1. What we keep
Your email address, your handle, and what you add to your profile: club and national team, football bio and avatar. Your calls and question answers, the Groups, Events and Duels you take part in, and the achievements you earn. We also keep the device and IP address of each sign-in, the emails we sent you, and which pages and features you used, so we can keep the game working and secure.
We use this information to run the game, sign you in, send the emails you’ve chosen to receive, and take payment for Premium. We do not sell it, and we do not show ads.
Sign-in cookies keep your account signed in, and a timezone cookie lets us show match times in your timezone. These are separate from audience measurement.
3. Who processes it for us
Render hosts the app and database in Frankfurt. Cloudflare stores images in the EU. Postmark delivers our email. Lemon Squeezy takes payment for Premium as the seller of record and keeps your billing details. Umami provides cookieless audience measurement. We use it to count visits, traffic sources and actions such as completed setup and submitted entries. We do not send it your email, handle, account ID, predictions, private Group names or invitation tokens. Page addresses and titles are replaced with generic screen names, and external referrers are reduced to their website origin. We do not use advertising trackers, analytics cookies, persistent visitor IDs, session recordings or heatmaps. We honour supported Do Not Track and Global Privacy Control signals.
4. How long we keep it
You’re signed out after 30 days without using a session, or after 180 days even if you’re still using it. Sign-in codes expire in 10 minutes and are deleted within a day after that.
When you delete your account we remove your email address, handle, bio, avatar, club picks, achievements, shared images, sign-in records and usage history. Your past calls and results stay, with no name or link to you, as a "former player", because other people's scores, rankings and group history depend on them. Payment records are kept as long as accounting law requires. Aggregate analytics are retained for up to two years on our Umami Cloud Pro plan. We select its EU analytics storage region; supporting infrastructure and service operations may process data elsewhere under Umami’s data processing terms. Backups are overwritten on the hosting provider's schedule.
5. Your choices
In settings you can download a file of your account data, delete your account, sign out of every device, and switch off emails. To correct something you cannot change yourself, or to ask a question about your data, write to contact@ballumo.com. If you are in the EU or UK you can also complain to your data protection authority.