Privacy Policy — DRAFT

Effective: 30 August 2026 · Last updated: 30 August 2026

1. Who is responsible

Chandan, Hassan, Karnataka, India, is the data fiduciary for personal data processed through moneyvsmany.com.

Contact / Grievance Officer: Chandan — [email protected].

2. Our posture, stated plainly

We collect as little as we can. We never store your password, and we never store an access token from the service you sign in with — we read your basic profile once during sign-in and discard the token immediately. We do not sell personal data. We do not run advertising trackers.

Much of what you do here is public by design, and that is the point of the product. This policy is explicit about which parts.

3. What we collect

When you sign in (Google, GitHub, or another provider you choose): a provider account identifier, your display name or handle, your avatar image URL, and your email address where the provider supplies one. Some providers do not supply an email at all; that is fine, and we do not ask you for one.

When you take part: the fights you pulled for, which side, the votes you cast, and the taps you contributed. Each of these is stored with a timestamp.

When you list a product: the destination address, the product name, your short description and statement, the industry tag, your declared amount, and proof that you control the destination.

When you pay: our payment provider handles your card. We never see or store card details. We keep a payment reference, an amount, and a date.

Automatically: a session cookie, and technical data such as IP address, user agent and referrer, used to keep the service running and to detect abuse. IP addresses are stored hashed for abuse detection, not in the clear.

Abuse signals: device and behaviour signals used to tell a person from a script. These are private, referee-only, and never published.

4. Why we use it

To provide the service — signing you in, keeping your session, recording your pull or vote, showing the board, taking payment for placement.
To keep the board honest — enforcing one human, one pull; detecting automation and account farms; investigating challenges to a result. This is our legitimate interest, and the fairness of every fight depends on it.
To keep a public record — the ledger, walls, and monuments described below.
To meet legal obligations — tax, accounting and complaint records.

5. What is public, and for how long

This is the section to read carefully.

Public permanently:

Your handle on the wall of any side you pulled for, if that side wins. Monuments are permanent by design — that is what winning means here.
Your votes: the handle, the product voted for, and the time.
Every listing, its declared amount, its description, and its outcomes.
The ledger: an append-only record of pulls, votes, listings, challenges, results and rulings.

Public but neutral: payment-related events appear only as a neutral status. Decline codes, dispute details and card information are never published.

Never public: your email address, hashed IP addresses, device and abuse signals, and any private note attached to a ruling.

If a side loses, its wall is replaced by a marker; the record remains accessible in the archive. Nothing anyone paid for is deleted.

6. Who we share with

Our payment provider, who is the merchant of record for your purchase and handles card data under its own privacy policy.
Our hosting and infrastructure provider, to run the site.
The provider you sign in with, to the extent that signing in tells them you did.
Authorities or advisers, where legally required or to defend a legal claim.

Some of these operate outside India. We rely on their contractual safeguards. We do not sell your data and we do not share it for advertising.

7. Deleting your account

You may ask us to delete your account at any time by writing to [email protected].

What happens: your handle, avatar and email are removed, and every place your handle appeared becomes "[withdrawn]". Your account can no longer be signed into.

What does not happen: the historical record is not rewritten. Counts stay accurate, monuments stay intact, fights that happened stay recorded, and the ledger's integrity remains verifiable. This is possible because the permanent record only ever refers to an internal identifier, never to your handle — so removing your handle removes you without falsifying history.

We think this is the honest balance between your right to disappear and everyone else's right to a record that was not quietly edited. If you disagree, please do not participate before deciding.

8. Your other rights

You may ask us to give you a copy of your data, correct it, or restrict or object to certain processing; you may withdraw consent where we relied on it; and you may complain to the relevant authority, including in India.

Write to [email protected]. We acknowledge within 24 hours and respond within 15 days. We may need enough information to identify your records.

9. How long we keep things

Sessions: until they expire or you sign out.
Abuse signals and hashed IPs: only as long as useful for abuse prevention, then deleted.
Payment references: as long as tax and accounting law requires.
Public records (ledger, walls, monuments, results): permanently, subject to §7.

10. Cookies

One strictly necessary cookie keeps you signed in. Your browser may store a theme preference locally. We use no advertising or cross-site tracking cookies.

11. Children

The service is for adults. We do not knowingly collect data from anyone under 18. If you believe a minor has used the service, contact us and we will delete what we can identify.

12. Security

Access is restricted, administrative tools sit behind separate authentication from the public site, and we store the minimum that makes the product work. No system is perfectly secure; if a breach affects you, we will notify you and the authority as required.

13. Changes

We may update this policy. Material changes are posted here with a new date, and where the law requires it, we will tell you directly.