Privacy Policy

Effective 23 May 2026. Belmundo is a free daily soccer prediction game — no money, no betting, no cash prizes. This policy explains exactly what we collect, why, who processes it on our behalf, and the rights you have under the EU General Data Protection Regulation (GDPR). We keep data collection deliberately small. If anything here is unclear, email [email protected].

Who is responsible

The data controller is the Belmundo founding team. Full contact and responsible-party details are on our Legal & Contact. Reach us any time at [email protected].

What we collect

  • Account — your chosen handle and, if you sign in, your email address (via Google sign-in or a magic-link email).
  • Gameplay — your daily predictions (“calls”), scores, streaks, badges, friend-league membership, and leaderboard rank.
  • Preferences — your game mode and a coarse country/region you pick once for Regional play, plus your language and light/dark theme choice (stored in a first-party cookie).
  • Product analytics — anonymized usage events (which screens load, which features are used) and, where enabled, session replays of UI interactions, via PostHog. Inputs are masked; replays are used to fix usability problems, not to identify you.
  • Aggregate web analytics — pageview and traffic statistics via Google Analytics 4.
  • Crash & error reports — technical diagnostics (stack traces, browser/device type) via Sentry when something breaks.
  • Push tokens — a Web Push subscription token, only after you explicitly tap “Enable”, so we can send full-time match notifications.
  • Payment data — for Pro subscribers only, handled by Stripe. We never see or store your full card number.

What we never collect

  • Money or wagers for predictions — there is nothing to stake. Belmundo is not gambling.
  • Your contacts, calendar, photos, or any data outside the app.
  • Precise GPS location — unless you explicitly grant it for a future opt-in Regional feature.
  • Advertising identifiers. We run no ad networks and sell no data.

Legal bases (GDPR Art. 6)

  • Contract — running your account, gameplay, leagues, and Pro subscription.
  • Consent — push notifications, optional analytics/session replay, and any future location feature. You can withdraw consent at any time.
  • Legitimate interest — keeping the service secure, preventing cheating/abuse, and understanding aggregate usage to improve the game.

Service providers (subprocessors)

We use a small set of trusted providers to run Belmundo. Each only receives the data needed for its job:

  • Supabase — authentication, database, and storage (player profile, calls, leagues, badges). EU region.
  • Stripe — Pro subscription payments and billing.
  • Resend — delivery of transactional email (magic-links, account notices).
  • PostHog — product analytics and session replay.
  • Sentry — error and crash monitoring (EU region).
  • Google Analytics 4 — aggregate web traffic statistics; and Google Sign-In (OAuth) if you choose to sign in with Google.
  • Cloudflare — DNS and email routing for the belmundo.app domain.
  • Our application server / hosting provider — serves the app and stores server logs (IP address, timestamp) transiently for security.
  • Match data comes from football-data.org and API-Football. These are data sources — we send them no personal information about you.

International transfers

We prefer EU hosting wherever a provider offers it (Supabase, Sentry, PostHog). Where a provider processes data outside the EU/EEA (e.g. Stripe, Google), that transfer is covered by Standard Contractual Clauses or an equivalent GDPR transfer mechanism.

How long we keep it

  • Account & gameplay data: until you delete your account.
  • Analytics & session replay: retained on a rolling window by the provider, then aggregated or discarded.
  • Crash reports: typically up to 90 days.
  • Server security logs: short-lived, kept only as long as needed to investigate abuse.

Your rights

  • Access, correct, or export your data — email [email protected].
  • Edit your handle, mode, or region inline at /profile.
  • Disable push at /profile → Reminders, or in your browser settings.
  • Delete your account at /profile → Account → Delete. This wipes your handle, calls, badges, streaks, push subscriptions, and referral code. We retain only a non-identifying aggregate (“a player made N calls”) for statistics.
  • Withdraw consent for analytics or push at any time.
  • Complain to your local EU data-protection authority if you believe we've mishandled your data.

Cookies & local storage

  • Session cookie (Supabase) — first-party, strictly necessary for sign-in to work.
  • Preference storage — your language and theme, stored first-party on your device.
  • Analytics (PostHog, Google Analytics) — only active in production; uses an anonymized device id, never your name. No advertising or cross-site tracking cookies.

Children

Belmundo is built for adults. We don't knowingly accept users under 16 (or the applicable age of digital consent in your country). If we learn a child has signed up, we delete the account.

Changes to this policy

We'll update the effective date above and, for material changes, post a notice in-app. Continued use after a change means you accept the updated policy.

Contact

Privacy questions, data exports, and “right to be forgotten” requests: [email protected]. See also our Legal & Contact and Terms.

Privacy · Belmundo