Privacy Policy

We collect the following categories of personal information when you use Waging War:

Account information

• Email address (collected via Clerk authentication at sign-up)
• Name (first and/or last name, if provided)
• Profile display name chosen by you

Betting and racing data

• Bets you log manually: horse name, race, stake, odds, bookmaker, bet type
• Bet outcomes (win/loss) when you update your records
• Blackbook entries: horses you save with notes, tags and priority ratings

Community activity

• Posts and replies you publish on the Community page
• Upvotes you cast on posts and replies
• Points earned through platform activity

Usage data

• Pages visited and features used within the platform
• Browser type and device category (mobile / desktop)
• Session metadata collected automatically by our infrastructure providers

We use the information we collect solely to operate and improve Waging War. Specifically:

• To create and manage your account and authenticate you securely
• To display your betting history, ROI, and statistics back to you
• To calculate and display your community points, rank and tier
• To enable community features such as posting, replying and upvoting
• To send transactional emails related to your account (e.g. password reset)
• To analyse aggregate usage patterns and improve platform features
• To comply with our legal obligations under Australian law

We do not use your personal information for automated decision-making that produces legal or similarly significant effects.

We use Clerk (clerk.com) to handle all user authentication. When you sign up or sign in, your credentials are processed directly by Clerk. We store only the Clerk-issued user ID on our own servers; we do not store or handle your password.

Clerk may store your email address and authentication tokens on servers located in the United States. Clerk is SOC 2 Type II certified. You can review Clerk's privacy practices at clerk.com/privacy.

All application data — including your profile, bets, blackbook entries, community posts, and points — is stored in Supabase (supabase.com), a managed PostgreSQL database platform. Our Supabase project is hosted in Australia (Sydney region), and your data is stored there.

Data at rest is encrypted by Supabase. We implement row-level access controls so that your data is only accessible to you and authorised platform administrators. You can review Supabase's privacy practices at supabase.com/privacy.

Subscription payments are processed by Stripe (stripe.com). We do not collect or store your payment card details. Stripe processes payment information directly and provides us only with a subscription status confirmation. Stripe is PCI DSS Level 1 certified. You can review Stripe's privacy practices at stripe.com/privacy.

We do not sell, rent, trade, or otherwise transfer your personal information to third parties for marketing or commercial purposes. Your data is used exclusively to operate the Waging War platform and is shared with third-party service providers only to the extent necessary to deliver our services (Clerk, Supabase, Stripe as described above).

We use the following technologies to maintain your session and preferences:

• Session cookies set by Clerk to keep you signed in across page loads
• Browser localStorage to cache your most recent race data and bet records for offline access
• No third-party advertising cookies or cross-site tracking cookies are used

We use Google Analytics (GA4) to understand aggregate usage patterns across the platform. Google may set its own cookies for this purpose. Google's privacy practices can be reviewed at policies.google.com/privacy.

You can clear cookies and local storage at any time via your browser settings. Clearing session cookies will sign you out of the platform.

We retain your personal information for as long as your account is active or as needed to provide our services. If you request deletion of your account, we will delete or anonymise your personal data within 30 days, except where we are required by law to retain it.

Under the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate or incomplete personal information
• Request deletion of your personal information (subject to legal retention obligations)
• Complain about a breach of the Australian Privacy Principles

To exercise any of these rights, contact us at support@wagingwar.com.au. We will respond within 30 days. If you are unsatisfied with our response you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

We take reasonable steps to protect your personal information from misuse, interference, loss, unauthorised access, modification, and disclosure. All data is transmitted over HTTPS. Access to production databases is restricted to authorised personnel only.

Despite these measures, no method of internet transmission is completely secure. We cannot guarantee the absolute security of information transmitted to or from our platform.

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page. Continued use of the platform after changes are posted constitutes acceptance of the revised policy. We encourage you to review this page periodically.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, please contact: