Privacy policy

Data controller

The controller of your data is the owner identified in the legal notice. You can contact them at the email address given there about anything relating to this policy.

What data we collect

We only process the data needed for the game to work. Specifically:

• Account data: name, username, email address, password (stored hashed, never in plain text), preferred language and, if you sign up with Google, that account identifier and your profile picture.
• Game data: your predictions, your scores, the competitions you take part in and the groups you belong to.
• Technical data: IP address and session data, processed for security reasons and to keep you signed in.

We collect no payment data, because the service is free, and no special categories of data.

Legal basis and purpose

• Performance of a contract (art. 6.1.b GDPR): creating and maintaining your account, recording your predictions and calculating the standings. Without this data the service cannot be provided.
• Legitimate interest (art. 6.1.f GDPR): service security, abuse prevention and correct technical operation.
• Consent (art. 6.1.a GDPR): cookies or technologies that are not strictly necessary, once any exist. You may withdraw it at any time.

What other users can see

Your username, profile picture and scores are visible to other participants in your competitions and groups. Your individual predictions only become visible once the matchday closes. Your email address is never shown to other users.

Recipients and processors

We do not sell or transfer your data. It is shared only with the providers needed to run the service:

• Hostinger International Ltd. — website and database hosting (European Union).
• Resend — transactional email delivery (account verification, password recovery).
• Google Ireland Ltd. — only if you choose to sign up or sign in with your Google account.
• football-data.org — sports data provider. It receives none of your personal data.

Retention

We keep your data for as long as your account remains active. If you delete it, your personal data is erased; historical scores may be kept in anonymised form so that already-played seasons' standings are not distorted.

Your rights

Security

The site is served entirely over HTTPS, passwords are stored using one-way hashing and database access is restricted. No system is infallible, but we apply the technical measures reasonable for a service of this kind.