Privacy notice

1. Who is responsible

IsFoul is currently an independent digital project operated from Peru and is not incorporated as a separate legal entity. In this notice, “IsFoul”, “we”, and “us” refer to the operator of the IsFoul service.

The public contact channel for data-protection and legal requests is the address shown at the end of this notice.

2. Data we process

• Account data: email address, encrypted authentication credentials, confirmation and recovery status.
• Profile data: permanent username, optional display name, biography, avatar, participation points, and account status.
• Participation data: permanent poll choices, comments, replies, edit and deletion timestamps, and earned points.
• Safety data: reports, moderation decisions, warnings, suspensions, bans, and the audit records needed to protect voting integrity and the community.
• Technical data: security, request, device, IP-address, and delivery logs generated by our infrastructure providers.
• Communications: information you send when requesting support, privacy assistance, or an appeal.

3. Why we use the data

• Create and secure accounts, confirm email addresses, and recover access.
• Enforce one account and one permanent vote per debate.
• Publish the profile information and comments that you choose to make public.
• Calculate participation points and unlock post-vote results and discussion.
• Prevent abuse, investigate reports, apply moderation decisions, and preserve auditability.
• Operate, diagnose, secure, and improve the service.
• Comply with applicable law and respond to valid rights requests.

4. Legal grounds

Depending on the context and applicable law, processing is necessary to provide the service you request, to comply with legal obligations, or for legitimate interests such as account security, fraud prevention, moderation, and voting integrity. We request consent before using personal data for an optional purpose that legally requires it.

5. What becomes public

Your username, optional display name, biography, avatar, participation totals, and visible comments can be read by other visitors. Your email address, individual vote, reports, and private moderation records are not displayed publicly.

Poll percentages and community comments remain unavailable to you until you cast your own vote in that debate.

6. Service providers

We use Supabase for authentication and database services, Vercel for application hosting and delivery, Resend for transactional email, and Cloudflare for domain, DNS, and related network services. When you choose to play embedded official footage, YouTube (Google) delivers that video. These providers process data under their own contractual, security, and privacy terms.

IsFoul does not sell personal data and does not use it for third-party advertising.

7. International processing

Our providers may process or store information outside your country. Where required, we rely on the provider’s contractual and technical safeguards and the mechanisms available under applicable data-protection law.

8. Retention and deletion

Account and participation records are kept while the account is active and for as long as reasonably necessary to provide the service, resolve disputes, protect the community, meet legal obligations, and preserve essential security records.

A valid account-closure request is handled through deletion or de-identification, depending on the record and the reason it must be retained. Records needed to preserve poll integrity, prevent abuse, resolve disputes, or meet legal duties may be retained without directly identifying the former account where technically and legally appropriate.

Account closure is currently processed through the privacy contact after identity verification. We will explain the outcome of the request, including any limited information that must be retained. Provider backups may preserve residual copies temporarily until their normal replacement cycle completes.

Soft-deleted comments no longer display their original text. Retention periods are reviewed as the service and its legal obligations develop.

9. Your choices and rights

Depending on where you live, you may request information, access, correction, deletion, objection, restriction, or portability, and may withdraw consent where processing is based on consent. We may need to verify your identity before acting on a request.

Peruvian residents may also contact the Autoridad Nacional de Protección de Datos Personales. People in the European Economic Area may contact their local data-protection authority.

10. Age requirement

IsFoul is intended for people aged 16 or older. We do not knowingly create accounts for children under 16. If you believe an underage person has provided personal data, contact us so we can review and remove it where appropriate.

11. Security and incidents

We use access controls, row-level database security, encrypted transport, restricted administrative roles, audit records, and security monitoring appropriate to the current service. No online service can guarantee absolute security.

If a personal-data incident creates a legally reportable risk, we will follow the applicable notification duties.

12. Changes to this notice

We may update this notice when the service, providers, or legal requirements change. Material changes will be communicated through the service and will receive a new effective date.