App privacy

This page covers the Monitoring Room app for iPhone and Android (bundle and package com.monitoringroom.app) and the free-to-play forecast accounts it shares with this website. The app has no advertising, no in-app purchase and no analytics SDK. Data controller: Jukka Blomberg (operating as Monitoring Room), hello@monitoringroom.com.

Without an account

Reading situations, the index, questions and the leaderboard needs no account. The app requests that public data from monitoringroom.com over HTTPS; the requests carry no identifier. Our hosting provider (Vercel) keeps standard server logs, including the requesting IP address, for a short period for security and operations. The last copy of each board is saved in the app's storage on your phone so it can be shown offline.

Signing in

You sign in with your email address and a one-time link; there is no password. To send the link we pass your address to our email provider (Resend). The link works once and expires after 15 minutes; the one-time code that brings the app back expires after 5 minutes. Your session is kept in your phone's secure storage (iOS Keychain or Android Keystore). Sign-in requests are rate-limited with short-lived counters keyed by IP address and email address, which expire after 15 minutes.

Your forecast record is filed under a random identifier. We do not store your email address with it — only a one-way hash of it, used to find your record when you sign in.

What your account holds

• Your calls: each probability you set on a question, with its time. Calls are your own content and the basis of the crowd figure and your score.
• Your handle, if you pick one — the only name shown publicly, on the leaderboard and your public record (resolved calls and scores only; open calls stay private).
• Your follows: the questions you follow for alerts.
• Alert devices, if you turn alerts on: this phone's push token and its time zone (used to hold alerts between 22:00 and 08:00 local time).

The crowd figure published for each question is an aggregate: it shows the average and the number of forecasters, never who called what.

Alerts

Alerts are opt-in twice: you turn them on in the app (the phone asks for notification permission at that moment, never at launch) and you follow the questions you want. We then send a notification when the crowd on a followed question moves by 10 points or more, and when it resolves. Notifications are delivered through Expo's push service and Apple Push Notification service or Firebase Cloud Messaging; they contain the question and the figures, nothing else about you.

Processors and where data is kept

• Vercel Inc. — hosting of monitoringroom.com and its API
• Upstash Inc. — the database holding forecast accounts, calls and alert devices
• Resend — delivery of sign-in emails
• Expo (650 Industries, Inc.), Apple and Google — delivery of push notifications

Legal basis: performance of the service you sign up for (Article 6(1)(b) GDPR). We never sell or share your data for advertising.

Deleting your account

In the app: Me → Delete my account. On the web: monitoringroom.com/me. Deletion removes your profile, handle, follows, scores, alert devices and the email hash immediately, and takes you off the leaderboard. Your past calls stay in the question history as anonymous entries with no link to you, so published crowd figures do not change after the fact. Signing out, uninstalling the app or clearing its storage removes the session and the saved boards from your phone.

Your rights

Under GDPR you can access, rectify, erase, restrict and port your data and object to its processing. Email hello@monitoringroom.com. You may also complain to the Finnish Data Protection Ombudsman (tietosuoja.fi). The website's own practices (waitlist, Google Analytics) are in the privacy policy. Help with the app: app support.