Privacy Policy

World Cup 2026 Predictor ("we", "our", "us") operates the website at predictwc.org. We provide a paid prediction game for the FIFA World Cup 2026 tournament.

For questions about this policy, contact us at hello@predictwc.org.

When you create an account and use our service, we collect:

• Account data: email address, password (hashed), display name
• Profile data: nationality, supported team, year of birth (optional), email preferences
• Prediction data: your group-stage rankings, knockout picks, champion pick, award picks
• Payment data: handled by Stripe — we never see or store your card details
• Technical data: IP address (used for regional pricing detection), browser type, device, timestamps of activity
• League data: private leagues you create or join, your members

• Operate the prediction game (score your picks, show standings)
• Process your entry payment via Stripe
• Detect your region to show local pricing
• Send match-day reminders if you opted in
• Send the weekly newsletter if you opted in
• Communicate transactional messages (confirmations, password resets)
• Improve the product through aggregated, anonymized analytics

We rely on these providers — each has their own privacy policy:

• Supabase — database and authentication (privacy policy)
• Vercel — website hosting (privacy policy)
• Stripe — payment processing (privacy policy)
• Google — if you choose "Sign in with Google" (privacy policy)
• football-data.org — fetches official match results

We use cookies and similar technologies only for essential functions: keeping you signed in, remembering your session, and detecting your region for pricing. We do not use advertising or tracking cookies.

Under data protection laws (including GDPR and CCPA), you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your account and all associated data
• Export your data in a portable format
• Withdraw consent for marketing emails at any time
• Lodge a complaint with a data protection authority

To exercise any of these rights, email us at hello@predictwc.org. We respond within 30 days.

We keep your account data while your account is active. If you delete your account, we remove your personal data within 30 days. We may retain anonymized prediction data indefinitely for historical and analytics purposes.

Payment records are retained for 7 years as required by tax law.

Our service is not directed to children under 13. We do not knowingly collect data from anyone under 13. If we learn we have collected data from a child under 13, we delete it immediately. Users in the EU must be at least 16 to use our service.

Your data is processed in the United States and the European Union (Supabase region). By using our service, you consent to this transfer. We rely on Standard Contractual Clauses with our processors where required.

We use industry-standard security including encrypted database connections, hashed passwords, and Row Level Security policies. No system is 100% secure — if you suspect unauthorized access to your account, contact us immediately.

We may update this policy from time to time. If we make significant changes, we'll email you. The "Last updated" date at the top reflects the most recent changes.

Questions, requests, or concerns: hello@predictwc.org