AIValuate

Data Disclosures

The short version of what AIValuate stores, in plain language. This is a summary, not an exhaustive inventory — the full detail lives in our Privacy Policy and Terms of Service.

Your account

  • Your email address and a user ID, so you can sign in
  • How you sign in: Discord, Google, or an email magic link — with the matching provider ID (for example your Discord user ID) and the display name and avatar that provider shares with us
  • Your role on the product (admin or regular user)
  • If you subscribe: your billing record — your Stripe customer, subscription, and price IDs, your plan, and your subscription status
  • Whether you have completed age verification and accepted the responsible-gaming rules, and when
  • Your account standing, including any ban, its reason, and when it ends
  • If you sign in with Google or Discord, the sign-in tokens that provider issued are stored encrypted
  • Picks you save and bets you log are tied to your account: sport, market, pick, odds, stake, the result you recorded, and any notes

Your session

  • One sign-in cookie keeps you signed in: __Secure-aivaluate.session_token in production (__Secure-aivaluate_dev.session_token in development). It holds a random session identifier — deleting it signs you out, and nothing else on your device depends on it
  • When you sign in with Google or Discord, a short-lived state cookie protects the sign-in handshake and disappears within minutes
  • On our servers, each sign-in stores when you signed in plus the IP address and browser you used
  • These are the only cookies we set, and all of them are first-party: set by us, read by us. There are no advertising cookies and no third-party tracking cookies — that is why we don't show a cookie-consent banner. (The analytics cookie below only exists when analytics is on, and analytics stays fully off until our operators enable it.)
  • Separately, while a sign-in with Google or Discord is in flight we leave a one-time marker (aivaluate.auth.result) in your browser's session storage so the home page can tell you whether the sign-in worked; the home page clears it as soon as it reads it, and session storage is emptied when you close the tab

Your preferences

  • We store no preference files or settings on your device: there is no theme toggle (the theme is dark by design) and nothing you choose in the app is saved there. Everything we do put on your device is described under Your session — the sign-in cookie, the short-lived handshake cookie, and the one-time sign-in marker — plus, when analytics is on, the storage described under Analytics

Analytics

  • Page views and feature usage, collected via PostHog
  • We host PostHog ourselves: this data never leaves our infrastructure
  • Session recording and automatic click capture are off
  • It is never used to train models, never sold, never shared
  • When analytics is on, a device ID in local storage (plus a matching first-party analytics cookie) tells visits apart. Until you sign in that ID is anonymous; once you are signed in we link it to your account, and your role (admin or regular user) is attached to those events
  • Analytics stays fully off until our operators switch it on

What we don't have

  • No advertising or tracking pixels
  • No profiling and no model training on your data
  • No sale of personal information, ever

Contact

Questions or deletion requests: admin@aivaluate.tech

← Back to home