Privacy Policy

Last updated: July 11, 2026

This policy describes what If You Ain't First (ifyouaintfirst.com) collects and how it is used. In summary: we collect what the product needs to work, we don't run ads, we don't sell your data, and we don't track you across other sites.

1. What We Collect

Account data: your email address, a display name if you set one, and your password (stored hashed by our auth provider — we never see it). Content you create: boards, entries, scores, and settings. Billing data: if you buy something, Stripe processes the payment and tells us what you bought and whether it succeeded — card numbers never touch our servers. Newsletter: if you sign up for our email newsletter, we store the email address you provide for that purpose. Operational logs: standard server logs (timestamps, IP addresses, errors) kept for debugging and abuse prevention.

2. What We Do With It

We use your data to run the service: showing standings to board members, generating AI commentary about board activity, sending transactional email (confirmation links, receipts), and processing payments. If you subscribed to the newsletter, we use that email address to send it — every issue includes an unsubscribe link, and unsubscribing stops the newsletter without affecting transactional email like receipts. That's it. No advertising profiles, no data brokers.

3. Service Providers

We rely on a small set of service providers, each receiving only the data required to perform its function:

• Supabase — hosts our database and authentication (your email and hashed password live here).
• Vercel — hosts the application itself.
• Stripe — handles all payments. Your card details go directly to Stripe, never to us.
• Resend — delivers transactional email (like signup confirmations) and, if you subscribed, the newsletter. Newsletter subscriber addresses are stored with Resend to manage delivery and unsubscribes.
• Anthropic— board content (names, entries, scores, recent activity) is sent to Anthropic's API to generate the AI commentary. It's used to produce the response, not to build a profile of you.

We don't sell or rent your personal data to anyone.

4. Cookies

We use cookies for exactly two things: keeping you signed in (auth session) and remembering your light/dark theme choice. No third-party advertising or cross-site tracking cookies.

5. Data Retention & Deletion

We keep your data while your account is active. To delete your account and personal data, email hi@ifyouaintfirst.comfrom your account email address. Billing records are retained as required by tax and accounting law, and your scores on other people's boards may persist in anonymized form. Newsletter subscribers can unsubscribe at any time via the link in any issue, or by emailing us.

6. Security

Data is encrypted in transit, passwords are hashed, database access is locked down with row-level security, and payments are handled by Stripe's PCI-compliant infrastructure. No system is perfectly secure; if we learn of a breach affecting your data, we will notify you.

7. Children

The service is not directed at children under 13, and you must be 13 or older to have an account. If we learn we've collected data from a child under 13, we'll delete it.

8. Changes

If this policy changes materially, we'll update the date at the top and make the change visible in the product. Continuing to use the service after a change means you accept it.

9. Contact

Privacy questions or requests: hi@ifyouaintfirst.com. See also the Terms of Service.