Privacy Policy

1. Introduction

The Safety Arena ("we," "us," or "our") operates tsarena.ai. This Privacy Policy explains what information we collect, how we use it, and your choices regarding your data. We are committed to transparency and minimal data collection.

2. Information We Collect

Account Information: When you create an account, we collect your email address and a hashed password. If you sign in via Google or X (Twitter) OAuth, we receive your public profile information (name and email) from those providers. We do not receive or store your OAuth passwords.

Voting Data: When you cast a vote, we record your vote choice, the models compared, the prompt shown, and any optional reasoning you provide. We also record the time you spent reviewing responses before voting.

Device and Browser Information: We use FingerprintJS to generate a device fingerprint for vote integrity purposes. This helps us detect duplicate accounts and coordinated manipulation. We also collect your IP address when you vote to identify potential bot farms or coordinated voting from a single network.

Basic Analytics: We collect basic engagement data including scroll depth and time on page to help us improve the voting experience and detect automated behavior.

3. How We Use Your Information

We use collected information for the following purposes:

• Vote Integrity: To ensure one real human gets one real vote, detect bot activity, and prevent coordinated manipulation of safety rankings.
• Platform Operation: To authenticate users, process votes, and generate AI safety leaderboards and benchmarks.
• Transparency and Research: To publish anonymized, aggregated voting data and safety benchmarks. Individual votes are never published with identifying information.
• Platform Improvement: To improve the voting experience, fix bugs, and develop new features.

4. What We Do NOT Do

We want to be explicit about what we will never do with your data:

• We do not sell your personal information to anyone.
• We do not display advertisements or share data with advertisers.
• We do not send marketing emails or promotional communications.
• We do not share your individual voting data with AI companies whose models are being evaluated.
• We do not use your data to train AI models.

5. AI Technologies

The Safety Arena evaluates AI model responses through blind pairwise comparisons. When you participate in a battle, two AI models generate responses to the same safety-related prompt. You see these responses anonymously (labeled "Response A" and "Response B") and vote on which is safer. Model identities are revealed only after you vote.

We do not use AI to make decisions about your account or voting rights. Vote integrity checks use rule-based systems (time thresholds, fingerprint matching, IP correlation), not AI classifiers.

6. Data Storage and Security

Your data is stored on Supabase, a secure cloud database platform. Passwords are hashed and never stored in plain text. We use HTTPS for all data transmission. Access to the database is restricted to authorized administrators only.

While we implement reasonable security measures, no system is 100% secure. We will notify affected users promptly in the event of a data breach.

7. Cookies and Tracking Technologies

We use minimal cookies and tracking:

• Authentication Cookies: Essential cookies to keep you signed in during your session.
• FingerprintJS: A device fingerprinting library used solely for vote integrity. It does not track you across other websites.

We do not use advertising cookies, social media tracking pixels, or third-party analytics services that track you across the web.

8. Data Sharing

We share data only in these limited circumstances:

• Anonymized Aggregates: We publish aggregated voting statistics and AI safety leaderboards. These never contain personally identifiable information.
• Service Providers: We use Supabase (database), GitHub Pages (hosting), Cloudflare (security/CDN), and FingerprintJS (device fingerprinting) to operate the platform. These providers process data on our behalf under their respective privacy policies.
• Legal Requirements: We may disclose information if required by law, legal process, or to protect the rights and safety of our users or the public.

9. Your Rights and Choices

You have the following rights regarding your data:

• Access: You can request a copy of the personal data we hold about you.
• Deletion: You can request deletion of your account and associated personal data.
• Correction: You can request correction of inaccurate personal data.
• Export: You can request your data in a portable format.

To exercise any of these rights, contact us at david@trainingrun.ai. We will respond within 30 days.

10. Children's Privacy

The Safety Arena is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will delete it promptly. If you believe a child has provided us with personal information, please contact us.

11. International Users

The Safety Arena is operated from the United States. If you are accessing the platform from outside the United States, please be aware that your data may be transferred to and processed in the United States. By using The Safety Arena, you consent to this transfer.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes by posting a notice on the platform. Your continued use of The Safety Arena after changes are posted constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

Email: david@trainingrun.ai
Project: The Safety Arena
Organization: Training Run (trainingrun.ai)