Privacy Policy

1. What this covers

This policy explains what information MysticScore collects when you use the Service, why we collect it, and who we share it with. It applies alongside our Terms of Service.

2. Information we collect

We collect the following, directly from you or automatically:

• Account info: your email address (used only to sign you in) and the nickname you choose, which is shown publicly on leaderboards and in match comments.
• Gameplay data: the leagues and teams you follow, the score predictions you submit, and any comments you post.
• Payment info: if you make a purchase, our payment processor (Paddle) collects your billing details directly — we never see or store your card number. We only receive confirmation that a payment succeeded, which plan you bought, and a customer reference ID.
• Basic technical data: standard server logs (IP address, browser type, request timestamps) used only for security and debugging.

3. How we use it

We use this information to:

• Run the core gameplay loop — matching your predictions to real match results
• Show accurate leaderboards and prediction history
• Grant access to paid features you've purchased
• Keep the Service secure and prevent abuse

We do not sell your personal information, and we do not use it for advertising.

4. Third-party services we rely on

MysticScore is built on top of a small number of third-party providers, each of which processes a limited slice of data on our behalf:

• Supabase — hosts our database and handles account sign-in.
• API-Football — supplies match fixtures, results, and league standings. We don't send them any of your personal data.
• Anthropic (Claude API) — generates the fictional "Oracle's Imagination" text from your submitted score prediction. Only the prediction itself (not your identity) is sent.
• Paddle — our Merchant of Record for all payments; they handle billing, card data, taxes, and refunds under their own privacy policy.
• Vercel — hosts the website and its serverless functions.

5. Cookies and sessions

We use a small number of essential cookies to keep you signed in between visits. We don't use advertising or tracking cookies.

6. Data retention

We keep your account data for as long as your account is active. If you want your account and associated data deleted, contact us using the details below.

7. Your rights

Depending on where you live, you may have rights to access, correct, or delete your personal data, or to object to certain uses of it. To exercise any of these, contact us using the details on our support page.

8. Children's privacy

The Service is not directed at children under 16, and we don't knowingly collect personal information from anyone under that age (see our Terms of Service).

9. Changes to this policy

We may update this policy from time to time. Material changes will be reflected in the "Last updated" date above.

10. Contact

Questions about this policy, or requests regarding your data, can be sent to the contact address listed on our support page.