Privacy policy

The data controller is [Sponsor legal name — to be confirmed], [registered address — to be confirmed]. For anything in this policy, including a deletion request, write to [contact email — to be confirmed].

When you create an account with an email address:

• Your email address, used to sign you in and to contact you about your account or a prize.
• Your handle and display name, which you choose and which other players can see.
• A password, stored only as a hash by our authentication provider. We never see or store the password itself.

When you sign in with Facebook, we receive instead:

• Your name, your Facebook account identifier and, where you have granted it, your email address and profile picture URL.
• Nothing else. We do not request your friend list, your posts, your page activity or permission to publish anything.

As you play, we store:

• Every prediction you submit, with the time it was submitted and the time it locked.
• The points each prediction scored and your running monthly total.
• Your highest rank reached and the number of months you finished at position #1.

We do not ask for your date of birth beyond confirming you are 18 or over, your address, your phone number or any payment detail. There is nothing to pay, so there is no card to store. We do not run advertising trackers or sell data to anyone.

We process your account data to perform the agreement set out in the Terms of service — without it we cannot score your predictions or place you on the board. We process the limited data needed to detect duplicate accounts and automated entry on the basis of our legitimate interest in keeping the contest fair to every entrant.

• Supabase — authentication, database and session storage. Your account record and your predictions live here.
• Meta Platforms — only if you choose to sign in with Facebook, and only for that sign-in exchange.
• Our hosting and content delivery provider, which handles the request logs any web server produces.
• A third-party sports data provider, which supplies final scores. We send it nothing about you.

Each processor is bound to use the data only to provide its service to us. We do not disclose your data to anyone else except where we are required to by law.

We set one session cookie so that you stay signed in between pages. It is strictly necessary for the service to function, it carries no advertising identifier and it is not shared with third parties. We use no analytics or marketing cookies.

Your handle, display name, rank, monthly points and board position are public inside the game. Your predictions become visible to other players when the game they cover locks, never before. Your email address is never shown to anyone.

Your account data is kept for as long as your account is open. When you close it, we delete your email address, your display name and your avatar within 30 days. Historic results may be retained in an anonymised form, with no identifier linking them back to you, so that past monthly boards remain correct.

• Access — ask for a copy of what we hold about you.
• Correction — ask us to change your handle, display name or avatar.
• Deletion — ask us to close your account and we will remove it.
• Objection and restriction — tell us if you object to a particular use and we will stop unless we are legally required to continue.

Write to [contact email — to be confirmed] and we will respond within 30 days. Residents of certain jurisdictions have additional statutory rights which this policy does not limit.

The service is for adults. We do not knowingly collect data from anyone under 18. If you believe a minor has created an account, tell us and we will remove it.

If we change how we handle your data we will update this page and the date at the top of it. Where a change is material we will tell account holders before it takes effect.