Privacy

What we store

• Your sealer name. Public by design: a track record with no name certifies nothing.
• Your password, hashed. We store only a scrypt derivative. We can neither read nor recover it.
• Your email address. Required when you sign up, and we also keep it if you type it while paying. It is used for four things and nothing else: sending you a receipt for a purchase, telling you the day one of your seals comes due, acknowledging a waived prediction once it publishes, and replying when you write. There is no newsletter, no product news, and nothing resembling advertising.
• What you seal. The text, its criterion and its dates. A private seal is not published, but it is in our database, unless you use in-browser encryption, in which prediction we store text unreadable to us.
• Your IP address, temporarily. We use it only to limit abusive sign-ups, and it is deleted automatically after an hour.
• A session cookie. Strictly necessary to keep you signed in. We store only its hash, so leaking it would not allow impersonating you.

Who else sees it

These are all the third parties that process data on our behalf. There are no others, and we neither sell nor share data with anyone.

• Cloudflare. Serving the site, protecting it from abuse, and delivering the email that goes out from here. IP address, request metadata, and for email, your address and the contents of the message.
• Supabase. Hosting the database. Everything the account holds: name, hashed password, seals, email.
• Dodo Payments. Charging, invoicing and settling taxes as legal seller. Email, name and billing address you enter at checkout.
• DeepSeek. Drafting the topic a prediction publishes, reviewing that it does not make the bet identifiable, and checking that the criterion is decidable. The criterion text and the source URL you provide. Not the sealed text.

You should know this explicitly: before anything is recorded, the text of your falsification criterion and the source URL are sent to DeepSeek to draft the topic that will be published, and to review that this topic does not make your bet identifiable. After recording they are sent again, to check that the criterion is decidable. The text of your prediction is NOT sent on any of those occasions. There is no way to seal without that transfer: the only public part of a closed prediction is its topic, and none is published here unreviewed. Write the criterion without personal data.

How to stop receiving email

Every due notice carries its own opt-out link, and it works without signing in. Opting out does not close your account and does not touch your seals: predictions still come due and still go on record, you just stop hearing about it. A purchase receipt cannot be switched off, because it is the document for that purchase and not a notice.

How to stop receiving email

Every due notice carries its own opt-out link, and it works without signing in. Opting out does not close your account and does not touch your seals: predictions still come due and still go on record, you just stop hearing about it. A purchase receipt cannot be switched off, because it is the document for that purchase and not a notice.

How long

Seals are kept for as long as the registry exists: they are the product, and deleting them would break proofs already issued to third parties. Attempt and rate-limit marks delete themselves in under an hour. Sessions expire and are purged. If you opt out of notices, that mark is kept indefinitely, because it is exactly what stops us writing to you again.

Your rights

You can ask us for access to your data, its correction, or its deletion. Write to soporte@cassandraregistry.com from the email associated with your account, or tell us your sealer name.

An honest limit: we can delete your account, your email and your private seals. We cannot withdraw a seal you have already revealed publicly. On revealing it, it entered an append-only registry whose integrity depends on not being rewritten, and there are third parties holding proofs issued against it. That is the price of the proof being worth something, and it's why revealing is flagged as irreversible before we charge you.

Where the data lives

The database is hosted in the United States and the site is served from Cloudflare's global network. If you write from the European Union, that means an international transfer, covered by each provider's standard contractual clauses.

Contact

For any privacy matter, including a complaint, write to soporte@cassandraregistry.com. If you are in the European Union, you can also complain to your country's data protection authority.