Privacy Policy

1. Who we are

Pefiy is a simulation engine and public credibility record for financial foresight: you test market narratives against historical data and record forecasts under a public handle — no money is ever involved. Pefiy is the data controller for the personal data described here. Contact: contact@pefiy.com.

2. What we collect

• Account data. When you sign in with Google we receive your email address and name from Google's verified sign-in — we never see your password. You choose a public handle.
• Your activity. The forecasts you make (backing or doubting a narrative), the theses you test, and their timestamps.
• Abuse-prevention data. A truncated cryptographic hash of your IP address, used only to deduplicate votes and rate-limit requests. It is held transiently in server memory and is not linked to your account.
• On your device. Your session token, handle, and calls are kept in your browser's local storage so you stay signed in. We use no tracking cookies, no advertising trackers, and no third-party analytics.

3. What is public by design

Pefiy is a public credibility record. Your handle, your forecasts, their grades, and the theses you test are published and remain visible to anyone — that is the product. Your email address and name are never published and never appear in any public page or API response.

4. How we use your data, and on what legal basis

• To run the service — creating your account, recording and grading your forecasts, showing your profile (performance of our contract with you).
• To email you — grade notifications and product updates about your record (our contract with you; you can opt out of non-essential email at any time).
• To prevent abuse — vote deduplication and rate limiting via hashed IPs (our legitimate interest in keeping the record honest).

We do not sell personal data, run ads, or build advertising profiles.

5. Where your data lives and who processes it

• Our database (accounts, forecasts, theses) is hosted on Render in Frankfurt, Germany (EU).
• Google processes your sign-in under Google's own privacy policy; we receive only your verified email and name.
• Brevo (an EU email provider) processes your email address when we send grade notifications.
• The website itself is served from a global content delivery network.

6. Retention and deletion

We keep your account data while your account exists. Email contact@pefiy.com from your registered address to delete your account: we will remove your email, name, and handle, and unpublish your forecast record. Transient abuse-prevention data expires on its own.

7. Your rights

Under the GDPR you can request access to, correction of, deletion of, or a portable copy of your personal data, restrict or object to processing, and lodge a complaint with your local data-protection authority. Write to contact@pefiy.com and we will respond within 30 days.

8. Children

Pefiy is not directed at children under 16, and we do not knowingly collect their data.

9. Changes and contact

Material changes to this policy are posted on this page with a new date.