CupRoute
    Navigation
    Sign in
    Back

    Privacy Policy

    Last updated: April 2026

    1. Who we are

    CupRoute is a free-to-play World Cup 2026 score prediction game. We are not affiliated with or endorsed by FIFA or any national football federation.

    Contact: hello@cuproute.com

    2. What data we collect

    We collect only what is necessary to provide the service:

    • Email address — used for passwordless authentication (magic code sign-in).
    • Prediction data — the match scores you enter.
    • Display name — shown on leaderboards (derived from your email by default).

    We do not collect payment information, IP addresses, or browser fingerprints.

    3. How we use your data

    • To authenticate you and maintain your session.
    • To store and score your predictions.
    • To display your ranking on leaderboards visible to other users.

    We do not sell your data. We do not use it for advertising.

    4. Data storage & processors

    Your data is stored by Supabase (our database and auth provider). Supabase stores data in the EU and US. See Supabase's Privacy Policy for details.

    5. Local storage

    We use your browser's localStorage (not cookies) to cache draft prediction scores while you're filling them in. This data never leaves your device until you explicitly save. You can clear it by clearing your browser's site data.

    6. Your rights (EEA / UK users)

    Under GDPR and UK GDPR, you have the right to:

    • Access the personal data we hold about you.
    • Correct inaccurate data.
    • Request deletion of your account and all associated data.
    • Object to or restrict processing.
    • Data portability.

    To exercise any of these rights, email hello@cuproute.com. We will respond within 30 days.

    7. Data retention

    We retain your account and predictions for the duration of the World Cup 2026 tournament and up to 12 months afterwards. You may request deletion at any time.

    8. Children

    CupRoute is not directed at children under 13. If you believe a child has provided us with personal data, please contact us for deletion.

    9. Changes to this policy

    We may update this policy. The "last updated" date at the top of this page will reflect any changes. Continued use of the service constitutes acceptance.