Privacy Policy

# Privacy Policy

**Version:** 1.0.0
**Effective Date:** May 17, 2026

> This is placeholder Privacy Policy content for development. Production content will be loaded from Termly before public launch.

---

## 1. Information We Collect

- **Account:** Email, display name, optional avatar URL.
- **Usage:** Pick submissions, league activity, in-app interactions.
- **Technical:** IP address (rate limiting), user agent, session cookies.

We do not collect payment card information or sensitive financial data in Phase 1.

## 2. Service Processors

- **Supabase** — database, auth, infrastructure.
- **Vercel** — application hosting.
- **Resend** — transactional email (from no-reply@cover.app).
- **Anthropic** — AI-drafted weekly recap (commissioner-reviewed).

Full processor list at /processors.

## 3. Cookies

Strictly necessary session cookies only. Analytics gated behind consent banner.

## 4. Your Rights

Access, correct, export, or delete your personal data via account settings or by contacting us. We respond within 30 days.

## 5. Data Retention

Account data retained while account is active. Deletion: soft-deleted, purged after 30 days.

## 6. Contact

no-reply@cover.app.