Security

Accounts

• Passwords

  Passwords are stored in a form we cannot read back. We cannot read the password you typed.

• Too many tries

  Signup, login, and password reset slow down after too many tries from the same network or email.

• Login and reset

  A wrong login and a reset request use the same reply whether or not that email has an account.

• Reset links

  A password reset link expires in 30 minutes and works once. We store a scrambled copy of the link, not the link itself.

• Secure connection

  The live site is served over a secure connection. The sign-in cookie is only sent on that connection.

• Sign-in cookie

  The sign-in cookie is HttpOnly, so page scripts cannot read it.

Pickers and payouts

Payout setup is Stripe Connect. Stripe collects the bank account and the identity details. PICKCERT stores the Stripe account id and whether Stripe has enabled charges. We do not store the bank account number or the ID document. A Founding Picker is anyone who signs up and locks their first pick by Dec 31, 2026, 11:59 PM ET. Both must happen by then.

Fans and cards

Subscribe sends you to Stripe Checkout. Pickers keep 100% of subscription revenue through Feb 28, 2027. Founding Pickers who sign up and lock their first pick by Dec 31, 2026, 11:59 PM ET keep 95% from Mar 1, 2027 through Dec 31, 2027, then 90%. Everyone else keeps 90% from Mar 1, 2027. Stripe's standard card processing applies. The card number is entered at Stripe. PICKCERT does not receive it and does not store it.

Early access to PICKCERT BOT is $20 a month, billed monthly, and tips are optional. Those charges go to PICKCERT's own Stripe account. They are not a charge on a picker's account. The card is still entered at Stripe. What pickers keep.

You can cancel anytime from your account. Access continues through the time you already paid, then it stops renewing.

Deleting your account

On the dashboard, Settings asks for your password before it deletes the account. That removes your email, your password, sign-in, reset links, and the display name. You are logged out.

Subscriptions billed to you are canceled immediately, with no refund. If people subscribe to you, those subscriptions are set to end when the current period ends. We remove our reference to your Stripe account. We do not delete the Stripe account. It stays yours.

Locked and settled picks stay on the public ledger. They are shown under the name Deleted picker. A locked pick cannot be edited or deleted. That includes after the account is gone.