Contact
For privacy requests, data access, deletion, delivery, or account questions, contact erenshin.dev@gmail.com.
Current Data Use
The product stores operational service data such as race records, pipeline runs, source checks, audit reports, and derived analysis. If you subscribe, it also stores your email address, language preference, consent and confirmation timestamps, subscription status, race-scoped report links, unsubscribe state, and limited delivery/open metadata needed to send and protect Monday debriefs.
Purpose and Legal Basis
Email delivery is based on your consent, confirmed through double opt-in. Security, abuse prevention, delivery integrity, and minimal service analytics are processed for legitimate operational interests. You can withdraw consent at any time without affecting processing that occurred before withdrawal.
Processors
Supabase hosts subscriber and operational records, Resend or the configured mail provider sends email, Vercel hosts the web application and aggregate web analytics, Cloudflare and GitHub run the operational scheduler, and OpenAI processes race evidence and editorial instructions without receiving subscriber addresses or private report tokens. Lemon Squeezy may process checkout and subscription events only when paid access is enabled. These providers process data under their own contractual and security terms.
Tifosi Pulse Status
Public pages, including the homepage and a matching GP report, may request a public room status from tifosipulse.com when that companion service is available. The request sends ordinary network metadata such as IP address, browser information, and request time to that service, but Tifosi Debrief does not include your email address, private report token, or subscriber identifier in the request. The public status is used only to show or hide the live Emotion bridge, an optional evidence-backed Court link, or the aggregate Final Pulse and next-flag return.
No Active Payment Processing
No checkout is currently active on the site, and Tifosi Debrief does not currently collect payment details for report access. If a paid product is introduced later, payment processing and billing metadata rules will be published before payment is accepted.
Email Reports
Subscriber emails are used for post-race Tifosi Debrief reports and service operations. Monday debrief links are race-scoped, may expire or be revoked, and should not be shared publicly.
Retention and Deletion
Active subscriber records are kept while you remain subscribed. Unconfirmed signup records receive no more than one automatic reminder and are deleted after 30 days if confirmation is not completed. Unsubscribed addresses and delivery records are retained only as long as needed to honor suppression, investigate delivery or security issues, and meet applicable legal obligations. Confirmation tokens are replaced or removed after use. Confirmation delivery and bounce states are retained for delivery integrity. After newsletter consent, a first-party HttpOnly cookie named td_funnel_v1 may keep a pseudonymous signup-to-reading correlation for up to 180 days. It contains no email address, private report token, or raw campaign parameter.
Your Rights
If EU or Italian data-protection law applies, you may request access, correction, deletion, restriction, portability, or objection, and may withdraw consent. You may also complain to your local supervisory authority, including the Italian Garante where applicable. Contact erenshin.dev@gmail.com to exercise these rights.
Future Community Features
If accounts, comments, votes, or community tools are added, user profile data and content will be stored only for those features and surfaced with clear product controls.
Secrets and Operations
Server credentials, Supabase secret keys, and OpenAI keys must stay server-side. Public browser code should only receive publishable keys and already-approved public data.