Privacy Policy
Last updated: February 27, 2026
This page explains what data we collect and how we use it.
1. Overview
This policy describes how data is handled in World Cup 2026 Tournament Predictor. By using the service, you agree to this policy.
2. Data We Collect
Data entered by users
- Nickname: Display name for league participation
- Admin password: Set when creating a league (stored as hash)
- Prediction data: Group standings and knockout picks
Data collected automatically
- Session data: Admin login cookie (7-day validity)
- Access logs: IP address and request information
- Analytics data: Aggregated stats via Google Analytics
Data not collected
- Direct personal identifiers such as email, phone number, or address
- Standard participant login credentials (access is controlled by entry URL)
3. Purpose of Use
- Operate leagues and manage predictions
- Calculate scores and display rankings
- Admin authentication and session control
- Security and abuse prevention
4. Third-Party Services
We use the following third-party services. Please review their policies as well.
Hosting and CDN delivery.
Usage analytics for service improvement.
Affiliate links
External services apply their own privacy policies after link navigation.
Except where required by law, we do not provide personal information to other third parties.
6. Data Retention
- League and prediction data are stored during service operation
- Admin sessions expire after 7 days
- Old sessions are removed when admin URL is rotated
- All data will be removed if service is terminated
7. Security
- Passwords are stored as hashes
- Timing-attack-resistant comparison is used
- Session cookies use httpOnly and SameSite settings
- Admin codes can be rotated
8. Policy Changes
This policy may be updated without prior notice. The latest version is posted on this page.
9. Contact
For privacy-related requests or questions, please use the contact form.
Open contact form