Privacy Policy

This Privacy Policy describes what information Pick5 ("we", "us") collects when you interact with our application at pick5-beta.vercel.app and with the Pick5 smart contracts on Celo mainnet.

• Wallet address. When you connect your wallet, we receive your public Celo address. We use it to read your on-chain state (allowance, deposit, lineup, winner status) and to write transactions you authorize.
• On-chain activity. Your interactions with the Pick5 contracts (deposit, lineup commitment, withdrawals, prize claim) are recorded on the Celo blockchain. By nature, this data is public, immutable, and outside our control once submitted.
• Analytics events. We use PostHog to understand how the app is used. Specifically we capture:
  • wallet_connected (with wallet_type: minipay or other)
  • usdt_approved (with amount_usdt)
  • deposit_completed (with amount_usdt)
  • withdraw_completed (with amount_usdt)
  • prize_claimed
  • Page views and PostHog autocapture interaction events
  Your wallet address is used as your PostHog identifier so we can correlate events for a single user.
• Database records. We maintain a leaderboard cache in a Postgres database (Neon). It stores your wallet address, your matchweek scores, and your rank. We also maintain an optional user_profiles table that may record an FPL display name you provide, a Self verification timestamp, and your PostHog ID.
• Wallet pairing metadata. When you connect via WalletConnect (Reown), the WalletConnect relay receives pairing metadata necessary to establish the session.

• We do not collect your real name, email address, phone number, or government ID.
• We do not have access to your private keys or seed phrase. Pick5 is non-custodial — only you can sign transactions from your wallet.

The following services process some of your data:

• PostHog (hosted in the United States) — product analytics.
• Vercel — application hosting.
• Neon — Postgres database hosting.
• WalletConnect / Reown — wallet pairing relay.
• Premier League FPL API (read-only) — we fetch publicly available fantasy stats; you do not authenticate to FPL through us.
• Celo RPC providers — to read on-chain state, your IP and request data are sent to public Celo RPC endpoints.
• Aave V3 protocol— your deposit is supplied to Aave's USDT pool on Celo via our smart contract; the resulting position is recorded on-chain.

• PostHog uses cookies to identify your session.
• Wagmi (the wallet library) caches connection state in localStorage so reloads keep you connected.
• WalletConnect uses localStorage for pairing keys.

• You may request that we delete the off-chain data associated with your wallet (PostHog records, user_profiles, leaderboard_cache). Contact us via Telegram (see section 9).
• On-chain data cannot be deleted. The Celo blockchain is immutable. We have no ability to remove or modify your on-chain activity. This is an inherent property of public blockchains and you should consider this before participating.
• You may disconnect your wallet at any time. You may also withdraw your deposit per the conditions described in our Terms.

• Analytics events are retained by PostHog according to its standard data retention.
• leaderboard_cache and user_profiles are retained indefinitely while Pick5 operates, unless you request deletion.
• On-chain data is permanent.

Pick5 is for users 18 years of age and older.

Privacy inquiries: Telegram t.me/pick5_support.

We may update this Privacy Policy. Material changes will be reflected by updating the "Last updated" date above.