ScoreCup ("we", "us", "our") respects your privacy and is committed to protecting your personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable national laws. This Privacy Policy explains what data we collect, how we use it, and the rights you have.
1. Data We Collect
- Account data: name, username, email, password (hashed), phone, country, date of birth.
- Profile data: avatar, language preference, notification settings.
- Gameplay data: predictions, picks, tickets, league memberships, results.
- Payment data: processed by Stripe; we store only entry status and reference IDs.
- Technical data: IP address, device, browser, log timestamps for security and abuse prevention.
- Cookie data: see our Cookie Policy.
2. Why We Collect It (Legal Basis)
- To provide the service (contractual necessity).
- To process payments and prevent fraud (legal obligation, legitimate interest).
- To send transactional and (with consent) marketing emails or push notifications.
- To improve ScoreCup using analytics (consent).
3. Data Retention
We keep your account data while your account is active. If you delete your account, we remove personal data within 30 days. Some records (e.g. payment logs) are retained for up to 7 years where required by law.
4. Your Rights
- Access — request a copy of your data.
- Rectification — correct inaccurate data.
- Erasure — delete your account and personal data.
- Restriction & objection — limit or object to processing.
- Portability — download your data in a machine-readable format.
- Withdraw consent — at any time, for any consent-based processing.
- Lodge a complaint with your national data protection authority.
Manage these rights from your Privacy Settings.
5. Third Parties
- Supabase — authentication, database, storage (EU region where available).
- Stripe — payments.
- Email and push delivery providers — transactional messaging.
6. Security
We use encryption in transit (HTTPS), encrypted storage, Row Level Security policies, password hashing, and least-privilege server access. No system is 100% secure, but we treat your data with care.
7. Children
ScoreCup is strictly for users aged 18 and over.
8. Contact
For any privacy request, contact us at privacy@scorecup.app.
This is a template draft. Please have it reviewed by a qualified lawyer before relying on it.