Contact
For privacy requests, data access, deletion, delivery, or account questions, contact erenshin.dev@gmail.com.
Current Data Use
The product stores operational service data such as race records, pipeline runs, source checks, audit reports, and derived analysis. If you subscribe, it also stores your email address, language preference, consent and confirmation timestamps, subscription status, race-scoped report links, unsubscribe state, and limited delivery/open metadata needed to send and protect Monday debriefs.
Purpose and Legal Basis
Email delivery is based on your consent, confirmed through double opt-in. Security, abuse prevention, delivery integrity, and minimal service analytics are processed for legitimate operational interests. You can withdraw consent at any time without affecting processing that occurred before withdrawal.
Processors
Supabase hosts subscriber and operational records, Resend or the configured mail provider sends email, Vercel hosts the web application and aggregate web analytics, and Lemon Squeezy may process checkout and subscription events only when paid access is enabled. These providers process data under their own contractual and security terms.
No Active Payment Processing
No checkout is currently active on the site, and Tifosi Debrief does not currently collect payment details for report access. If a paid product is introduced later, payment processing and billing metadata rules will be published before payment is accepted.
Email Reports
Subscriber emails are used for post-race Tifosi Debrief reports and service operations. Monday debrief links are race-scoped, may expire or be revoked, and should not be shared publicly.
Retention and Deletion
Active subscriber records are kept while you remain subscribed. Unsubscribed addresses and delivery records are retained only as long as needed to honor suppression, investigate delivery or security issues, and meet applicable legal obligations. Confirmation tokens are replaced or removed after use. Product analytics use a pseudonymous identifier and do not store the private report token.
Your Rights
If EU or Italian data-protection law applies, you may request access, correction, deletion, restriction, portability, or objection, and may withdraw consent. You may also complain to your local supervisory authority, including the Italian Garante where applicable. Contact erenshin.dev@gmail.com to exercise these rights.
Future Community Features
If accounts, comments, votes, or community tools are added, user profile data and content will be stored only for those features and surfaced with clear product controls.
Secrets and Operations
Server credentials, Supabase secret keys, and OpenAI keys must stay server-side. Public browser code should only receive publishable keys and already-approved public data.