Privacy policy

What Delta Deck is

Delta Deck is free to use and there are no payments in the app. Delta Deck is run by an individual in India. For anything about your data, write to hello@deltadeck.club.

What we collect, and why

• Signing in. If you use Google, we receive your name, email address and profile picture from your Google account. If you use an email link, we receive your email address. We use these to sign you in and to show your profile. We never receive your Google password.
• What you create. Δ Sprint sessions and their answers, bets and scoreboard numbers; Δ GTM playlists; company suggestions; feedback; and anything you submit to Δ Ship or the community sections. We use it only to run the product for you.
• The physical deck box. If you apply for one, the details you give us: company, role, city, pincode and how you plan to use it.
• Usage analytics. We use PostHog to see which pages and features get used: page views, the events we track by name (for example when a session is started or completed), and PostHog's default automatic capture of clicks. When you are logged in, this is tied to your account. We use it to see what works.
• Email. We use Resend to send the sign-in and recap emails you ask for.

What we do not do

• We do not sell your data.
• We do not use your session answers to train AI models.
• We do not show your sessions to other users.

Who can see what

• Your sessions are private to you. The database only lets the signed-in owner read a session, its answers and its items (row-level security). The admin accounts in the app cannot read session answers through the app. The person who runs the service has technical access to the database, as any host does; we do not browse sessions.
• Session recap links. Sharing is not switched on by you: every session gets a long, random recap link when it is created. That link shows nothing until you finish the session. Once a session is finished, anyone who has the link can open a read-only recap of it: the team name, number of people, facilitator name, your five numbers, your answers, bets, scoreboard and the other things the team wrote. The link is not listed anywhere, not indexed by search engines, and is shown only to you (on the recap page and in the recap email). We never publish it. Treat it like a private link: if you pass it on, whoever has it can read the recap. There is no button to turn a link off yet; email hello@deltadeck.club and we will disable it.
• Playlists. A playlist is private until you mark it public; a public playlist can be opened by anyone who has its link.
• Community content. Playlists, tactics, company suggestions and Δ Ship profiles become public only after you submit them and an admin approves them.

How it is protected

All traffic uses HTTPS. Your data is stored with Supabase, which encrypts it at rest, and the site is hosted on Vercel. Every table has row-level security, and your private data (sessions, answers, drafts and your profile) can be read and changed only by you. We do not claim more than that: no system is perfectly secure, and your data is not end-to-end encrypted.

Service providers

We use these providers to run Delta Deck. They handle data on our behalf, under their own terms and policies:

• Supabase: database, sign-in and file storage
• Vercel: hosting
• Google: sign-in with Google
• PostHog: analytics
• Resend: email
• Substack: the newsletter sign-up box, which is governed by Substack's own policy

Cookies and local storage

• Necessary. Supabase sets sign-in cookies so you stay logged in. The site does not work without them.
• Analytics. PostHog stores an identifier in your browser, in a cookie and in local storage, to tell visits apart. For visitors who are not logged in, it records events without creating a person profile; when you log in, your events are linked to your account.
• There is no cookie banner and no opt-out switch on the site yet. You can stop analytics by blocking it in your browser or with a tracking blocker.

Keeping and deleting your data

We keep your data while your account exists. To delete your account and your data, email hello@deltadeck.club. We act within 30 days.

Your rights

Under India's Digital Personal Data Protection Act, 2023, you can ask to access your data, correct it, or erase it, and you can make a complaint. Write to hello@deltadeck.club; that address is also our grievance contact.

Children

Delta Deck is not intended for anyone under 18.

Google user data

Delta Deck's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google only for sign-in, and only for your name, email address and profile picture.

Changes

When we change this policy we update this page and the date at the top. See also our terms and contact page.