Privacy Policy

Last Updated: November 2026
Website: https://www.football-predictor.net
Operator / Data Controller: Football Predictor, 6 Castle Hill, Lancaster, LA1 1YP, United Kingdom
Data Protection Contact: [email protected]

Football Predictor ("we", "us", or "our") is committed to protecting and respecting your personal data. This Privacy Policy details how we collect, store, process, and protect your information when you access our website, create an account, log in using third-party social providers, and participate in our Last Man Standing (LMS) competitions.

INFORMATION WE COLLECT

We collect only the minimum necessary information required to operate competition pools and authenticate player accounts:

A. Direct Account Registration

• Email Address: Serves as your primary account identifier for verification, password resets, and critical competition notices.
• Display Name / Username: Visible to other players on tournament leaderboards and round survival summaries.
• Account Password: Cryptographically hashed using secure, one-way algorithms (bcrypt/argon2). We never store raw passwords.

B. Third-Party Social Logins (Single Sign-On)
When you register or sign in via an external OAuth provider, we request only basic profile permissions:

• Google Sign-In: We retrieve your unique Google Account ID (sub), primary verified email address, display name, and avatar URL. We do not access your Google Drive, contacts, calendar, or device storage.
• Facebook Login (Meta): We access your Facebook User ID, verified email address, and public profile name. We do not access friends lists, timelines, or private messages.
• Sign in with Apple: We receive your Apple unique identifier (sub), your name (if shared), and your verified email (including Apple Private Relay addresses ending in @privaterelay.appleid.com).

C. Competition and Match Selections

Fixture predictions, gameweek team selections, round progression/elimination records, and submission timestamps.

HOW WE USE YOUR INFORMATION

We process your personal information under the lawful bases of contractual performance (delivering the tournament), legitimate interests (platform security and operations), and consent (optional updates):

• Tournament Management: Processing match selections, locking entries at gameweek kickoffs, tracking round survival, and computing leaderboard standings.
• User Authentication: Managing secure sessions, verifying identity during login, and preventing duplicate or unauthorized accounts.
• Transactional Notifications: Sending automated gameweek reminders before pick deadlines, password reset links, and round resolution alerts.

GOOGLE API SERVICES AND USER DATA POLICY COMPLIANCE

Football Predictor's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements (found at https://developers.google.com/terms/api-services-user-data-policy).

A. Requested OAuth Scopes

openid: Validates your authentication token.

https://www.googleapis.com/auth/userinfo.email: Identifies your account via your Google primary email address.

https://www.googleapis.com/auth/userinfo.profile: Obtains your name and profile picture for leaderboard display.

B. Limited Use and Data Sharing Commitments

No Commercial Sale: We do not sell, rent, license, or exchange Google user data with third-party data brokers, marketers, or advertisers.

No Targeted Advertising: Your Google user data is never used to build advertising profiles or deliver personalized ads.

No Machine Learning Training: We do not use Google user data to train, retrain, or fine-tune artificial intelligence or machine learning models.

Human Access Safeguards: No employee or contractor accesses your Google user data unless required to resolve a technical support issue with your explicit permission, prevent platform abuse, or comply with legal obligations.

C. Revoking Google Account Permissions

You can revoke Football Predictor's access to your Google account at any time by visiting your Google Account Permissions Page at https://myaccount.google.com/permissions.

DATA STORAGE AND SECURITY STANDARDS

All data is maintained in strict compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018:

• All browser communication is encrypted in transit using Transport Layer Security (TLS/HTTPS).
• Database stores are protected behind isolated private networks and monitored with strict access controls.

DATA RETENTION AND ACCOUNT DELETION

We keep your profile and competition history only as long as your account is active. You may request complete erasure of your account and related records at any time:

• Self-Service: Navigate to your Account Settings page and click Delete Account.
• Email Request: Email [email protected] with the subject line "Data Deletion Request".
• All personal identifiers, prediction entries, and OAuth linkages are permanently deleted within 30 days of verification.

META (FACEBOOK) DATA DELETION INSTRUCTIONS

If you authenticated using Facebook Login and wish to remove your user profile data:

• Log into your Facebook account and go to Settings & Privacy > Settings.
• Select Apps and Websites in the sidebar.
• Find Football Predictor and click Remove.

To erase all past game selections and account details associated with your Facebook User ID from our systems, email [email protected].

EMAIL COMMUNICATIONS

We deliver competition notifications in accordance with the Privacy and Electronic Communications Regulations 2003 (PECR):

Service-Related Alerts: Critical transaction messages (pick confirmations, deadline warnings, password resets) are necessary for competition play.

Marketing Updates: Promotional newsletters are sent only with your prior explicit consent. You can unsubscribe at any point via the link in each email footer.

EXTERNAL LINKS AND AFFILIATES

Our platform may include links to sports data providers, third-party platforms, or partner sponsors. We do not control and cannot accept liability for the independent privacy policies or terms of third-party domains.

YOUR RIGHTS UNDER UK GDPR

Under UK data protection law, you hold statutory rights including the Right of Access, Right to Rectification, Right to Erasure, Right to Restrict Processing, and Right to Data Portability. These requests are fulfilled free of charge.

To exercise your statutory rights, contact:

Data Protection Officer
Football Predictor
6 Castle Hill
Lancaster, LA1 1YP
United Kingdom
Email: [email protected]

If you feel your personal data has been handled improperly, you may lodge a formal complaint with the UK supervisory authority: the Information Commissioner’s Office (ICO) at https://ico.org.uk.