Privacy Policy

1. Introduction

Welcome to SHIOL+ ("we," "our," or "us"). This Privacy Policy explains how we collect, use, and protect your information when you use our educational Powerball analysis platform.

SHIOL+ is a personal portfolio project designed to demonstrate full-stack development capabilities, including AI/ML integration, payment systems (test mode only), and modern web technologies. It is not intended for commercial gambling or real monetary transactions.

2. Information We Collect

2.1 Account Information

When you register, we collect:

• Email address: For account authentication and communication
• Username: Your chosen display name
• Password: Securely hashed using bcrypt (we never store plain-text passwords)
• Account creation date: Timestamp of registration

2.2 Usage Data

We automatically collect:

• Device fingerprint: Anonymous identifier for freemium limits (no personal data)
• Visit counts: Anonymous statistics for dashboard metrics
• Login activity: Login count and last login timestamp

2.3 Payment Information (Test Mode Only)

We integrate Stripe in test mode for educational purposes. No real credit card data is collected or processed. All transactions are simulated using Stripe test cards (e.g., 4242 4242 4242 4242).

If Stripe test mode were to process data, it would be handled entirely by Stripe's secure infrastructure. We never store payment card details on our servers.

3. How We Use Your Information

We use collected information solely for:

• Account management: Authentication, session management, and user preferences
• Feature access control: Managing free vs. premium tier access (demonstration purposes)
• Analytics: Anonymous visit counts and usage metrics displayed on the admin dashboard
• Security: Rate limiting, abuse prevention, and session security
• Communication: Essential account-related emails only (no marketing)

We do NOT: Sell your data, share it with third parties for marketing, or use it for advertising purposes.

4. Data Storage and Security

Your data is stored in:

• SQLite database: Hosted on our VPS server with regular backups
• Password security: All passwords are hashed using bcrypt with salt
• Session security: JWT tokens with HttpOnly cookies and secure flags in production
• HTTPS: All traffic is encrypted in transit (TLS/SSL)

While we implement industry-standard security practices, please note that this is an educational project with limited resources. We cannot guarantee 100% security against all potential threats.

5. Cookies and Tracking

We use minimal cookies for essential functionality:

• session_token: Authentication cookie (expires after 7-30 days)
• Anonymous visit tracking: Device fingerprint for freemium limits (no personal identification)

We do NOT use third-party analytics (Google Analytics, etc.), advertising cookies, or social media trackers. See our Cookie Policy for more details.

6. Data Retention and Deletion

You can delete your account at any time through Account Settings. Upon deletion:

• Your account data (email, username, password) is permanently removed
• Associated predictions and activity logs are anonymized or deleted
• We retain anonymous usage statistics for analytics purposes

Backup copies may persist for up to 30 days for disaster recovery purposes.

7. Third-Party Services

We integrate the following third-party services:

• Stripe (Test Mode): Payment processing demonstration. See Stripe Privacy Policy
• Cloudflare (if applicable): CDN and DDoS protection. See Cloudflare Privacy Policy

We do NOT use Google Analytics, Facebook Pixel, or any other third-party tracking scripts.

8. Your Rights (GDPR/CCPA Compliance)

You have the right to:

• Access: Request a copy of your personal data
• Rectification: Update incorrect or incomplete data via Account Settings
• Erasure: Delete your account and associated data
• Data portability: Export your data in JSON format (contact us)
• Withdraw consent: Stop using the service and delete your account

To exercise these rights, contact us at privacy@shiolplus.com or use the Account Settings page.

9. Children's Privacy

SHIOL+ is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you are a parent/guardian and believe your child has provided us with personal data, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of SHIOL+ after changes constitutes acceptance of the updated policy.