Privacy Policy

• Account details. Your username, display name, optional bio, optional unit size, sport preferences, time zone if you chose one, and a one-way hash of your password. We cannot see your password. We do not collect an email address, phone number, date of birth, or legal name.
• Age confirmation and terms. That you ticked the box saying you are 21 or older and at least the legal betting age where you live when you signed up, which version of the Terms of Service you accepted, and when.
• Content. Your posts, bets, grades, replies, reactions, follows, the accounts you block, room memberships, and any receipt images you upload, with the times they were created or edited. Only you see whom you have blocked.
• Drafts. What you type in the composer is saved as a private draft as you go. Drafts you trash are erased after 30 days.
• Automatic checks. When a post, reply, profile, or room name matches one of our content checks (see the Terms of Service), we keep which check matched and the matching words, for review.
• Reports. When you report a post, reply, or account, we keep what you reported, the reason you chose, and when. Only the people who run tailthat see reports; the person you reported is never told who reported them.
• Technical logs. Our hosting provider and our edge network record the IP address, browser, requested page, and time of each request, as every website does. We use these for security and debugging and keep them only as long as those providers’ default retention.
• Two cookies. A signed session cookie that keeps you logged in, which holds a random session ID and nothing else, and a tz cookie with your browser’s time zone, so times show in your zone. There are no analytics, advertising, or tracking cookies, and no third-party scripts other than the fonts noted below.

• To run the site: show your posts, compute your record, keep you logged in, and let rooms work.
• To keep the site safe: find abuse, spam, and attacks, and enforce the Terms of Service.
• To generate share-card images from public posts, profiles, and tags so links unfurl on other sites.
• We do not sell personal information, use it for advertising, or build profiles of you for anyone else.

• Your username, display name, bio, record, unit totals, unit size if you set one, public posts, receipts on public posts, replies, reactions, and your follower and following counts are visible to anyone, including people without an account and search engines.
• Posts in a room are visible to that room’s members. A room’s name and member list are visible to anyone with its link, and anyone with the invite link can join. Room pages are kept out of search engines.
• The people who run tailthat can read everything in the database, including room posts, for moderation and support.

• Hosting. The site and its database run on Railway, in the United States. Railway processes data on our behalf and does not use it for its own purposes.
• Edge network. Traffic passes through Cloudflare, which provides DNS, TLS, and protection from attacks and sees request logs.
• Fonts. Pages load the Inter typeface from Google Fonts, which receives your IP address and browser details when the font is requested.
• Sports data. Schedules and scores are fetched from a third-party sports data source by our server. Those requests contain nothing about you.
• Legal requests. We will disclose data if the law requires it or to protect the site and its users from harm.
• If tailthat is sold or merged, your data would move with it under this policy.

Account data and content stay until your account is deleted. A post you delete is hidden but kept, with its receipt, so a mistake can be undone; tell us if you want one erased for good. Database backups may hold deleted data for a limited time before they roll off.

• You can edit your display name, bio, unit size, and sport preferences in Settings, and delete any of your posts.
• You can delete your account yourself under Delete account in Settings, or at tailthat.com/account/delete, by entering your password. It takes effect at once and cannot be undone. It deletes the account and its profile, its posts with their bets and receipts, replies, reactions, follows, blocks, drafts, and reports it filed, and any rooms you own, including other members’ posts in them.
• If you cannot sign in, email [email protected] from any address and name your username. We will confirm it is you and delete the account the same way.
• You can ask for a copy of the data we hold about you at the same address.
• Because we do not sell or share personal information or track you across sites, there is nothing to opt out of. For the same reason, we treat every browser the same whether or not it sends a Do Not Track or Global Privacy Control signal.
• If you live in a place with specific privacy rights (California, the EU, the UK, and others), you may exercise them by email and we will not treat you differently for doing so.
• Blocking cookies in your browser will stop you from logging in but will not affect anything else.

tailthat is for adults 21 and older. We do not knowingly collect information from anyone under 21, and never from anyone under 13. If you believe a minor has an account, email us and we will delete it.

Passwords are hashed with scrypt and never stored in the clear. Connections use HTTPS. The database is on a private network with no public address. Session cookies are signed, HTTP-only, and marked secure. No system is perfectly secure, so please use a password you do not use elsewhere.

We may update this policy. The new version will appear here with a new “last updated” date, and material changes will be announced with a notice on the site, since we have no email address to reach you at.

Email [email protected].