Last updated: August 8, 2026
Pantora is a social game of skill. You call the outcome of real-world events using a free allowance of conviction that refills on its own, and play for points, ranks and leaderboard positions. There is no stake and no monetary prize: points, ranks and everything else you earn have no monetary value, cannot be withdrawn, converted to money, or transferred, and have no value outside the app. The only thing that can be purchased is a Boost: a one-off, fixed-duration in-game benefit that never renews.
Account: email address and password. Passwords are never stored in
readable form — only as a secure cryptographic hash. When you choose a password we check it
against a public database of passwords exposed in known data breaches; this check never
transmits your password.
Profile: username, country, date of birth (for age
verification), and optionally: profile photo and full name.
In-app activity: your votes (prediction, choice, amount, time), collected votes,
points earned and conviction balance, follows/followers, profile visits, notifications, and terms
acceptance.
Technical: basic request logs created when the app communicates with our
servers (such as IP address, device type, and timestamps), used only for security, abuse
prevention, and troubleshooting, and kept for a short period. When you create an account,
our infrastructure provider (Cloudflare) checks which country your connection comes from so
we can enforce regional availability (legitimate interest); we receive and keep only the
country result of that check — never your IP address.
Crash reports: if the app crashes or hits an error, a technical report
(device model, OS version, and what the app was doing at that moment) may be sent to our
crash-reporting service (Sentry) so we can find and fix the problem. Crash reports are not
used for advertising.
Payments: all payments are taken by the Apple App Store or Google Play.
We do not receive or store your card or payment details; these are handled by the
respective store under its own policy. To confirm a purchase and grant your Boost, we use
RevenueCat, which receives your Pantora user ID, the product you bought,
and the purchase/renewal status of your account (see section 4).
We do not collect: precise location, contacts, device files, or data from
other apps. The app contains no ads and no third-party advertising or analytics
trackers, we
never sell or share your data for commercial purposes, and we do not use
your data for advertising or for automated decisions that have legal effects on you.
Pantora is a social app. The following are visible to all users: your username, avatar and country; your points, conviction balance, rank and stats; your full voting history (which prediction, which side, how much conviction) and in-app transactions; who you follow and who follows you; recent visitors to a profile; and your appearance in "recent votes" lists and leaderboards. If you set a full name, it is shown to users you and they both follow.
Your profile includes a visibility setting that hides your activity tabs (votes and transactions) from other users' profile view. Note that even with it enabled, your votes still appear in prediction-level activity such as a prediction's "recent votes" feed. If you prefer not to be identifiable, do not use your real name or a recognizable photo.
Your account data is stored on Supabase, on servers located in the European Union (Ireland).
Pantora relies on the providers below. Each handles the data it receives under its own privacy policy, which you can read at the link given:
Cloudflare, like any website host, briefly processes the IP addresses of visits to pantora.app — including when you open a link from one of our emails.
To show live prices and event images, the app requests data and pictures straight from the sources that publish them — currently Binance (live crypto prices), Wikimedia Commons and flagcdn.com (event and country images), and jsDelivr (cryptocurrency logos). We send them no account information and no identifier of any kind; like any website you visit, they see only that a device requested a file, including its IP address. They act as independent providers under their own privacy policies, not as our processors.
Supabase, RevenueCat, Expo, Cloudflare, Resend, Sentry and DigitalOcean act as data processors on our behalf: they may only use your data to provide the service to us. Where a provider processes limited data outside the EU/EEA, it does so under EU-approved safeguards such as standard contractual clauses or an adequacy framework. Apple and Google process your purchases as independent controllers under their own privacy policies. We do not sell or share your data with any of these providers for their own advertising.
(a) Contract performance — operating your account and the game; (b) consent — for optional items such as a profile photo, which you can withdraw at any time by removing the item; (c) legitimate interest — security, abuse prevention, game integrity; (d) legal obligation — where we must retain or disclose data under applicable law.
Data is kept while your account exists. You can delete your account at any time inside the app (Settings → Delete account). Deletion permanently removes your profile, profile photo, votes, transactions, follows and notifications, and we instruct our purchase provider (RevenueCat) to delete its record of you. Residual copies may remain in our routine encrypted backups for a short period (up to 30 days) before they are overwritten automatically. We keep a record of any real-money purchase — the product, amount and date, with your account identifier removed so it is no longer linked to you — because accounting and tax law require it, and we may keep minimal records where necessary to prevent abuse or to comply with the law.
Under the GDPR you have the rights of access, rectification, erasure, restriction, portability and objection, and the right to withdraw consent at any time. Contact the email in section 10. You may also lodge a complaint with the Greek Data Protection Authority (www.dpa.gr) or with your local supervisory authority.
The app is intended for users aged 18 or older. We collect a date of birth at sign-up and block users under 18. We do not knowingly collect data from minors; if we become aware of such an account, it will be deleted.
If this policy changes, you will be notified inside the app before the changes take effect.
Pantora, operated by Emmanouil Pantouvakis (data
controller)
Heraklion, Crete, Greece (postal code 71500)
support@pantora.app
+1 (787) 476-3102