Privacy Policy

This Privacy Policy explains what information CupPredictor ("we", "us") collects when you use our website and app (the "Service"), how we use it, and the choices you have. It applies wherever you access CupPredictor, in English or Dutch.

Account information. When you sign up, we collect your name, email address, and a nickname/handle you choose. If you sign in with Google, we receive your name, email, and profile photo from your Google account. If you sign up with email and password, Firebase Authentication (our authentication provider) stores your credentials securely — we never see or store your plain-text password.

League and prediction data. League names, an optional league logo you upload, your match predictions, knockout-bracket picks, and bonus-question answers, plus your membership in any leagues you create or join.

Payment information. When you pay for a league tier, public league entry, or extra player capacity, payment is handled by [TO BE CONFIRMED]. We receive confirmation that a payment succeeded, the amount, and limited metadata (such as the last 4 digits of a card, for your own reference) — we do not receive or store your full card number, CVC, or bank credentials.

Usage and device information. Standard technical data such as IP address, browser type, device type, and pages visited, collected automatically for security, debugging, and to keep the Service working reliably.

Information you give us directly. If you contact support, anything you include in that message (name, email, and message content).

We use one essential cookie to remember your language preference, and browser local storage to keep you signed in, remember your selected league, and complete flows such as email sign-in links and league invitations. We do not currently use advertising or cross-site tracking cookies. If that changes, we'll update this policy and, where required, ask for your consent first.

• To create and secure your account, and let you sign in.
• To operate leagues: recording predictions, calculating scores, and updating leaderboards.
• To process payments and prevent fraud.
• To send you service emails — for example, league invitations, prediction-deadline reminders, or receipts.
• To respond to support requests you send us.
• To maintain, secure, and improve the Service, including diagnosing technical issues.
• To comply with legal obligations.

We do not sell your personal information.

We share information only with service providers who help us run CupPredictor, under contracts that limit how they can use it:

• Google Firebase / Google Cloud — authentication, database, file storage, and hosting.
• [TO BE CONFIRMED] — payment processing.
• Resend — transactional and, where you've opted in, marketing email.

We may also disclose information if required by law, to protect the rights and safety of CupPredictor or our users, or as part of a merger, acquisition, or sale of assets — in which case we'll let you know.

Other members of a league you join can see the display name, nickname, and predictions/scores you've made within that league — that's core to how the Service works.

We keep your account and league data for as long as your account is active, so leagues and history remain available to you and fellow league members. If you delete your account, we delete or anonymize your personal information within a reasonable period, except where we're required to keep records (for example, payment records for tax and accounting purposes) for longer.

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, or to object to or restrict certain processing. You can update most of your information directly in your account settings, or delete your account there. For anything else, contact us — we'll respond within the timeframe required by applicable law (for example, the GDPR for users in the EU/EEA, or the UK GDPR/DPA for users in the UK).

If you're in the EU/EEA or UK, you also have the right to lodge a complaint with your local data protection authority.

CupPredictor is not directed to children under 16, and we don't knowingly collect personal information from them. If you believe a child has provided us with personal information, contact us and we'll delete it.

The bulk of your data — leagues, predictions, and uploaded files — is hosted in the EU. Some processing still happens outside the EU/EEA or UK, for example through Firebase Authentication, our email and AI service providers, and payment processing, some of which run on infrastructure in the United States. Where we transfer personal data out of the EU/EEA or UK, we rely on appropriate safeguards, such as Standard Contractual Clauses, as required by applicable law.

We use industry-standard measures — including encryption in transit, access controls, and our providers' built-in security infrastructure (Firebase, [TO BE CONFIRMED]) — to protect your information. No method of transmission or storage is 100% secure, so we can't guarantee absolute security.

We may update this Privacy Policy from time to time. We'll update the "Last updated" date above, and where changes are material, we'll notify you in the app or by email before they take effect.

Questions about this policy or your data? Visit our Contact Us page.