Privacy & cookies

Puntertje is a small World Cup prediction pool, operated as a personal project by a private individual based in the Netherlands. There is no company behind it, and we do not sell any products or data.

We build Puntertje purely for fun. We are not trying to make a profit from it, we do not run advertising, and we do not sell or share your data for anyone else's commercial purposes.

For any question about your data, please contact us at support@puntertje.com.

We limit ourselves to the data the pool genuinely needs:

• Your account: your name (shown on leaderboards), your email address, your password (stored only as a secure hash, which means we never see it), and your language preference.
• Your activity in the pool: your match predictions, bonus answers and tournament winner pick, and the leagues you create or join.
• Sign-in technical data: when you log in, we store the IP address and browser type for that session in order to keep you signed in and to protect your account. This is deleted when the session expires or you sign out.
• Messages you send us: if you use the support form, we retain your message together with your name and email address so that we can reply.
• Calendar feed (optional): if you add the match calendar, we store which matches you selected and a secret link token, which you can revoke at any time.
• Usage analytics: see the analytics section below.

We neither request nor want any sensitive data. We do not collect payment details, dates of birth, or any information about your health, beliefs, or similar matters.

• To operate your account and the pool (displaying leaderboards, scoring your predictions, and managing leagues). Legal basis: performance of our agreement with you.
• To send you essential email (a welcome message, password resets, and replies to your support questions). Legal basis: performance of our agreement, and our legitimate interest in responding to you.
• To keep your account secure (the sign-in IP address and browser data). Legal basis: our legitimate interest in preventing abuse.
• To understand usage and fix bugs (analytics and session recording, as described below). Legal basis: our legitimate interest in maintaining and improving the service.

We do not use your data for advertising, and we never sell it.

We use a product analytics service, hosted within the European Union, to understand how Puntertje is used and to diagnose problems. It runs on every visit and records:

• Usage analytics: the pages you view and the actions you take. Once you are signed in, this activity is linked to your account.
• Session recording: a playback of page navigation and the elements you interact with, which helps us reproduce and fix bugs. Text you type into fields such as passwords is masked and is not recorded.

To do this, the analytics service stores cookies and similar browser storage on your device. We also use cookies that are strictly necessary to operate the service: keeping you signed in and remembering your language preference. We do not use advertising or cross-site tracking cookies.

We do not currently offer a cookie banner or an opt-out for analytics. If you object to this processing, please contact us at support@puntertje.com.

We share data only with the service providers we rely on to run Puntertje. They process it on our behalf, under contract, and may not use it for their own purposes:

• Hosting and database providers: they store and serve the application and its data.
• An email delivery provider: it sends our account and support emails, and receives your name, email address and message.
• A product analytics provider: it receives the usage and session data described above.

Your data is stored within the European Union. Our hosting, database, email delivery and analytics providers all operate in the EU, so your data remains within the EU/EEA and is not transferred outside it.

• Account and prediction data: for as long as you have an account. When you delete your account, it is removed.
• Sign-in technical data: removed when the session expires or you sign out.
• Support messages: kept until your question has been handled and for a short period afterwards, then removed.
• Analytics and session recordings: retained by our analytics provider for a limited period and then deleted.

Under the GDPR you can ask us to provide a copy of your data, to correct it, to delete it, or to restrict how we use it. You can also object to processing based on our legitimate interest. To exercise any of these rights, email support@puntertje.com and we will take care of it.