Privacy Policy

1. Introduction

This Privacy Policy describes how Polyanna, operated by MissingLayer B.V., collects, uses, stores, and protects your information. Polyanna is a data analytics platform that aggregates publicly available trading data from Polymarket, a prediction market on the Polygon blockchain. By using Polyanna, you agree to this Privacy Policy.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Your email address (provided directly or via Google OAuth)
• Your authentication provider information (email/password or Google)
• Your account access metadata (currently free-access only)
• Account creation timestamp

We do not store passwords directly — authentication is handled securely by Supabase, our authentication provider.

2.2 Google OAuth Data

When you sign in with Google, we receive basic profile information through the OAuth consent flow:

• Your email address
• Your display name (if provided by Google)
• Your profile picture URL (if provided by Google)

We do NOT request access to your Google Drive, Gmail, Calendar, contacts, or any other Google services. We only use the minimum information needed to create and authenticate your account.

2.3 Product Usage Analytics

We collect limited first-party product analytics and application telemetry about how Polyanna is used so we can understand feature adoption, diagnose errors, and improve site performance.

• Pages and route templates viewed on Polyanna
• Feature interaction events such as search result selections, profile views, leaderboard clicks, auth-gate unlocks, chat actions, and API key actions
• For signed-in users, account-linked usage analytics such as page engagement time while the tab is active, selected trader/profile addresses, leaderboard interactions, and API usage metadata
• Session-level application telemetry and browser performance signals
• Client-side error and reliability information

This telemetry is limited to activity within Polyanna. We do not use it for advertising, cross-site tracking, or third-party profiling. We also do not include passwords, authentication tokens, raw API keys, chat message content, or raw search text in these analytics events. Registered email addresses are joined to account analytics internally for admin support and product operations; we do not send email addresses from your browser in analytics payloads.

2.4 Chat Messages

If you use the in-app chat feature to contact our team, we store your messages along with your email address for the purpose of providing customer support. Chat history is permanently deleted when you delete your account.

2.5 Blockchain Data

Polyanna aggregates publicly available on-chain data from the Polygon blockchain. Wallet addresses, trade history, positions, and all trading metrics displayed on this platform are derived from publicly broadcast blockchain transactions. This data is already publicly available and is not considered personal information.

2.6 What We Do NOT Collect

We explicitly do NOT collect or store:

• Your password (handled by Supabase)
• Payment information or credit card details
• Real-world identities associated with wallet addresses
• Private keys or wallet credentials
• Location data or device fingerprints
• Cross-site browsing history or third-party tracking data

3. How We Use Your Information

The information we collect is used solely for:

• Creating and authenticating your Polyanna account
• Providing access to authenticated product features
• Displaying your email in account settings
• Understanding feature usage and improving product performance
• Providing customer support via in-app chat
• Sending account-related communications (password reset, account changes)
• Sending administrative notifications to our team when users request support

We do NOT use your information for advertising, marketing, profiling, or any purpose unrelated to providing the Polyanna service.

4. Sharing and Disclosure

We do NOT sell, rent, trade, or share your personal information with third parties. Your data is:

• Never sold to advertisers, data brokers, or any third parties
• Never used for advertising or marketing purposes
• Never shared with external services, partners, or affiliates beyond what is necessary to operate the platform

The only exception is if we are legally required to disclose data by law enforcement or regulatory authorities pursuant to valid legal process.

5. Cookies and Session Management

We use essential cookies for authentication session management only. These cookies:

• Store your encrypted authentication session token
• Are required for the platform to function
• Are HTTP-only and secure (cannot be accessed by JavaScript)
• Are cleared when you sign out

We do NOT use advertising cookies, cross-site tracking cookies, or third-party analytics cookies. Product analytics and session telemetry for Polyanna are collected through first-party application instrumentation rather than advertising or cross-site tracking cookies.

6. Data Storage and Security

6.1 Where Data Is Stored

Account data (email, tier, chat messages, signed-in user analytics, and API key metadata) is stored in Supabase, which runs on cloud infrastructure. Authentication tokens are managed by Supabase's security infrastructure. Aggregate browser observability data is stored in Grafana Cloud. Blockchain analytics data is stored on our own servers.

6.2 Security Measures

We implement the following security measures:

• All traffic is encrypted via HTTPS/TLS
• Authentication tokens are encrypted at rest
• Row-level security (RLS) ensures users can only access their own data
• Cloudflare provides DDoS protection and web application firewall
• API keys and secrets are stored as encrypted environment variables

7. Data Retention

Account data is retained for as long as your account exists. When you delete your account:

• Your profile and account information are permanently deleted
• Your chat messages are permanently deleted
• Your authentication tokens are revoked and deleted
• This action is irreversible

Publicly available blockchain data displayed on the platform is not affected by account deletion, as it is sourced from the public blockchain and is not associated with user accounts.

8. Third-Party Services

We use the following third-party services to operate Polyanna. Each has its own privacy policy:

• Supabase — Authentication, user database, and real-time services
• Google OAuth — Optional sign-in authentication provider
• Cloudflare — DNS, CDN, DDoS protection, and SSL certificates
• Grafana Cloud — Application observability, browser telemetry, and product usage analytics dashboards
• Resend — Transactional email delivery for admin notifications

We are not responsible for the privacy practices of these third-party services. We encourage you to review their respective privacy policies.

9. Your Rights

Under applicable data protection laws (including GDPR), you have the right to:

• Access — Request a copy of the personal data we hold about you
• Rectification — Request correction of inaccurate personal data
• Erasure — Delete your account and all associated personal data at any time from the Account settings page
• Portability — Request your personal data in a structured, machine-readable format
• Revoke consent — Revoke Google OAuth access from your Google Account permissions page

To exercise any of these rights, contact us at the email address below.

10. Children's Privacy

Polyanna is not intended for children under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes by updating the "Last updated" date at the top of this page. Continued use of Polyanna after changes constitutes acceptance of the updated policy.

12. Contact

If you have questions about this Privacy Policy or how we handle your data, contact us at [email protected].

MissingLayer B.V.
The Netherlands