Privacy Policy
Predictor is a free football prediction game. We collect what we need to run it — your email, a display name, and your picks — and nothing else. We don't sell data, we don't run ads, we don't build marketing lists, and our analytics are anonymous and cookieless. You can delete your account (and everything with it) yourself, any time.
This policy explains what personal data Predictor collects, why, who processes it on our behalf, and the rights you have over it. It is written to comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, and it applies to everyone who uses the service wherever they are.
1.Who we are
Predictor is the prediction game available at predictor.so, operated from the United Kingdom. The operator of the service is the data controller for the personal data described in this policy. For anything privacy-related, contact support@predictor.so.
2.What we collect
Account details
- Email address — your sign-in identity. We send a one-time code to it each time you sign in; we never store a password.
- Profile — your name, display/team name, favourite team, avatar and avatar colours, timezone, and (optionally) a phone number if you add one.
- Google sign-in — if you choose "Continue with Google", Google shares your name, email address and profile picture with us to create or match your account. We receive nothing else from your Google account.
Gameplay
- Predictions and results — your picks, scores, points, league memberships and standings. Your picks and results are visible to other players in your leagues (that's the game); hidden picks stay hidden until the round locks, per the game rules.
Communications
- Email records — a log of the transactional emails we send you (sign-in codes, pick reminders): recipient, subject and delivery status, including bounces, so sign-in keeps working and we stop mailing dead addresses.
- Notification preferences — which reminders you've turned on or off.
Technical
- Session data — the cookies that keep you signed in (see section 5).
- Server logs — our hosting providers keep standard request logs (IP address, browser type, timestamps) for security and reliability.
3.Why we use it (lawful bases)
- Running the game — accounts, picks, scoring, leagues, and the transactional emails that make sign-in work (performance of a contract).
- Pick reminders — sent only according to the notification settings you control in your account.
- Product analytics — anonymous, aggregate usage so we can see what works (legitimate interests; see section 4).
- Security and abuse prevention — keeping the service and its players safe (legitimate interests).
We do not sell or rent personal data, run advertising, share data with data brokers, use it to train AI models, or add you to marketing lists.
4.Analytics
We use PostHog, hosted in the EU, to understand aggregate product usage — which pages get visited, which features get used. It runs in cookieless, anonymous mode: it stores nothing on your device and we don't connect analytics events to your account. It is not used for advertising or shared with anyone.
5.Cookies
We only use cookies that are strictly necessary to run the service, plus small functional preferences. We set no analytics or advertising cookies, which is why you don't see a cookie banner.
| Cookie | Purpose | Type |
|---|---|---|
| Auth session | Keeps you signed in between visits. | Essential |
| UI preferences | Remembers interface choices (e.g. which design variant of a screen you use). | Functional |
| Theme (local storage) | Remembers your light/dark preference. Never leaves your browser. | Functional |
6.Who processes your data
We use a small number of service providers to run Predictor. They process data only on our instructions and can't use it for their own purposes:
| Provider | What for | Where |
|---|---|---|
| Convex | Database and application backend (accounts, picks, leagues). | United States |
| Vercel | Web hosting and delivery of the app. | United States |
| Resend | Sending transactional email (sign-in codes, reminders). | United States |
| PostHog | Anonymous product analytics (section 4). | European Union |
| Sign-in only, and only if you choose to sign in with Google. | United States |
7.International transfers
Some of the providers above store data in the United States. Where personal data leaves the UK, we rely on recognised safeguards — the UK Extension to the EU-U.S. Data Privacy Framework where the provider is certified, or the UK International Data Transfer Agreement / Standard Contractual Clauses otherwise — so it keeps equivalent protection wherever it is stored.
8.How long we keep it
We keep your data for as long as your account exists. If you delete your account (Account → Credentials → Delete account), your profile, picks, stats and league standings are permanently deleted — including any leagues you administer. Email delivery logs and server logs are kept for a limited period for security and reliability, then deleted.
9.Your rights
Under UK GDPR you can ask us to:
- show you the personal data we hold about you (access);
- correct it (rectification) — most of it you can edit in-app;
- delete it (erasure) — the in-app delete does this immediately;
- restrict or object to how we process it;
- give you a copy in a portable format (portability).
Email support@predictor.so and we'll respond within one month. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk).
10.Children
Predictor is not directed at children under 13, and we don't knowingly collect their data. If you believe a child under 13 has an account, contact us and we'll delete it.
11.Changes to this policy
If we change how we handle personal data — for example, adding a new provider — we'll update this page and the date at the top, and flag significant changes in the app.
12.Contact
Questions about this policy or your data: support@predictor.so.