Privacy Policy
Last updated: October 24, 2026
1. Data controller
The data controller for this Prediction Pool instance is BlueZero, SLU, registered in Spain at Paseo Central 17, 04740 Roquetas de Mar, Spain (Tax ID / NIF: B04876447) . Contact the controller via the Contact form for any question about this policy or your data.
2. What's collected
- Account details — your email address, a hashed (never plaintext) password, and the display name you choose.
- Predictions — the scores you submit, which league(s) you're in, and your algorithm preference on the Settings page.
- Session & login data — a session cookie, an optional "remember me" cookie (a random token, not your password), and, briefly, your IP address and the email you attempted to log in with, kept only to detect and block repeated failed login attempts.
- Contact form messages — your name, email address, and message, sent by email directly to the operator (see §6).
3. Why, and on what legal basis
- Running your account and predictions (authentication, leagues, leaderboards) — necessary to perform the service you signed up for.
- Login rate-limiting (§2's IP/email attempt log) — the operator's legitimate interest in keeping accounts secure from password-guessing.
- Responding to a contact form message — necessary to handle the request you made.
No data collected here is used for advertising, profiling, or sold to anyone.
4. Third parties
Match fixtures/results come from football-data.org, and odds data from the-odds-api.com — both are outbound, server-to-server lookups this app makes on its own; your account details and predictions are never sent to them.
A donation link to Ko-fi may appear in the footer. If you choose to use it, that happens entirely on Ko-fi's own site, under Ko-fi's Privacy Policy — this app doesn't see or store anything from that.
5. Cookies
A session cookie (required, to keep you logged in) and, if you check "remember me," a longer-lived login cookie. Both are strictly necessary to provide the service you asked for (staying logged in) and are exempt from cookie-consent requirements on that basis — no analytics, advertising, or tracking cookies are set by this app, and no consent banner is shown because none is needed for cookies limited to this purpose.
6. Contact form & anti-spam
Messages sent via the Contact form are emailed directly to the operator and are not stored in this app's database. To limit spam, submissions are throttled per IP address and a hidden anti-bot field is used — neither is shown to you and both are discarded, not linked to your account.
7. Retention & your rights
Account and prediction data is kept for as long as your account exists. Login-attempt records are kept only briefly (currently 15 minutes) purely to enforce the rate limit in §3.
Under GDPR you have the right to access, correct, delete, restrict, or export your data, and to object to its processing. To exercise any of these, use the Contact form. You also have the right to lodge a complaint with your national data protection authority — in Spain, the Agencia Española de Protección de Datos (AEPD).
8. Age
This service is for users 18 and older (see the Terms of Service) and is not intended for, or knowingly used to collect data from, anyone under that age.