Mundialito
Back home

Programme · privacy

What we keep, why, and how to take it back.

Short version — we keep the minimum we need to run a friendly prediction pool. Your email and display name come from Clerk, your predictions and league memberships sit in our database, and you can export the whole thing as JSON or CSV at any moment. There is no ad tracking and no resale of anything.

What we collect

A short list, all of it load-bearing.

When you sign in we receive your email address and display name from Clerk, our authentication provider. As you use the app we store the predictions you submit, the leagues you create or join, your interface language, and a global-leaderboard opt-in flag (default on, you can turn it off in Settings). If you send a feedback note we keep the text, optionally your reply-to email, and a one-way SHA-256 hash of your IP address — the hash is used only to throttle abuse and cannot be reversed into an address.

Where it lives

Two services, both EU-based for this project.

Authentication identity (email, OAuth links, session cookies) is held by Clerk. Everything else — predictions, leagues, scores, feedback — lives in our Supabase Postgres database hosted in eu-west-1. The app is deployed on Vercel, which receives the HTTP requests required to render the pages you visit.

What we don't do

No ads, no third-party trackers, no resale.

There are no advertising scripts on this site, no third-party trackers, no remarketing pixels, no data brokers, no marketing emails. Vercel Web Analytics is enabled for aggregated, cookieless page-view counts — it does not identify you and does not follow you across sites. We will never sell or share your data with third parties, and we will never use it to train a model.

Your data, your call

Export anytime; delete on request.

Use the buttons below to download every prediction, league membership, and score we hold for your account, in JSON or CSV. To delete your account, sign out and then ask via the feedback form — we anonymise your record (your scores stay on the league leaderboard as "Former player" so the standings don't unravel for the rest of the group) and remove the link to your Clerk identity. The text of feedback notes you've sent stays in our admin queue but your reply-to email and IP hash are scrubbed in the same pass.

Both formats include profile, predictions, league memberships, and scores. Authentication identity (held by Clerk) is not part of the export.

Cookies

Two purposes only.

Clerk sets a small set of cookies to keep you signed in across pages. We set one cookie to remember your interface language. That's the full list. No third-party cookies are placed on this site by us.

Questions or changes

Reach us via the feedback form.

If you have a question about your data, want it deleted, or notice something this notice doesn't cover, send a note through the feedback form. We read every one. If we update this notice we will bump the date below and surface the change on the feedback page.

Last updated 24 May 2026.