Privacy policy

Effective October 1, 2026

Draft for legal review. This text was prepared as a starting point and is not legal advice. Have a qualified lawyer review it for your company and the countries you operate in before relying on it.

Crosstab is operated by OpenUniverse Technologies, 12530 Fairwood Pkwy Ste 102 #504, Bowie, MD 20720 ("we"). This policy explains what we collect when you use crosstab.vote and our emails, notifications and messages.

What we collect

• Account: your email address, and your name if you sign in with Google.
• Alert settings: frequency, topics, states, watched races, and the channels you choose.
• WhatsApp (optional): your phone number and the date you agreed to WhatsApp alerts.
• Push notifications (optional): a technical address for your device provided by your browser.
• Subscription: plan and status. Payment details are collected and stored by Stripe, not by us.
• On your device: your theme, watchlist and which notifications you've seen are stored in your browser.
• Usage (Crosstab Analytics): to understand how Crosstab is used, we record which screens are opened and for how long, actions such as playing a briefing, following a race or sharing a Crosstab Live moment, where a visit came from (the referring site or campaign link), the device type, and an approximate US state or country from our hosting provider's network. This is tied to a random identifier stored in your browser, not to your name; IP addresses are never stored, no cookies are used, and the records are kept for up to 13 months. If your browser sends Global Privacy Control or Do Not Track, we don't record your visits at all.
• Usage (Cloudflare Web Analytics): privacy-friendly, cookie-free page statistics, if enabled.

How we use it

To provide the app, send the alerts you ask for, run Pro subscriptions, keep the service secure, and understand overall usage. We don't sell your personal information and don't use it for advertising.

Service providers

Supabase (accounts and database), Cloudflare (hosting), Resend (email), Stripe (payment processing; card details go to Stripe, never to Crosstab), Meta (WhatsApp messages, if you opt in), and your browser's push service. They process data on our behalf under their own security and privacy commitments.

Your choices and rights

Change or pause alerts in the app; unsubscribe from any email in one click; reply STOP to WhatsApp messages; turn off notifications in your device settings. You can ask us to access, correct, export or delete your data at [email protected]. Depending on where you live (for example the EU/UK under the GDPR, California under the CCPA/CPRA, or Kenya under the Data Protection Act, 2019) you may have additional rights, including to complain to a data protection authority.

Retention

We keep account data while your account is active and delete it within 30 days of a deletion request, except records we must keep for legal or tax reasons.

Children

Crosstab isn't directed to children under 16, and we don't knowingly collect their data.

International transfers and security

Our providers may process data in the United States and other countries, with appropriate safeguards. Data is encrypted in transit and access is restricted by account.

Changes and contact

We'll post updates here and notify account holders of material changes. Questions: [email protected] · Mail: OpenUniverse Technologies, 12530 Fairwood Pkwy Ste 102 #504, Bowie, MD 20720.