unnecessary sensitive personal information.
Why we process it
We use account and membership information to perform the requested service; payment and necessary accounting records to meet legal obligations; and limited security information for legitimate interests in preventing abuse and maintaining reliability. Support information is used to handle your request. We do not sell your personal information or use it for advertising profiles.
Providers and AI
Supabase provides account, membership and research data storage and authentication; the VPS host provides application hosting and stores support conversations in a private database. Plisio handles crypto checkout. DeepSeek receives market questions, settlement rules and selected public evidence for report generation. We do not intentionally send your account email, password, payment records or support conversations to DeepSeek. Source publishers receive ordinary server-side requests for public material. Payment providers may collect additional information under their own privacy notices.
Cookies and local preferences
Authentication uses Secure, HTTP-only session cookies in production. Local browser storage is used for preferences such as light/dark appearance and local saved-market behaviour where applicable. We do not currently deploy advertising cookies or third-party analytics trackers. Necessary session storage cannot be disabled while remaining signed in.
Security and logs
Private account, payment and support data are access-controlled on the server. Operational logs may include IP addresses, URL paths, status codes and timing; request bodies and URL query strings are omitted from the Nginx access log. Application journal retention is capped at 14 days and 100 MB. Rate-limit keys use keyed hashes rather than retaining raw addresses in the rate-limit table. Provider secrets are not delivered to browsers.
Retention and deletion requests
Account and service records are retained while needed to provide the service, resolve disputes and protect the financial and prediction audit trail. Support records are reviewed for deletion after closure, normally within 12 months unless a dispute or legal requirement justifies longer retention. Financial records may need longer statutory retention. Ask through Support for access, correction, export or deletion; requests are handled manually after identity verification. Deletion is not yet a self-service button. We will explain any records that must be retained and minimise their personal information.
Backups and international processing
Encrypted recovery copies may include account, support and payment data. Deletion must also be respected when restoring a backup; copies expire under the documented backup retention policy. Vendors may process information outside the UK. Provider contracts, locations and any required international-transfer safeguards must be reviewed before unrestricted public launch; this beta notice does not claim that review is complete.
Your rights and contacting us
Depending on applicable law, you may request access, correction, deletion, restriction, portability or object to certain processing. Use Support and choose Privacy. We normally respond to applicable UK data-rights requests within one month, subject to lawful extensions. You may complain to the UK Information Commissioner’s Office at ico.org.uk. We do not knowingly provide accounts to children under 18.