Privacy Policy

Last updated: March 2026

What We Collect

When you create an account, we collect your email address and a hashed version of your password. We do not store your password in plain text.

During signup, you must confirm that you are at least 18 years old. We do not store your date of birth — only the fact that you confirmed eligibility.

When you use the Service, we log page views and search queries for analytics purposes (e.g., which players are most searched). These logs may include your email address if you are logged in.

Third-Party Services

We use the following third-party services that may process limited data on our behalf:

  • Stripe — payment processing. We send your email to create a customer account. We do not store your credit card number, billing address, or other payment details on our servers. We receive only a Stripe customer ID and subscription status.
  • Resend — transactional and newsletter email delivery. We send your email address to Resend to deliver account verification, password reset, and other service-related emails. If you opt in, we also send a periodic newsletter with picks and insights. You can unsubscribe at any time from your Account page or via the link in each email.
  • Sentry — error monitoring. Sentry receives error reports (stack traces, request paths) to help us diagnose bugs. We have disabled the collection of personally identifiable information (IP addresses, cookies, user data) in our Sentry configuration.

We do not use Google Analytics, advertising networks, or any other third-party tracking services.

Age Requirement

You must be at least 18 years old to use IronEdge. All users confirm their age at signup. We do not knowingly collect personal information from anyone under 18. If we learn that a user under 18 has created an account, we will promptly delete it. If you believe someone under 18 has registered, please contact us at support@deadiron.io.

Cookies

We use two cookies, both essential for the site to function:

  • Authentication cookie (ironedge_token) — an HTTP-only, secure cookie containing an encrypted session token. Keeps you logged in for up to 7 days.
  • CSRF protection cookie (ironedge_csrf) — a security cookie that prevents cross-site request forgery attacks on forms. Does not contain personal information.

We do not use third-party tracking cookies, advertising cookies, or analytics cookies.

How We Use Your Data

Your email is used for account authentication and transactional messages (email verification, password resets). If you opt in at signup or from your Account page, we send a periodic newsletter with picks, insights, and updates. You can unsubscribe at any time. Search and usage data is used in aggregate to improve the Service (e.g., understanding which features are most used). We do not sell, rent, or share your personal information with third parties for marketing purposes.

Data Retention

Account data is retained as long as your account is active. You can delete your account at any time from your Account Settings page. When you delete your account, all associated personal data — including your email, analytics events, tokens, and subscription records — is removed immediately. Aggregated, anonymized analytics data may be retained indefinitely.

Data Security

We use industry-standard security measures including encrypted connections (HTTPS), hashed passwords (bcrypt with SHA-256 pre-hashing), secure HTTP-only cookies, and Content Security Policy headers with per-request nonces. Our infrastructure is hosted on Fly.io with managed PostgreSQL.

Your Rights

You can delete your account and all associated data at any time from your Account Settings page. To request a copy of your data, email support@deadiron.io.

State Privacy Rights (CCPA & Others)

If you are a resident of California, Virginia, Colorado, Connecticut, or another state with consumer privacy legislation, you have additional rights regarding your personal information. These may include: the right to know what personal information we collect and how it is used; the right to request deletion of your personal information; and the right to opt out of the sale or sharing of your personal information.

We do not sell or share your personal information with third parties for monetary or other valuable consideration. We do not use your data for targeted advertising. Because we do not sell personal information, there is no need to opt out — but you may still exercise any of your rights by emailing support@deadiron.io. We will respond to verifiable requests within 45 days.

Changes

We may update this policy from time to time. Significant changes will be communicated via a notice on the site. The "Last updated" date at the top of this page reflects the most recent revision.

Contact

Privacy questions? Email support@deadiron.io.