Política de Privacidad

1. Who We Are

Sofa Pundit is a free football prediction game. This Privacy Policy explains how we collect, use, and protect your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable data protection laws. It covers the website at sofapundit.club and the Sofa Pundit mobile app, which share one account and one database.

2. Data We Collect

• Account data:Your email address, and — if you sign in with Google or Apple — the name and profile picture that provider gives us. Signing in with an email and password, or with a magic link, gives us your email address only. Apple's Hide My Email is supported and we never receive your real address if you use it.
• Profile data: Username you choose during onboarding.
• Usage data: Groups you create or join, championship predictions you submit, match calls you make, leaderboard scores.
• Product analytics: Which screens you open and which features you use, linked to your account, so we can see what works and what does not. We do not use this for advertising and we never sell it.
• Diagnostics: If the app or site crashes, a report containing the error, the device or browser type, and the app version.
• Technical data: IP address, browser or device type, and session tokens necessary for authentication and security.

3. How We Use Your Data

• To provide and operate the Service
• To send transactional emails (group invitations, prediction deadline reminders)
• To calculate and display leaderboard scores
• To maintain security and prevent abuse
• To understand how the Service is used and improve it
• To diagnose crashes and fix faults

Legal basis: Contract performance (Art. 6(1)(b) GDPR) for core functionality; legitimate interests (Art. 6(1)(f) GDPR) for security, abuse prevention, product analytics and crash diagnostics.

4. Data Sharing

We share your data only with:

• Google and Apple — for authentication, if you choose to sign in with them. Subject to their own privacy policies.
• PostHog — product analytics (which screens and features are used).
• Sentry — crash and error reporting.
• Neon — our database provider (PostgreSQL, hosted on AWS).
• Resend — for transactional email delivery.
• Vercel — for hosting and edge functions.

We do not sell your personal data to third parties.

5. Cookies

We use strictly necessary cookies for authentication (session tokens), and analytics identifiers so we can tell repeat visits apart. We use no advertising cookies and no third-party ad tracking, and we do not track you across other companies' apps or websites. You can manage cookie preferences through your browser settings.

6. Data Retention

We retain your data for as long as your account is active. You can delete your account yourself at any time — in the app, from your profile screen; on the web, from your account settings. Deletion is immediate and permanent: your account, predictions and picks are removed, except where retention is required by law. If you own a group, ownership passes to another member so their history is not destroyed along with yours; a group with no other members is deleted with you.

7. What Other People Can See

Inside a group, other members see your username, your predictions once they lock, and your scores. Your email address is never shown to them.

Sofa Pundit also runs a public leaderboard for its own match calls, which anyone can view without an account. If your calls count toward it, the board shows your username, points and number of calls — never your email, and never which way you called an individual match. Individual calls appear only inside the anonymous crowd percentage shown on each fixture. You choose which of your championships feeds it, or turn it off entirely, in your account settings.

8. Your Rights (GDPR)

If you are located in the EEA, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase your data ("right to be forgotten")
• Restrict or object to processing
• Data portability
• Withdraw consent at any time (where processing is based on consent)

To exercise these rights, contact us at privacy@sofapundit.club.

9. Security

We implement industry-standard security measures including HTTPS, encrypted database connections, and short-lived session tokens. No method of transmission over the internet is 100% secure.

10. Children

The Service is not directed to children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email or a prominent notice on the Service.

12. Contact

For privacy-related enquiries: privacy@sofapundit.club