Privacy

Privacy Policy

Effective June 6, 2026

Overview

Bump Bracket is a private prediction pool for baby arrival details. The app collects only the account, bracket, invite, prediction, result, and audit data needed to run the service, keep brackets private, and calculate leaderboards.

Data We Collect

Account details such as email address, display name, and password hash.
Bracket membership and role data.
Invite codes needed to join private brackets.
Prediction and official result details entered by users.
Operational audit logs for key bracket actions.
Basic technical logs needed for security, debugging, and deployment health.

Passwords are salted and hashed before storage. Plaintext passwords are never intentionally stored.

How We Use Data

Authenticate users and keep private brackets limited to members.
Save predictions, lock official results, and calculate scores.
Show leaderboards and role-appropriate bracket controls.
Investigate errors, abuse, security issues, and support requests.
Comply with valid legal, safety, and data-rights obligations.

Sharing

Bump Bracket does not sell personal data. Data may be processed by hosting, database, email, logging, or infrastructure providers needed to operate the app. Data may also be disclosed if required by law, to protect users, or to secure the service.

Data Rights

Depending on where you live, privacy laws such as GDPR and California privacy laws may give you rights to access, correct, delete, restrict, or object to certain processing of your personal data. You may also have the right not to be discriminated against for exercising privacy rights.

Account Export And Deletion Requests

To request an account export or deletion, email [email protected] using this template:

Subject: Account Privacy Request

Per GDPR and/or California data privacy laws, I am requesting an export and/or deletion of my account and associated personal data.

Account email:
[enter your email here]

Verified requests are handled through a master-admin privacy workflow. Admins can export account, pool membership, prediction, score, result, and audit-reference data as JSON. Deletion requests are fulfilled by anonymizing account identifiers while preserving pool records needed for leaderboards, scores, and audit integrity.

Some information may be retained when required for security, legal compliance, dispute resolution, backups, or legitimate operational records.

Security And Retention

Bump Bracket uses access controls, private invite links, hashed passwords, and operational logging to protect the service. Data is kept while needed to provide the app, maintain records, resolve support issues, or comply with legal obligations. Automatic age-based retention cleanup is not active in this version; verified privacy requests are handled through the admin process above.