1What this policy covers
This policy covers the TRY ALPHA site at tryalpha.io, your account on it, and the services you reach with that account: readings, analyses and recommendations, the library and the glossary, the TRY ALPHA conversation, the forum, the protection and rights services, and the account centre including identity verification and service credit.
Where a service is offered to you with rules of its own, those rules are shown where you use it; they complement this policy and do not replace it.
2Account data
When you open an account by email we ask for your name, your email address and a password, and we send a code to that address to confirm it before the account is created. The name is how we address you; the email is your way into the account and our channel for messages about it.
The password is never stored as text anywhere: what is stored is a one-way derivation with a random value specific to your account, from which the original cannot be recovered and which nobody here can read.
If you choose to sign in with an account at an external identity provider, that provider sends us a stable identifier of your account there, your email address and whether it is confirmed, your name and your picture. We keep the identifier, the email, its confirmation status and the time of linking; we use the name only if your name with us is empty; and we copy the picture to your account as its picture. One email address leads to one account, whatever the sign-in methods.
From the account centre you can add your phone number and country, and choose your time zone, interface language and notification options. These are kept as you enter them and you can change them at any time.
3Identity verification
Identity verification is a step you complete from inside your account when a service requires it. In it we ask for your full name, your date of birth and your nationality, the type of identity document and its issuing country, an image of the document front and back or a single file of it, and a photo of your face. Proof of address is requested only if the reviewer asks for it to complete the file.
The files are kept in your account's own storage, are shown only to you and to whoever reviews your request, and are not indexed by search engines. With each file we record its type, size, fingerprint and upload time.
The review is done by an authorised reviewer who reads what you uploaded and decides with a written reason, and may ask you for more. We use no automated third-party verification service, and a face-to-document match is never declared successful from the capture alone: the signal that a photo came from the camera is recorded as a signal, not as a verdict.
You must be at least eighteen years old to complete this step, and the document must be your own. What you upload stays with your account while it is open; it is deleted automatically when the closure of the account is completed, or on your request through the contact channel.
When your request is accepted, your account name becomes the name the reviewer read on your document, and it is no longer changed from inside the account, so that no verified account appears under a name nobody reviewed. To correct it afterwards you write to us or submit a new document for review.
4Sign-in and devices
When you sign in from a device we have not seen before, we keep a short fingerprint derived from your browser line and its language, the time of that sign-in and an abbreviated browser line, and we send a notice to your email address. The purpose is one: that you know if someone signs in to your account from a device you do not recognise. We keep the last twenty devices and the last twenty entries of that log.
The sign-in session is held in a signed cookie that scripts in the browser cannot read. It ends when you sign out, when you sign out of all devices, or after three days without renewal. After a password change the other sessions are closed and the session on the device where you changed it is kept for up to thirty days.
When you attempt to sign in, open an account or recover your password, we count attempts for a short window to prevent abuse. The count is tied to an encrypted fingerprint of your connection address, not to the address itself; we store the address in no log; and the counter expires on its own within minutes to an hour.
5Your choices and use
We keep the worlds and levels you choose, the reading settings you set yourself including the amount you enter, your watchlists and their alerts, your progress in the library and your level-exam result, and the service credit in your account with its last two hundred movements.
The scan results and readings you request are kept in your account for ninety days and then expire on their own.
Where your account centre shows records that other parts of TRY ALPHA keep for you, it shows them as they are recorded there and does not alter them.
6What you write yourself
Your conversations with TRY ALPHA are kept in your account so you can return to them; they do not expire on their own, and you can delete any of them yourself whenever you wish. Your browser also keeps a copy of the last messages of the current tab, which disappears when the tab is closed.
Alongside your conversation list, the text of each question and answer passes through an internal technical log that we keep for quality review and fault-finding, without your name, your email or your account identifier. Deleting a conversation removes it from your account but not from that log.
Your forum contributions: the display name you choose and your short bio if you write one, the text of your topics and replies and their edits, and the reports you file. The original is kept with every revision and is never overwritten. Other members see these, so do not write in them what you do not want read.
Protection and rights requests: what you write in the request about your country, the details of your case and the names of the parties you are asking about. We keep it in order to handle your request and show its result on your requests page.
7Cookies and browser storage
We use cookies the site needs in order to work: the sign-in session cookie; the language cookie; cookies that keep display choices on your device such as a world's mode and level, your watchlist, scan options and library level; and temporary cookies that carry your step while you open an account, recover your password or link a sign-in method, which expire within minutes.
Your browser keeps, in the memory of the tab, the last messages of the TRY ALPHA conversation and some display state; none of it leaves your device.
We use no advertising cookies and no third-party analytics or measurement tools.
8How it is kept and protected
Each account's data is isolated behind a key carrying that account's identifier, so no account reaches another account's data. Looking up an account by its email goes through an encrypted fingerprint of the address, not its text.
The connection to the site is encrypted, and the session cookie is signed and versioned so that changing your password or signing out of all devices ends the sessions already open. Identity files and pictures are served to their owner only, with no caching.
The site's server keeps no log of your requests or your connection address.
9Who it reaches
We do not sell your data, rent it or trade in it.
It reaches the following parties, each for its function: the hosting provider that runs the site and stores its data on our behalf; the email delivery provider, which receives your address and the text of every message we send you; an external language-processing provider, which receives, when you ask TRY ALPHA a question, the text of your question, the context of the page you are on and your reading settings including the amount you entered, and never your email, your password or your account identifier; the identity provider you choose to sign in with, which knows, when you sign in with your account there, that you are using TRY ALPHA; and a competent authority where an applicable rule requires it.
The market, event and sports data sources are queried from our server about assets and matches, not about you, so none of your data reaches them.
Some pages load display resources from external providers, such as fonts, a charting library or company logos; when your browser loads such a resource the provider sees your connection address, as with any resource on the web, and we send it nothing else about you.
We name these parties to anyone who asks through the contact channel at the foot of this page.
10How long it is kept
Your account data stays as long as your account does.
What is temporary expires on its own: protection counters within minutes to an hour, temporary codes and the account-opening draft within minutes to half an hour, scan results within ninety days, and the device and movement logs are bounded by the limits stated above.
The log of messages we sent you keeps the last one hundred messages to trace delivery faults, without the text of messages that carry codes. The technical conversation log is kept for quality review as stated above.
When the closure of an account is completed, your personal data, identity files, conversations and sign-in links are deleted automatically, the reservation of your email address is released, and what remains is the closure reference, the service-credit log and the records that an applicable rule or a standing obligation requires us to keep.
11Your rights: a copy, a correction, a deletion
You obtain a copy of your account data as a single file from the account centre at any time, and you correct your phone, country and preferences yourself there, and your name as well for as long as your identity has not yet been accepted.
You delete any conversation with TRY ALPHA yourself from inside it, and you edit your forum contributions or ask for them to be removed.
To close your account, you submit the request from the account centre with your password, then confirm it with a code that reaches your email, and then a seven-day period begins during which you can cancel from the same place. After that the account closes automatically, all your sessions end, and an email tells you it is done. Anyone unable to sign in to their account writes to us from the address registered on it.
For any other request about your data, or if you find on this page something that does not match what you see in your account, write to us and we will answer.
12Changes to this policy
If what we collect or how we use it changes, we update this page and change the last-updated date at the top of it, and we notify you of anything that affects your account.
13Contact
For privacy questions and requests for a copy, a correction or a deletion, write to the address below from the email registered on your account.
