Privacy Policy

Google Sign-In data. When you choose "Continue with Google", Google asks for your consent to share certain information with us. We request only the standard OAuth scopes openid, profile, and email, and we receive exactly these fields:

• Name — displayed on the leaderboard and in the app
• Email address — used as your account identifier and to sign you in
• Profile picture — shown on the leaderboard and in the app

We do not request access to, and cannot see, your Google Drive files, Gmail messages, Calendar, Contacts, or any other Google service or content.

Account data you provide. If you register with an email address or phone number and a password, we collect:

• Your email address or phone number
• Your name (optional)
• A password (stored only as a bcrypt hash — we never store your plain-text password)

Game data. To operate the game, we record your predictions and their outcomes, and your credits balance and transaction history (sign-up bonus, daily check-ins, ad rewards, bets placed, and winnings).

We use your information solely to operate Match Predictor:

• To create and authenticate your account
• To display your name and profile picture on the leaderboard and within the app
• To record and settle your predictions and manage your credits
• To provide customer support

We do not use your information for advertising, third-party marketing, or profiling, and we do not sell it.

The following summarises how we handle the data we receive from Google when you sign in:

• Access: We access only your name, email address, and profile picture, via the openid, profile, and email scopes. We never access your Google Drive, Gmail, Calendar, Contacts, or any other Google data.
• Use: We use this data only to create your account, sign you in, and display your name and picture on the leaderboard. We do not use it for any other purpose.
• Storage: Your name, email address, and profile picture are stored in our PostgreSQL database (hosted on Neon) and processed by our application (deployed on Vercel).
• Sharing: We do not sell, rent, or share your Google user data with any third party. Google processes this data only to complete the sign-in flow, as described in Google's Privacy Policy.

• Your data is stored in a PostgreSQL database hosted on Neon (managed PostgreSQL), and processed by our application deployed on Vercel.
• Passwords are hashed with bcrypt; we never store plain-text passwords.
• We do not have access to your Google password — Google only shares the profile fields listed above with us.

• We do not sell, rent, or share your personal information with any third party.
• Your Google data is processed by Google only to complete the sign-in flow.

Match Predictor's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We only request the minimum data needed to operate the game and use it only for the purposes described in this policy.

• We retain your account data for as long as your account remains active.
• You may request deletion of your account and its associated data at any time by contacting us at yumirong11@gmail.com.
• On deletion, we remove your personal information (name, email address, phone number, and profile picture) from our systems.

You may at any time:

• Access and review the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your account and data
• Revoke Match Predictor's access to your Google account via your Google Account permissions

We may update this Privacy Policy from time to time. If we change how we access, use, or share Google user data, we will update this page and notify you of material changes. The "Last updated" date above reflects the most recent revision.

If you have questions about this Privacy Policy or our data practices, contact us at yumirong11@gmail.com.