Privacy Policy

1. Introduction

League Predictions is a hobby project that respects your privacy. This policy explains what data we collect and how we use it.

You can create an account using either email and password or Google Sign-In. The data we collect depends on which authentication method you choose.

2. Google Sign-In Data Usage (Optional)

This section only applies if you choose to sign in with Google. Google Sign-In is an optional, convenient authentication method. You can alternatively create an account using email and password.

If you use Google Sign-In, we use Google user data only for authentication purposes and do not use it for any other purpose.

What Google Data We Collect

When you sign in with Google, we receive and store:

• Email address - Required to identify and authenticate your account
• Name - Used to create your initial username (which you can change)
• Profile picture URL - Stored but not currently displayed in the application

How We Use Google Data

Your Google data is used exclusively for:

• Creating and identifying your account
• Authenticating you when you sign in
• Maintaining your login session (we request offline access to keep you signed in)

What We Do NOT Do With Google Data

In compliance with the Google API Services User Data Policy, we do NOT:

• Use your data for advertising or marketing
• Use your data to train AI or machine learning models
• Share your Google data with third parties (except Supabase, our authentication provider - see section 5)
• Sell or rent your data
• Access any other Google services or data beyond authentication

Offline Access & Session Maintenance

We request access_type: 'offline' during Google Sign-In to maintain your login session. This allows you to stay signed in without needing to re-authenticate frequently. The refresh tokens are securely managed by our authentication provider (Supabase) and are never exposed to our application code.

Limited Use Disclosure

League Predictions' use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. For more information about how Google handles your data during authentication, see Google's Privacy Policy.

3. Other Information We Collect

Email/Password Accounts

If you create an account with email and password, we collect:

• Email address - Required to identify and authenticate your account
• Password - Securely hashed and stored (we never store plain-text passwords)
• Username - Your chosen display name

Usage Data Created by You

Regardless of your authentication method, we also store:

• Your league predictions and rankings
• Groups you create or join
• Scores and timestamps of your predictions

4. How We Use Your Information

We use your information to:

• Authenticate you and maintain your account (email/password or Google data)
• Display your predictions and scores
• Show leaderboards within your groups
• Calculate and update your scores

5. Third-Party Services & Data Sharing

Your predictions and scores are visible to other members of groups you join. We do not sell, rent, or share your personal information with third parties for marketing purposes.

Third-Party Services We Use

• Google OAuth (Optional): If you choose Google Sign-In, Google provides the authentication service. See Google's Privacy Policy
• Supabase: Database and authentication provider for both email/password and Google Sign-In accounts. If you use Google Sign-In, your Google email is shared with Supabase as it is necessary to provide the authentication service. See Supabase Privacy Policy
• Football-Data.org: Provides league standings data via API. No Google user data is shared with this service.
• Vercel: Hosting platform. No Google user data is shared with this service beyond standard server logs.
• Cloudflare Turnstile: Bot protection on signup/login forms. No Google user data is shared with this service.

What We Do NOT Share

Your Google data (email, name, profile picture) is:

• NOT shared with Football-Data.org
• NOT shared with analytics services (we don't use any)
• NOT shared with advertising networks
• NOT sold or rented to anyone
• Only shared with Supabase (our authentication and database provider) as necessary for the service to function

6. Tracking and Analytics

We do not use cookies for tracking or third-party analytics services. This is a simple hobby project with minimal tracking.

7. Data Retention & Deletion

Data Retention

We retain your Google-provided data (email and name) only while your account is active. Your predictions, group memberships, and other usage data are also retained while your account exists.

Account & Data Deletion

You can request deletion of your account and all associated data at any time.

To delete your account: Email admin@s-12.com with your deletion request. Include the email address associated with your account.

We will process deletion requests within 30 days.

What Gets Deleted

When you delete your account, we permanently remove:

• Your profile information (email, name, username)
• All your predictions and rankings
• Your group memberships
• Groups you own (which will also remove all members from those groups)
• All scores and timestamps associated with your account
• Your authentication records

This deletion is permanent and cannot be undone. After deletion, you can create a new account with the same email address if you wish to use the service again.

8. Data Security

We use industry-standard security practices including:

• HTTPS encryption for all connections
• OAuth 2.0 for authentication
• Row Level Security (RLS) in our database
• Secure hosting infrastructure

However, as a hobby project, we cannot guarantee absolute security. Use the service at your own risk.

9. Your Rights

You have the right to:

• Access your personal data
• Request deletion of your account and data
• Update your information through your account settings

10. Children's Privacy

This service is not intended for children under 13. We do not knowingly collect information from children under 13.

11. Changes to This Policy

We may update this privacy policy from time to time. Continued use of the service after changes constitutes acceptance of the updated policy.

12. Contact

For privacy-related questions, data deletion requests, or other concerns, please contact us at admin@s-12.com.