Privacy Policy
Draft · Updated October 29, 2026. Requires owner and legal review before public launch.
Your predictions stay in your browser
Market Ballot stores event IDs, your selected options, and submission timestamps in localStorage on your device. There is no account and no prediction database. These records do not sync across devices.
Private browsing, blocked storage, or clearing browser data may remove your records. If storage is unavailable, you can still interact during the current page session and a notice will explain that choices cannot persist.
What localStorage contains
The key marketballot:predictions:v1 holds prediction records.
marketballot:theme stores a display preference. marketballot:analytics-consent stores your analytics choice, policy version, timestamp and expiry (up to
180 days). A sessionStorage setting, marketballot:ga-debug,
enables diagnostics only when requested using ga_debug=1.
If permanent consent storage fails during withdrawal, marketballot:analytics-session-optout can hold a refusal for the current tab session to prevent an older saved
grant from reactivating tracking. We do not ask for your name, email address,
financial holdings, or payment details.
Use “Clear history” on My Predictions to delete prediction records. You can also delete this website’s data in your browser settings.
Optional analytics
No analytics runs unless a valid Google Analytics 4 measurement ID is configured and you explicitly opt in using our site-wide banner or the settings below. We request consent from all visitors, without inferring location. Reject and accept are equally available. Before consent, the Google script is not loaded and no analytics or cookieless measurement requests are sent. Without an ID, no Google Analytics script is loaded and no analytics requests are sent.
If enabled with your consent, analytics records page visits and interactions such as event views, option selections, filters, and source clicks. Our custom events exclude raw search terms; only whether a search was performed and the result count are recorded. We do not send names, emails, prediction histories, or other personal identity fields as custom event parameters. Page queries, fragments, and raw search text are excluded. Google's service necessarily receives technical connection data such as the IP address when a consented browser contacts it; we do not add IP addresses to event parameters or claim that the network connection is anonymous. See how Google uses information from partner sites.
With consent, Google Analytics may set first-party _ga and _ga_* cookies to distinguish browsers and sessions. This integration caps its
configured cookie lifetime at 180 days and disables expiry renewal, Google
Signals and advertising personalization. Advertising consent remains denied.
These analytics identifiers are separate from your local prediction history.
The site sends the chosen event/option when you interact after consent, not
an upload of your saved history. Cookie and data retention settings in the
Google property require the owner's separate review.
No advertising service or Cloudflare Web Analytics integration is currently enabled. A future integration will require this policy to be updated.
Analytics is off by default.
Withdrawing consent reloads this page to stop analytics execution. We also disable further measurement and remove accessible first-party analytics cookies for this domain. Rejecting analytics does not disable any prediction feature. Your choice expires after 180 days or when browser data is cleared, and we request a fresh choice after expiry or a consent policy version change. If browser storage is blocked, your acceptance only applies to the current page. Rejection may be kept for the tab session as a fail-safe. If neither storage is available, measurement stops on the current page and we ask you to clear older site data before leaving. Previously collected data is subject to the provider’s retention settings; review those settings before enabling analytics in production.
Hosting and external links
The hosting provider may process standard request metadata to deliver the static site. Review the chosen hosting configuration and provider’s privacy terms before launch. External official-source links open third-party websites governed by their own policies.
Contact and policy changes
The operator’s legal identity and privacy contact have not yet been configured. The owner must supply a verified contact method and review this policy before public launch. No contact address is implied by this draft.