Privacy.

Foresyte is operated by the founder out of Canberra, ACT, Australia. The product is a free Sydney auction-prediction game at foresyte.com.au. For privacy questions, contact hi@foresyte.com.au.

The minimum we need to run a free game and tell you how you went. Specifically:

• Email address — so we can send you the magic sign-in link, your weekly results, and account-related notices. Required.
• Display name — chosen by you at signup, shown on leaderboards. Required.
• Sign-in method — magic-link via Supabase Auth, or Google OAuth (we receive your email and Google profile name; we never see your Google password).
• Predictions and picks — the dollar estimates you submit on individual auctions, with timestamps. These tie to your account so we can score you and build a calibration history over time.
• Optional profile fields — Sydney LGAs of interest, whether you self-identify as an industry professional. You can leave these blank; if you fill them in, they only personalise your experience and do not appear publicly.
• Basic web logs — the standard request data our hosting provider records (IP address, user agent, timestamp). Used for security and abuse mitigation.

Foresyte v1.0 has no payment surface, so we do not collect or store credit-card details, billing addresses, or anything similar.

• To run the game (sign you in, save your picks, score them).
• To send you transactional and weekly emails — your magic sign-in link, Sunday-morning results, and account notices. You can unsubscribe from non-essential emails at any time via the link in every footer.
• To compute aggregate prediction signal across all players for each auction — the “calibrated crowd estimate.” This is built from many people’s predictions and is not personally identifiable in the output.
• To prevent abuse (e.g. multi-accounting attempts to manipulate leaderboards or signal).

We use third-party processors to actually run the service. As of 5 May 2026:

• Supabase(database + auth) — your account row, profile, predictions and picks live here. Hosted in Supabase’s Sydney (ap-southeast-2) region where possible; some auth metadata may transit US infrastructure.
• Vercel (web hosting) — serves the website and processes web requests. Logs may be stored briefly in US/EU edge locations.
• Resend (email delivery) — sends transactional and weekly emails from updates.foresyte.com.au. Holds your email address and the contents of messages we send you.
• Google(only if you use Google sign-in) — the OAuth handshake passes through Google so it can confirm your identity. Google’s own privacy policy applies to anything that happens on their side.

Some of these providers are based outside Australia, which means your data may be processed overseas. We’ve picked providers with reasonable security and privacy postures, but you should know cross-border processing is part of using Foresyte.

• Other players see your display name on leaderboards and (post-auction) on results pages where your pick is listed. They never see your email or any profile field you marked optional.
• The aggregate signalderived from all players’ predictions may be published or sold to third parties (e.g. property professionals) in future, but only as aggregated, anonymised numbers — never tied to identifiable individuals.
• We do not sell your personal data. Email addresses, profile fields, and individual picks are not shared with advertisers or marketers.
• We may disclose information if required by Australian law (e.g. valid court order or law-enforcement request).

We use one essential cookie set by Supabase to keep you signed in across page loads. We do not run advertising trackers, social-media pixels, or third-party analytics that build a cross-site profile of you.

You can delete your Foresyte account at any time from /settings. When you do:

• Your email, display name, and profile fields are permanently removed.
• Your individual predictions and picks remain in our aggregate signal (so historical leaderboards and the calibrated crowd estimate stay stable), but they are disconnected from your identity. On historical leaderboards, your name is replaced with a generic anonymised label.
• Your tipster credibility and email subscriptions are wiped.

Web-server logs are kept for up to 90 days for security purposes, then discarded. Backups containing personal data are rotated within 30 days of deletion.

The Australian Privacy Principles (under the Privacy Act 1988) apply to how we handle your personal information. You can:

• Access the personal information we hold about you — email hi@foresyte.com.au and we’ll send it within 30 days.
• Correctanything that’s wrong — most of it you can edit yourself in /settings; for anything else, email us.
• Complainif you think we’ve mishandled your data — first to us at the email above, then if unresolved, to the Office of the Australian Information Commissioner.

Foresyte is intended for adults thinking about Australian property. We don’t knowingly collect information from anyone under 16. If you believe a minor has signed up, contact hi@foresyte.com.au and we’ll delete the account.

If we change anything material — what we collect, who we share it with, where it’s stored — we’ll update this page and notify signed-in users by email at least 14 days before the change takes effect. The “Last updated” date at the top reflects the most recent revision.