Privacy policy

Last updated 15 October 2026

huebr serves public prediction market data to people and AI agents over MCP, REST and server-sent events. It does not hold funds, place orders or connect to your venue accounts. This page lists everything it keeps about you.

Calls without an API key

Your IP address is used to apply the per-minute rate limit and to count calls. Both live in the engine's memory and are lost on restart; the engine does not write them to disk. MCP tool arguments and REST queries (for example a search term) are used to answer the request and are not stored.

API keys

When you get a key we keep its name, tier, an optional contact address, a hash of the key (not the key itself) and when it was created or revoked. Calls made with a key are counted against it for rate limits and billing.

Signals you post

If you post a forecast with post_signal or POST /v1/signals, we store it with your key id and score it when the market resolves. Your calibration record is built from these and is private to your key unless you choose a display name and opt in to the public listing, in which case that name and your scores are shown.

Accounts and credit

An account holds prepaid credit and the keys that use it. We keep its id, your email address if you sign in by email or add one, its plan, and a ledger of top-ups and charges (amount, time, which key, which endpoint). Sign-in links, sessions and OAuth tokens are stored as hashes and expire. Sign-in and low-balance emails are sent through Resend.

Payments

Card payments are handled by Stripe: you enter card details on Stripe's page and we never see or store them. We keep the Stripe customer and saved-card ids Stripe returns, so the account can be credited, the plan renewed and, if you turn it on, automatic top-up charged. USDC payments use x402: a payment on Base, verified and settled through a payment facilitator. The paying wallet address is part of that payment and is public on the blockchain.

The website

huebr.net uses Vercel Web Analytics, which counts page views without cookies and without identifying visitors. The site is hosted by Vercel and the engine by our cloud provider; both keep standard request logs for security and operations.

What we don't do

• No advertising, tracking cookies or sale of data.
• When a model helps match markets across venues, it is sent the venues' public market text only, never anything about you.

Deletion and questions

To revoke a key, have your signals deleted or ask what we hold about you, open an issue. Revoking a key stops it working at once.