Privacy Policy
Privacy Policy
Last Updated: May 8, 2026
Introduction
WorldCupGuessr ("we", "us", or "our") operates the website www.worldcupguessr.com. This Privacy Policy explains how we collect, use, and protect your personal information when you use our service.
Information We Collect
- Account Information: When you create an account, we collect your name, email address, and a public username you choose. If you sign in with Google, we receive your name and email address from Google.
- Predictions & Gameplay Data: We store the match score predictions and tournament predictions you submit, along with your points and standings within your groups.
- Group Membership: We store which groups you belong to, your role within each group (member or creator), and the invite codes associated with your groups.
- Payment Information: If you purchase a group upgrade, payment is processed entirely by Stripe. We do not collect or store your credit card details, billing address, or other financial information. We only receive confirmation that a payment was completed and which group it applies to.
- Preferences: We store your theme preference (light or dark mode), language preference, date format, and timezone settings in browser cookies.
- Push Notification Tokens: If you opt in to push notifications, we store your browser's push subscription endpoint to deliver notifications.
- Avatar Settings: We store your chosen avatar style and seed value used to generate your profile avatar. No photographs or images are uploaded.
How We Use Your Information
- To provide and maintain the prediction game service
- To display your predictions, scores, and rankings to other members of your groups
- To display your public username on leaderboards visible to your group members
- To send push notifications about upcoming matches (only if you opt in)
- To process group upgrade payments through Stripe
- To communicate with you about your account if necessary
Third-Party Services
- Supabase: Our database is hosted on Supabase (supabase.com), which stores all account and gameplay data. Supabase acts as our data processor. Their privacy policy is available at supabase.com/privacy.
- Google OAuth: If you choose to sign in with Google, your authentication is handled by Google's OAuth service. We receive only your name and email address. Google's privacy policy is available at policies.google.com/privacy.
- Stripe: Group upgrade payments are processed by Stripe (stripe.com). When you make a purchase, Stripe handles all payment information directly. Their privacy policy is available at stripe.com/privacy.
- football-data.org: We use the football-data.org API to retrieve match schedules and results. No user data is shared with this service.
- Web Push: If you opt in to push notifications, browser delivery uses the standard Web Push protocol with VAPID keys. No advertising or analytics network is involved.
Cookies
We use a small number of functional cookies to operate the service. These are not used for tracking or advertising.
We do not use any analytics, advertising, or third-party tracking cookies.
- locale — Stores your language preference (e.g., "en" or "es")
- theme — Stores your theme preference ("light" or "dark")
- active_group_id — Remembers which group you last viewed
- active_tournament_id — Remembers which tournament you last viewed
- Session cookies — Used for authentication to keep you logged in
Data Retention
We retain your account data and gameplay history for as long as your account is active. If you delete your account, all your personal data — including your predictions, group memberships, and standings — is permanently removed from our systems. Account deletion is available from the Settings page.
Your Rights
- Access: You can view all data associated with your account within the application at any time.
- Deletion: You can permanently delete your account and all associated data from the Settings page. This action is irreversible and removes all your personal information, predictions, and group memberships.
- Data Portability: You may contact us to request a copy of your data.
- Correction: You can update your name and public username from the Settings page.
Children's Privacy
WorldCupGuessr is not directed at children under 16. We do not knowingly collect personal information from children under 16. If you believe a child under 16 has created an account, please contact us and we will delete it.
Security
We take reasonable measures to protect your personal data. All data is transmitted over HTTPS. Database access is restricted to authenticated server-side operations. However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify users of significant changes by updating the "Last Updated" date at the top of this page. Continued use of the service after changes constitutes acceptance of the updated policy.
Contact Us
If you have questions about this Privacy Policy or your personal data, contact us at info@worldcupguessr.com.