Privacy Policy
Effective upon public launch
1. Overview
This policy explains what personal information Factor Analytics (“we,” “us”) collects when you use our website and services (the “Service”), how we use it, who we share it with, and the choices you have. It should be read together with our Terms of Service. We do not sell your personal information, and we do not use it for advertising.
2. Information we collect
Account information. When you create an account, we collect your email address and any other details you choose to add to your profile. Accounts and sign-in are handled by our authentication provider, Clerk. We also save your plan status (such as monthly or 7-day pass, and when a pass expires) and your Stripe customer ID on your account so we can give you the access you paid for and open your billing page.
Payment information. Payments are handled by Stripe. Your card number and other payment details are entered on Stripe's pages and stored by Stripe, not by us. Stripe may share with us limited information about the purchase, such as the plan bought, amount, date, and your email and name.
Free usage and security information. To apply the daily limit on free game projections and to protect the Service from abuse, we use a random device identifier stored in a cookie, and your IP address. For each device and IP address we keep a short-lived record of which matchups were run that day. We also use your IP address to limit how often requests can be made. We do not use this information to identify you personally or to build a profile of you.
Server logs. Our hosting provider keeps standard server logs, which typically include IP address, the pages or endpoints requested, the date and time, and basic device and browser details. These are used for security, reliability, and troubleshooting.
Messages you send us. If you email us, we keep the message and your email address so we can respond.
We do not collect your precise location, and we do not knowingly collect sensitive categories of information such as health data, government ID numbers, or financial account numbers.
3. Cookies and similar technologies
We use only the cookies the Service needs to work. We do not use advertising cookies or third-party tracking cookies.
Sign-in cookies. Clerk sets cookies that keep you signed in and protect your account. These are necessary for the Service to work.
Free usage cookie. We set a cookie called fa_mid on your browser. It holds a random identifier, is not readable by scripts on the page, and lasts up to one year. It lets us count free projections per device. If you clear it, a new identifier is created, and the IP-based limit still applies.
Stripe. When you go to a Stripe checkout or billing page, Stripe may set its own cookies under its own policies.
You can block or delete cookies in your browser settings, but sign-in and the free usage limit may not work correctly without them. If we add analytics or any non-essential cookies in the future, we will update this policy and ask for your consent where the law requires it.
4. How we use information
We use the information above to create and manage your account; to provide access to the content you have paid for; to process payments and prevent fraud; to apply the free usage limit and stop abuse of the Service; to keep the Service secure, working, and improving; to answer your questions; to send you service emails, such as sign-in verification codes and receipts; and to comply with the law. We do not send marketing emails without your consent.
5. Who we share information with
We share information only with the service providers that help us run the Service, and only as needed for them to do so. Each handles data under its own privacy policy.
Clerk (clerk.com) provides account creation, sign-in, and account management. Stripe (stripe.com) processes payments and manages subscriptions and billing records. Render (render.com) hosts the website and keeps its server logs. Cloudflare (cloudflare.com) provides our domain and DNS services, and may process web traffic for the site. Upstash (upstash.com) provides the database that stores the short-lived free usage counts and rate limit counts described above.
We may also disclose information if required by law or legal process, to protect the rights, safety, or security of our users, the public, or the Service, or as part of a sale, merger, or transfer of the business, in which case we will make sure the receiving party honors this policy. We do not sell your personal information or share it for cross-context behavioral advertising.
6. How long we keep information
Account data is kept while your account is open. When you delete your account, we delete or de-identify your personal data within 30 days, except what we must keep to meet legal, tax, or accounting duties or to resolve disputes.
Payment records held by Stripe are kept by Stripe for as long as the law requires, even after your account is deleted.
Free usage and rate limit records are short-lived and are removed automatically, generally within about a day and a half. The device cookie stays on your browser for up to one year unless you delete it.
Server logs are kept for the period set by our hosting provider.
Please note that deleting your account does not cancel an active subscription. To avoid further charges, cancel your subscription from the billing page in your account before you delete it.
7. Security
We use reasonable technical and organizational measures to protect your information, including encrypted connections and relying on established providers for sign-in and payments. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
8. Your choices and rights
You can ask us to tell you what personal information we hold about you, to correct it, or to delete it. You can update your email and profile in your account settings, and you can delete your account from there or by emailing factoranalyticsapp@gmail.com. We may need to verify your identity before acting on a request, and we will respond within 45 days. You can also unsubscribe from any non-essential email we send, and you can manage cookies in your browser.
We do not track you across other websites, so we do not respond to “Do Not Track” browser signals.
9. US state privacy rights
Residents of California and some other US states have additional rights under state privacy laws, which may include the right to know what personal information we collect and how it is used, to access and delete it, to correct it, to opt out of the sale or sharing of personal information for targeted advertising, and to not be treated unfairly for using these rights. We do not sell personal information or share it for targeted advertising. To make a request, email factoranalyticsapp@gmail.com. If we decline a request, you may ask us to reconsider by replying to our response.
10. Children
The Service is for people who are at least 18 years old and is not directed at children. We do not knowingly collect personal information from anyone under 18. If we learn that we have, we will delete it. If you believe a child has given us information, email factoranalyticsapp@gmail.com.
11. Where information is processed
Factor Analytics is operated from the United States. Our service providers may process your information in the United States and in other countries where they operate.
12. Changes to this policy
We may update this policy from time to time. When we do, we will update the effective date at the top of this page, and for material changes we will give notice by email or on the Service. Continued use of the Service after changes take effect means you accept the updated policy.
13. Contact
Privacy questions or requests? Email us at factoranalyticsapp@gmail.com.