Privacy policy
What we collect, why, who sees it, and how to request access, correction, export or deletion.
Information we collect
Account details (name, email, city), public profile details, submitted attempts including claimed results and witnesses, evidence videos and links, messages and reports to our team, decisions and certificates, and basic technical data such as IP address and browser information for security and operation.
How we use it
To run accounts and services, review and verify records, prevent fraud, maintain record history, provide support, protect the system and improve the product. We do not sell personal information or use it for outside advertising.
Evidence videos and images
Submitted videos are kept in private storage and shown only to authorized reviewers. An external video link is stored as supplied. After a record is approved, an excerpt of evidence may be shown in the public record, subject to the team’s decision and the terms of use.
Artificial intelligence
A suggested challenge idea is screened by Gemini against our record rules. A clear, measurable and safe idea may advance automatically for challenge planning; uncertain ideas or screening failures go to a person. We send the idea text to this provider, so do not include sensitive personal details. Advancing an idea is not verifying a record. Evidence for an attempt may undergo automated checks for anomalies, but Herzl reviews each submission and reaches a reasoned decision; unclear cases go to a human. Authorized staff record the verdict and trigger record registration and certificates. Account actions remain with authorized staff.
Name, age and location
A full name and city are needed to display a verified record and public profile. Date of birth is used to check the current 18+ participation requirement. We do not collect precise real-time location.
Referral from a friend
When you open a personal invite link, an identifier needed to measure the referral is stored in your browser for 30 days. We measure the link visit, sign-up and first submission. There is no reward, discount or external advertising. You can remove it by clearing browser cookies.
Cookies and analytics
Alongside our own site events, we use Vercel Web Analytics to measure public-page views, approximate unique visitors and referral sources in aggregate. It uses no analytics cookies; Vercel identifies a visit using a hash of the request, without linking it to a site account. We exclude account, submission and admin paths and remove URL query parameters. A source may be absent when the referring site or browser does not pass it. Essential sign-in and security cookies are described in the cookie policy.
Third-party providers
The service relies on external infrastructure: Supabase for storage and database, Vercel for hosting and an email provider for account verification. These providers process data for us under relevant data protection arrangements.
Storage and retention
Data is stored on providers’ cloud servers. We retain it as long as needed for operations, integrity of records, security and legal duties. Approved records remain as a limited historical archive even after an account is deleted.
Access, correction, export and deletion
You can request access to your data, correction, export of submissions or deletion of your account and content through the contact page. Deleting an account does not erase a verified record that has become part of the archive, but removes the connection to the active account.
Minors
Challenge participation and attempt submission are currently limited to adults aged 18 and over. A parental-consent process for minors is not available at this time. If you believe a minor has submitted personal information, contact us to review it.
Security
We use row-level access controls, limited staff permissions, private evidence storage, decision logs and encrypted communications. No system is entirely immune; we will notify of a significant security incident as required by law.
Updates and contact
We may update this policy and publish an updated date. For privacy questions and requests, use the site’s contact page.