Privacy policy

1. The short version

We collect only what we need to run Ledger and to keep your account and your record. We do not sell your information, and Ledger does not show ads. We do advertise Ledger on Google, so the site loads one Google Ads measurement tag; section 5 explains exactly what it does and what it sees.

2. Information you give us

Ledger is deliberately low-friction: you do not create a password, and an account never asks for an email address, phone number, or any other contact detail. When you start an account you choose only a display name. Ledger then issues two private values: a device session token (stored in your browser so you stay signed in) and a short recovery code you can use to restore your account on another device. Keep the recovery code private: anyone who has it can access your account.

You can also play entirely as a guest, in which case your progress never leaves your device and is not sent to us at all.

If you write to us through the support form, it asks for your name and an email address so we can reply. Netlify Forms stores that message, with the email address in it.

3. Information created as you play

As you use Ledger, the Service records your gameplay: the predictions (picks) you make, your Float and Standing balances, your tier and streaks, and related activity within Ledger. Together, this makes up your personal record.

4. Information collected automatically

Like most websites, Ledger’s hosting and infrastructure providers automatically receive certain technical information when you visit, such as your IP address, browser type, device information, and the dates and times you access the Service. This is used to operate and secure Ledger. Our hosting provider also derives an approximate timezone from this connection, which Ledger uses only to choose a time-of-day greeting on the home page; this is done as your request reaches the network and is never stored.

5. Browser storage

Ledger uses your web browser’s local storage to keep you signed in between visits and to remember that you have confirmed you are 18 or older. Ledger sets one small first-party cookie to recognise a returning visit and tailor the home page greeting; it holds no personal information.

The site also loads gtag.js, Google’s tag for Google Ads, because we advertise Ledger on Google. It answers one question for us: did a Google ad bring this visitor? Google uses it for conversion measurement and for Google Ads remarketing, and it sets Google cookies in your browser. Google receives standard request data, such as your IP address, browser and device information, and the address of the page you visited. It never receives your gameplay or account data: no picks, no balances, no messages to Scout, no display name, and no recovery code. Nothing you do inside the app is sent. You can read how Google uses this data at policies.google.com/technologies/ads. Five pages load no Google tag at all: our support page, our responsible play page, and our guides to quitting betting apps, to apps that replace sports betting, and to keeping the Sunday. If you reach one of them from another page of Ledger, it loads as a fresh page, so a tag that was running before does not come with you. Nothing you send through the support form is reported to Google.

6. How we use information

We use the information described above to create and maintain your account; to operate Ledger and keep your record; to keep the Service secure and prevent abuse; to fix problems and improve Ledger; and to send you important messages about your account or the Service.

7. How information is shared

We do not sell your personal information, and we never share your account or gameplay data for advertising. We use a small number of trusted service providers to operate Ledger, who process information on our behalf:

• Netlify hosts the Ledger website and runs the serverless functions and managed Postgres database that store your account and gameplay data.
• Anthropic runs the AI models behind Scout, the in-app companion, and a few other features. To write a reply, Scout sends Anthropic more than the message you just typed. Depending on what you ask, a request can carry:
  • Account and balances: your display name, tier, level, Float, Standing, current win or loss run, best run, badge count, and how many cool-offs you have taken.
  • Calls and positions: the markets on the board, your open calls, graded calls you ask Scout to review, your hit rate and strongest categories, the categories you play most, what you recently searched the board for, the cards and Case file on your desk, your open Exchange positions and standing orders, and the legs of a slip you ask Scout to check. When you ask the Exchange to explain a ticket, it sends the order type, the side, the size as a share of your Float, the spread, the fee, whether the order book is live, and the RSI on your chart; the weekly Exchange summary sends its one suggestion for next week.
  • Notes you wrote: the note you wrote when you opened an Exchange position, the reason you wrote for a call, a line you write for Scout to price, and the thesis on a call you ask Scout to argue against.
  • Limits and wellbeing state: what is left of a session budget you set, whether a cool-off is available today, the age of your Float, the Shadow Line figure, the Sentinel's read of your session (calm, caution or rest) with its reasons, and, for your weekly look back, that week's calls, hit rate and cool-off days.
  • Recent conversation: up to your last 16 messages with Scout, and the short notes about earlier topics that Scout keeps on your device.
  Scout does not send your recovery code or your email address.
• Google receives standard request data through the Google Ads tag described in section 5. We use it only to measure whether a Google ad brought a visitor and for Google Ads remarketing. It never receives your gameplay or account data.

We may also disclose information if required to do so by law, or to protect the rights, safety, or property of Ledger, our users, or others.

8. Data retention

We keep your account and gameplay information for as long as your account is active. When you delete your account from within Ledger, your account record is removed from our database, except where we are required to keep certain records to comply with the law.

9. Your choices and rights

You stay in control of your record. From the Account section of Ledger you can update your display name at any time, Download my data to save a complete copy of everything Ledger holds about you as a file on your device, and Delete my account to permanently erase your account and game record from our database and clear it from this device. Depending on where you live, you may have additional rights over your personal information; contact us and we will do our best to honor them.

10. Children

Ledger is intended only for adults aged 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with information, please contact us and we will delete it.

11. Security

We use reputable service providers and reasonable measures to protect your information. Your account is secured by a private session token and recovery code rather than a password, and traffic to Ledger is encrypted in transit. However, no method of storage or transmission over the internet is completely secure, and we cannot guarantee absolute security.

12. Changes to this Policy

We may update this Privacy Policy from time to time. When we do, we will note the date of the update above. If the changes are significant, we will make a reasonable effort to let you know.

13. Contact

Questions about your privacy or this Policy? Reach us at hello@martori.studio.