Legal

Privacy Policy

Effective 5 June 2026 · Last updated 9 June 2026

The short version: we collect only what the free game needs, we don't sell your data, your picks stay private until kickoff, and you can access or delete your data anytime.

1. Overview

This policy explains what Unleash World Cup ’26 (the free prediction game at unleashworldcup.com) collects, how it's used, and the choices you have. We keep it to the minimum needed to run a fair game, and we don't sell your data.

2. What we collect

Category	What it includes
Account	Your email, and either a password (stored only as a secure hash by our auth provider) or a Google sign-in identifier and the basic Google profile you authorise (name, email, photo).
Player profile	Display name, username/handle, chosen avatar, and the nation you back to win.
League membership	Which league you're in, your role (admin or player), and a league's join code if you create or join one.
Gameplay	Your predictions, Unleash boosts, title pick, points, and standings, with timestamps as a fair-play record.
Technical & usage	IP address, device/browser type, and basic logs needed for security and to operate the game.
Messages	Anything you send us for support or feedback, and the email you contact us from.

We don't ask for sensitive information, and there's no payment data — the game is free.

3. How we use it

Create and secure your account and sign you in.
Run the game — record predictions, lock them before kickoff, score from official results, and build leaderboards.
Operate leagues — membership, roles, and invitations.
Keep things fair and secure — detect and prevent cheating, multi-accounting, and abuse.
Respond to your messages, and send occasional essential service notices.

4. Cookies & local storage

We keep these to a minimum, with no advertising tracking: a secure session cookie from our auth provider so you stay signed in, and small local-storage values (for example, remembering which league you intended to join from a sign-up link). You can clear them in your browser, but sign-in won't work without the session cookie.

5. What other players can see

A prediction game is social. Within your league, others can see your handle, avatar, supported nation, points, and rank, and open your player card.

Your prediction for a match stays private until that match locks. After it locks, your pick (and whether you Unleashed it) becomes visible to others in your league. This is enforced at the database level so the game is fair — it's how the game works, not an optional setting.

6. Who we share it with

We don't sell your data. We use a few service providers to run the game:

Provider	Purpose
Supabase	Database and authentication — stores your account, profile, and gameplay.
Vercel	Hosting and content delivery for the site.
Google	Optional Google sign-in (when you choose it).
Football data provider	Fixtures, kickoff times, and results used to score the game (none of your data goes to them).
Google (Gemini AI)	Generates the optional AI match predictions. We send only the match-up and stage (public team info) — none of your personal data.
Analytics	Privacy-light product analytics to understand how the game is used.

We may also disclose information if required by law or to protect the game and its players.

7. How long we keep it

We keep your information while your account is active. If you delete your account, we delete or anonymise your personal information within a reasonable period, except anything we must keep for fair-play or legal reasons. Aggregate data that no longer identifies you may be kept.

8. Security

We use reasonable measures — encryption in transit, hashed passwords, access controls, and database row-level security that keeps your unlocked predictions private until kickoff. No system is perfectly secure, so please use a strong, unique password.

9. Your choices

You can edit your profile in the app anytime, and you can ask us to access or delete your data by emailing hojae.hotherside@gmail.com from your account email. Depending on where you live you may have additional rights under local data-protection law.

10. Children

The game is for people aged 13 and over. We don't knowingly collect data from anyone younger — if you believe a child has provided us information, email hojae.hotherside@gmail.com and we'll remove it.

11. Changes & contact

We may update this policy from time to time and will update the “Last updated” date. Questions about your privacy? Email hojae.hotherside@gmail.com.