What oddsrail keeps, and what it never touches

The self-hosted package

pip install oddsrail runs on your machine and talks only to Polymarket, Kalshi and the public blockchain APIs it needs. It has no telemetry, no analytics and no account. Your keys stay in your environment; the package never transmits them anywhere except to the venue you are trading on, as part of the order you asked it to place.

The hosted server (mcp.oddsrail.app)

When you connect Claude or another MCP client to the hosted server, we keep the minimum needed to give you an account:

• Your email address, used only to sign you in by magic link. We do not send newsletters or share it.
• Your paper-trading ledger: simulated orders, fills and positions with a virtual bankroll. No real money exists in it.
• OAuth records: the client application that connected (for example Claude), and the access and refresh tokens that let it act as you. Tokens are stored hashed. You can disconnect from your client's settings at any time, which invalidates them.
• Server logs with request timestamps, paths and IP addresses, kept for up to 14 days for abuse prevention and debugging.

The hosted server holds no wallet keys, no exchange credentials and no payment details, and it executes no real financial transaction on anyone's behalf. Market data it fetches on your behalf comes from Polymarket's public APIs and is not stored beyond short caches.

Conversation content stays between you and your AI client. The server sees only the tool calls the client makes and the results it returns.

The website

oddsrail.app is a static site served by Cloudflare. We run no analytics scripts and set no cookies. Cloudflare may log requests as part of serving the site; its own privacy policy governs that. The attribution page reads public Polymarket data directly from your browser.

Sharing and third parties

• Resend delivers sign-in emails and processes your email address for that purpose.
• Polymarket receives the market-data requests the server makes for you. No account data is sent with them.
• We do not sell or rent any data, and we do not share it with anyone else except when required by law.

Retention and deletion

Accounts, ledgers and tokens are kept while the account exists. Expired tokens and sign-in links are purged automatically. To delete your account and everything attached to it, email hello@oddsrail.app from the address you signed up with; deletion completes within 7 days.

Contact

Questions about this policy: hello@oddsrail.app. Changes to this policy are noted with the date at the top of this page.