Privacy Policy

PredictBall is a free-to-play football score prediction platform built for the 2026 FIFA World Cup. It is a personal project, not a commercial entity. If you have any questions about this policy, contact us at predict.ball.admin@gmail.com.

We collect only the minimum data required to run the platform:

• •Google OAuth profile — your name, email address, profile picture URL, and Google ID, collected when you sign in with Google.
• •Email and password — if you choose to register with an email address instead of Google, your email is stored and your password is stored as a secure bcrypt hash. We never store plain-text passwords.
• •Predictions — the score predictions you submit, along with the points they earn.
• •League membership — the private leagues you create or join.

• •To authenticate you and maintain your session via an HTTP-only JWT cookie.
• •To display your name and avatar across the platform.
• •To record your predictions and calculate your points.
• •To power league standings and global leaderboards.

We do not use your data for advertising, analytics profiling, or any other purpose.

We do not sell, rent, or share your personal data with any third party. Your name and avatar are visible to other users in shared standings and league tables. Your email address is never shown to other users.

We use a single HTTP-only cookie to store your authentication token (JWT). This cookie is essential for the platform to function and cannot be opted out of while you are signed in. It expires according to the configured JWT lifetime (default: 7 days) or when you log out.

We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

Your account data is retained for as long as your account exists. If you would like your account and associated predictions deleted, contact us at predict.ball.admin@gmail.com and we will process the deletion within 7 days.

Passwords are hashed with bcrypt. Authentication tokens are stored in HTTP-only cookies (not accessible to JavaScript). We use TLS for all data in transit. The platform is hosted on infrastructure with standard security practices.

We may update this policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Continued use of the platform after changes constitutes acceptance of the updated policy.

If you have a verified email address, we may send you transactional emails related to the platform, including:

• •Match reminders — an automated email sent approximately 3 hours before each match to remind you to submit your prediction before the deadline closes. These are only sent for matches you have not yet predicted.

These emails are enabled by default. You can opt out at any time by toggling "Match reminders" on your profile page. We do not send marketing, promotional, or advertising emails of any kind.