Data controller
PredictionsWorldCup ("we", "us") is the data controller for personal information collected through this site. For all privacy questions, write to privacy@predictionsworldcup.com. We do not currently maintain an establishment in the EU or UK; for inquiries that require an Article 27 GDPR / UK GDPR representative, contact us at the same address and we will route the request appropriately.
Information we collect
Information you provide directly:
- Email address, when you sign up for our newsletter (double opt-in: we send a confirmation email and only add you once you click the link)
- Message content, when you email us
Information collected automatically:
- Browser type, operating system, device type, screen size, language
- IP address (truncated for privacy before storage where feasible)
- Pages visited, referral source, time on page, scroll depth
- Interaction events (clicks on outbound links, navigation between pages)
- Consent state and Global Privacy Control (GPC) signal, where present
We use Google Analytics 4 for aggregate usage statistics. Analytics only loads after you grant consent in our cookie banner, and is suppressed entirely when your browser sends a Global Privacy Control signal. We do not collect personally identifying information beyond what you explicitly provide (such as your email).
Legal bases for processing (GDPR / UK GDPR)
- Consent (Art. 6(1)(a)) — for analytics cookies, newsletter subscription, and any optional tracking. You may withdraw consent at any time.
- Contract / pre-contract (Art. 6(1)(b)) — to deliver the newsletter you requested.
- Legitimate interests (Art. 6(1)(f)) — to operate the site, prevent abuse, secure our infrastructure, and understand aggregate readership. We balance this against your rights and you may object at any time.
- Legal obligation (Art. 6(1)(c)) — to respond to lawful requests and meet record-keeping duties.
How we use information
- To send newsletter emails to confirmed subscribers
- To understand how the site is used in aggregate and improve it
- To detect and prevent abuse, spam, and security incidents
- To respond to email inquiries and legal requests
Cookies and tracking
We use a small number of strictly necessary cookies (for example, to remember your consent choice, language, and age-gate acknowledgement) which do not require consent. Analytics cookies are loaded only after you accept them in our banner and are honored against the Global Privacy Control signal. We do not use cross-site advertising cookies, retargeting pixels, or behavioral profiling.
You can change your choices at any time on our Privacy Choices page or by clearing cookies in your browser.
How we share information
We do not sell or rent your personal information, and we do not share reader-level data with prediction market platforms or any third party for their own marketing.
We use a limited set of processors who act on our instructions under written agreements:
- Google LLC — Google Analytics 4 (aggregate analytics, only with consent)
- Beehiiv (or successor newsletter provider) — newsletter delivery for confirmed subscribers
- Lovable Cloud / Supabase — hosting, database, and edge functions
Some of these processors are located in the United States. Where personal data of EU/UK residents is transferred outside the EEA or UK, we rely on the European Commission's Standard Contractual Clauses (and the UK Addendum where applicable), together with supplementary measures such as encryption in transit and at rest.
Data retention
- Newsletter subscriber email: until you unsubscribe, plus up to 30 days in backups
- Unconfirmed newsletter sign-ups: deleted automatically after 14 days
- Analytics data: up to 14 months in Google Analytics, then automatic deletion
- Server and security logs: up to 90 days
- Email correspondence: as long as needed to respond, then up to 24 months
Your rights
EU / UK residents (GDPR / UK GDPR):
You have the right to access, rectify, erase, restrict, port, and object to processing of your personal data, and to withdraw consent at any time without affecting the lawfulness of prior processing. You also have the right to lodge a complaint with your local supervisory authority (for example, the Information Commissioner's Office in the UK, the CNIL in France, or your member-state data protection authority).
California residents (CCPA / CPRA):
You have the right to know what personal information we have collected, to request deletion, to correct inaccuracies, to limit the use of sensitive personal information, and to opt out of any sale or sharing of personal information. We do not sell or share personal information as those terms are defined under the CPRA. We honor the Global Privacy Control as a valid opt-out signal. You may also visit our Privacy Choices page.
All readers:
To exercise any of these rights, email privacy@predictionsworldcup.com. We will verify your request using the email address on file and respond within 45 days (extendable by 45 more where permitted). We will not discriminate against you for exercising your rights.
Automated decision-making
We do not engage in automated decision-making or profiling that produces legal or similarly significant effects about you.
Security
We use industry-standard security practices — TLS in transit, encryption at rest with our hosting provider, least-privilege access, and audit logging — to protect the limited data we hold. No system is perfectly secure. If you discover a security issue, email security@predictionsworldcup.com.
Children
PredictionsWorldCup is intended for readers 21 and older in the United States, and 18 and older in jurisdictions where that is the relevant age of majority. We do not knowingly collect information from anyone below those ages. If you believe a minor has submitted information to us, email privacy@predictionsworldcup.com and we will delete it.
Changes to this policy
We may update this policy occasionally. When we make material changes we will update the effective date at the top and, where appropriate, notify newsletter subscribers in advance.
Contact
Privacy questions and rights requests: privacy@predictionsworldcup.com. Security reports: security@predictionsworldcup.com.