Your Data

1. What we hold about you

If you have an account: your email address, username and display name, a hash of your password, whether your email is verified, and when you registered.

Plus everything you have created: predictions and signals you logged, markets you watch, wallet addresses you imported or looked up, alert rules you set, contest entries, and any comments you posted.

We hold no payment data, no identity documents, and no advertising or analytics profile. The full picture is in the Privacy Policy.

2. Your rights under the GDPR

• Access — know what we hold and get a copy.
• Portability — receive it in a structured, machine-readable format.
• Rectification — correct anything inaccurate.
• Erasure — have it deleted.
• Restriction and objection — limit or object to certain processing.

Exercising any of these is free, and we will never make it a condition of anything.

3. Exporting your data

From your account settings you can download a single JSON file containing everything we hold about you: your profile, your predictions and signals, your watchlists, your imported wallets and their positions, your alert rules, and your contest entries.

It does not include your password hash, which we exclude deliberately — exporting a credential hash would create a risk without giving you anything useful.

This covers both your right of access (Art. 15) and your right to data portability (Art. 20).

4. Deleting your account

Also from your account settings. You confirm with your password, and the deletion happens immediately — there is no grace period, no retention window, and no email asking you to reconsider.

This is irreversible. Export first if you want a copy.

5. What survives deletion

Deleting your account removes your identity from Balauron: your email, username, display name and credentials are gone, and nothing that remains can be linked back to you.

The statistical record of resolved calls is retained in anonymised form. Your predictions and signals stay in the dataset with the link to you severed — they no longer carry your name, your email, or any identifier tying them to a person.

We do this because those resolved calls are what the market-wide accuracy statistics are computed from, and letting anyone erase their losing calls retroactively would corrupt the numbers for everyone else. Article 17(3)(d) of the GDPR contemplates exactly this: retention for statistical purposes, where the data can no longer identify you. If you would prefer the anonymised records removed as well, ask us and we will discuss it.

6. Complaints

If we get this wrong, tell us: [email protected].

You also have the right to complain directly to the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) at dataprotection.ro, or to the data protection authority in your own EU country of residence.