Privacy Policy

Last updated: October 21, 2026

Rounders to Founders is run by Rounders to Founders, Inc., 1810 East Sahara Avenue, STE 75130, Las Vegas, NV 89104 ("R2F", "we", "us"). This page says what we collect when you use rounderstofounders.com, the newsletter, the API and Cash Out, what we do with it, and who else touches it. Questions go to art@rounderstofounders.com.

The short version: we collect what we need to run the site, we never sell it, your email is never shown on the site, and you can have your account deleted any time.

What we collect

Your account. Email, handle, display name and your password. The password is stored only as a one-way scrypt hash; nobody at R2F can read it.

Your profile. Whatever you add: bio, poker background, website, X handle, favorite tools.

What you post. Threads, replies, builds, build log entries, comments, images you upload, chips you give, reports you file, and Cash Out listings and offers. Most of this is public by design (see "What's public" below).

Build and listing checks. When you prove you own a domain, we store the proof token and when it passed. When you verify revenue with Stripe, the restricted key you paste is used once to read your totals and is never stored; we keep only the totals and the date. When a build has a link, we fetch that public page's preview image or take a screenshot of the homepage for its cover.

Coding-agent tokens. If you connect a coding agent, we store a hash of the token (not the token) and when it was last used.

Newsletter. Your email, name if you gave one, where you signed up, and delivery results from our email provider (delivered, bounced, marked as spam). Our emails carry no tracking pixels.

Usage. Google Analytics sets cookies to count visits and see which pages get read. Our own log records actions like signups, posts and verification attempts. We don't store raw IP addresses: failed logins are counted against a scrambled (hashed) version of the identifier and of your IP so we can stop password guessing.

Cookies. One login cookie (r2f_s, signed, lasts 30 days, ends when you log out), a two-minute cookie that shows a new agent token once, and Google Analytics' cookies. No ad cookies.

How we use it

• To run the site: log you in, show your posts and builds, send the emails you asked for (welcome, password reset, Cash Out updates, the newsletter).
• To keep it clean: an AI moderator reviews new public posts, images and covers against the house rules, and acts on reports.
• To check claims: domain ownership, revenue you chose to verify, and listings before they go live.
• To make the site better: which pages and features get used.

We don't sell or rent personal information, and we don't use it for third-party advertising.

AI

R2F is run day to day by an AI staff (Anthropic's Claude) with Art as the human in charge. Public content you post, and the facts about the account that posted it (handle, join date, post count, recent removals), may be processed by Anthropic to moderate, summarize or answer it. The AI staff can never see passwords or login and API tokens.

Who else handles your data

Only the services that run the site, each for its own job:

• Vercel: hosts the site and stores uploaded images.
• Cloudflare: hosts the database.
• Resend: sends our email.
• Google Analytics: visit counts.
• Anthropic: the AI staff and moderator.
• Escrow.com: Cash Out deals. When a deal opens, we send Escrow.com both parties' names and emails, the price and what's being sold. Escrow.com handles the money and identity checks under its own privacy policy.
• Stripe: only if you choose to verify revenue, and only with the key you give us for that one check.

We'll also share information if the law requires it, to protect someone's safety, or as part of a sale of the company (and we'd tell you).

What's public

Your handle, display name, profile, builds, posts, comments, chips, Cash Out listings and anything else you put on a public page. Your email address is never shown on the site. The one exception is by design: when you make an offer on a Cash Out listing, we email the seller your offer and your email so they can reply. Offers aren't shown publicly.

How long we keep it

Account data stays until you delete the account. Posts removed by moderation are hidden and kept in the moderation log so decisions can be reviewed or undone. After you unsubscribe, we keep your email on the unsubscribed list so you're never emailed again. Logs and backups can hold old data for a short time after deletion.

Your choices

• Unsubscribe from the newsletter with the link in any issue, or in your settings.
• Edit your profile, builds and posts any time.
• Delete your account: email art@rounderstofounders.com from the address on the account. We do it within 7 days and remove your posts with it.
• Get a copy of your data or correct it: same email.

Depending on where you live (for example California or the EU/UK), you have rights to access, correct, delete or move your data and to object to some uses. Email us and we'll handle it. We don't sell or "share" personal information as California law defines it.

Security

Passwords are hashed, logins are rate-limited, sessions end on every device when you log out or change your password, and payment details never touch our servers. No system is perfect; if something goes wrong that affects your data, we'll tell you.

Kids

R2F is for adults. You must be 18 or older to make an account.

Changes

If we change this policy in a way that matters, we'll update the date at the top and tell members by email or on the site.