Privacy Policy

WorldCupLeague.com (“we”, “us”) is an online prediction game platform for FIFA World Cup 2026. Contact: [email protected]

When you use the Platform we may collect:

• Account data — email address, display name, username, avatar (via Google OAuth or email registration).
• Prediction data — your score predictions, submission timestamps, points earned.
• Usage data — pages visited, browser type, IP address, referrer, approximate location derived from IP.
• Communication data — messages you send to us by email.

• To provide and operate the prediction game service.
• To display your predictions and ranking to other members of leagues you join.
• To send transactional emails (password reset, email verification, league invitations).
• To improve the Platform through aggregated, anonymised analytics.
• To comply with legal obligations.

We do not sell your personal data.

If you are in the European Economic Area, our legal bases for processing are:

• Contract performance — processing necessary to provide the service you signed up for.
• Legitimate interests — security, fraud prevention, analytics.
• Consent — optional cookies and marketing communications (which you may withdraw at any time).

We share data with:

• Supabase — database and authentication infrastructure (EU data residency).
• Google — if you sign in with Google OAuth.
• Cloudflare — CDN and DDoS protection.
• Vercel / hosting provider — server-side rendering infrastructure.

No other third parties receive your personal data without your consent.

Your predictions become visible to other members of the same league once the relevant match has kicked off (or earlier if the league owner enables it). Your username and display name are shown alongside your predictions. You can set your predictions to be hidden from others until kick-off in your account settings.

We retain your account data for as long as your account is active. You can delete your account at any time; prediction data linked to your account will be anonymised within 30 days. We may retain aggregated, non-identifiable statistics indefinitely.

Under GDPR and applicable law you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request erasure (“right to be forgotten”).
• Object to or restrict processing.
• Receive your data in a portable format.
• Lodge a complaint with a supervisory authority.

To exercise these rights, email [email protected]. We will respond within 30 days.

We use cookies for authentication sessions and analytics. See our Cookie Policy for details.

The Platform is not directed at users under 18. We do not knowingly collect personal data from minors.

We may update this Policy at any time. We will notify you of material changes by email or in-app notice. Continued use constitutes acceptance.