1. Who we are

Pure Predictions ("the site", "we", "us") is operated by Pure Sports Predictions Ltd, a company registered in England and Wales (company number 17274262). You can find more about us on our About page.

Site:https://www.purepredictions.co.uk
Registered address: 67 Westfield Lane, Kippax, Leeds, LS25 7JA
Contact for privacy questions:admin@purepredictions.co.uk

We are the data controller for the personal data described below.

2. What we collect and why

We only collect the minimum needed to run the site:

Data	When	Why
Email address	When you register or sign in	To create and identify your account.
Nickname	When you choose one after signing in	Shown on leaderboards and in private leagues and clubs so others can see who you are.
Favourite team and national team	When you pick them during first-run setup, or change them in your profile	To personalise the site for you.
Your predictions and scores	When you make predictions	To score them and rank you on the leaderboards.
Achievements and honours	When you earn them by playing	Shown on your profile and on Hall-of-Fame style boards.
Private league and club membership	When you create, join, or ask to join a private league or club	To show their leaderboards and member lists to members.
Email preferences and unsubscribe token	Set to defaults when you register; updated when you change them	To know which kinds of email you've opted into, and to let you manage them from a link in any email without signing in.
Reminder send log	When we send you a prediction-reminder email	So we never send you the same reminder twice. Only the most recent send is kept — older entries are deleted automatically (see Section 5).
Sign-in credentials (e.g. passkeys)	When you set up passwordless sign-in	Handled by our authentication provider, Hanko — we never see or store passwords.
Session cookie	When you sign in	To keep you signed in across pages and visits.
IP address and basic request data	Whenever you visit	Logged transiently by our hosting provider for security and reliability.
Anonymous usage analytics	Only if you accept analytics cookies	To understand how the site is used and improve it.
Error reports	If something breaks while you're using the site	Sent to our error-monitoring service (Sentry) so we can find and fix bugs. Reports are configured not to include personal data, and the session recording attached to an error masks all text and media.

We do not collect or process any special-category data (health, political views, etc.), and we don't profile you or use your data for automated decision-making.

3. Legal bases (UK GDPR)

Purpose	Legal basis
Creating your account and letting you play	Contract — you've asked us to provide the service.
Keeping you signed in	Contract — necessary to deliver the sign-in feature you used.
Showing your nickname, predictions and rank on leaderboards	Legitimate interests — providing the core game and leaderboards.
Service emails (tournament news, feature news, prediction reminders)	Legitimate interests — keeping players informed about the game they've joined. Every category can be switched off in your email preferences.
Marketing emails	Consent — only if you've opted in, and you can withdraw at any time.
Server logs / security / error monitoring	Legitimate interests — keeping the site secure, reliable and working.
Analytics	Consent — only if you've accepted analytics cookies.

You can withdraw consent for analytics at any time using the "Cookie preferences" link in the footer. Withdrawing consent does not affect any processing that happened before you withdrew it.

4. Cookies and similar storage

Pure Predictions uses a small number of cookies and browser-storage entries:

Strictly necessary (always on):

A session cookie set by our authentication provider (Hanko) when you sign in — keeps you signed in.
Browser localStorage keys (your cookie choice and small preferences, such as a banner you've dismissed) — these never leave your browser.

Analytics (only with your consent):

Google Analytics cookies (_ga, _ga_*) — see Google below.

You can change your cookie preferences at any time using the "Cookie preferences" link in the footer.

5. Emails we send

We send a small number of email types, each controlled by your email preferences:

New tournament — when a new prediction tournament opens. On by default.
New features — when a new feature or improvement lands. On by default.
Prediction reminders — a weekly summary of what you've still to predict before kick-off. On by default.
Marketing — promotional email. Off by default; opt-in only.

You can change any of these at any time from the Communications section of your profile, or via the "manage your email preferences" link included in every email we send — that link carries a secure token, so it works even when you're signed out.

To avoid sending the same reminder twice we keep a log of the most recent reminder run (who was emailed, when, and a summary of what the email covered). Each run replaces the last, so older entries are deleted automatically within days.

6. Who we share data with

We don't sell your data and we don't share it with anyone for marketing. The only third parties that process your data when you use Pure Predictions are:

Hanko — handles sign-in and stores your authentication credentials. We receive your email address and a user identifier. See Hanko's Privacy Policy.
AuthSMTP — delivers the emails we send (see Section 5). They process your email address and the content of those emails in order to deliver them. AuthSMTP is a UK-based provider.
Sentry — our error-monitoring service. When something breaks, Sentry receives a report of the error (what went wrong, the page URL, and browser details) and a session recording of the failure with all text masked and media blocked. It's configured not to receive personal data such as your email or nickname. Our Sentry data is hosted in the EU.
Google Analytics — only if you accept analytics cookies, Google Analytics receives anonymous usage data (pages visited, rough device info).
Our hosting provider — processes server requests and stores the database. They have no independent right to use your data.
jsDelivr (CDN) — serves the cookie consent banner script. They see the request your browser makes for the script (your IP and user-agent) but no Pure Predictions data.
Google Fonts — serves the site's fonts. Your browser's request includes your IP and user-agent.

7. International transfers

Hanko processes data within the EU, Sentry hosts our error reports in the EU, and AuthSMTP is UK-based. Google operates from the United States, so if you accept analytics cookies your analytics data is transferred to the US — Google relies on the EU-US Data Privacy Framework and Standard Contractual Clauses for these transfers.

8. How long we keep data

Account data — your email, nickname, team picks, email preferences, predictions, achievements, honours, and private-league and club memberships are kept while your account exists. You can ask us to delete your account at any time (see Section 10) and we will delete your account and associated data.
Reminder send log — only the most recent reminder run is kept; each run replaces the last.
Session cookie — expires according to your authentication provider's settings.
Server / security logs — retained for a short period for security and reliability, then deleted.
Error reports — retained by Sentry for a limited period (currently 90 days), then deleted automatically.
Google Analytics data — retained according to the Google Analytics account configuration (currently 14 months).

9. Where data is stored

Account, prediction, private-league and club data is stored in our database.
Authentication credentials are held by Hanko (in the EU).
Error reports are held by Sentry (in the EU).
Analytics data is held by Google.

10. Your rights

Under UK GDPR you have the right to:

Access — ask for a copy of the personal data we hold about you.
Rectification — ask us to correct anything that's wrong.
Erasure — ask us to delete your account and associated data.
Restriction — ask us to stop processing your data in certain cases.
Portability — receive your data in a machine-readable format.
Object — object to processing based on legitimate interests.
Withdraw consent — for any processing based on consent (e.g. analytics).

To exercise any of these, email admin@purepredictions.co.uk. We aim to respond within 30 days.

11. Complaints

If you're not happy with how we've handled your data, you can complain to the UK Information Commissioner's Office:

Website: https://ico.org.uk/make-a-complaint/
Helpline: 0303 123 1113

You're welcome to come to us first — we'd rather resolve it directly.

12. Children

Pure Predictions is not aimed at children under 13. If you believe a child has provided personal data to us, please contact us and we'll delete it.

13. Changes to this policy

If we materially change this policy, we'll update the "Last updated" date at the top and, where appropriate, surface the change in the app.

Back to Pure Predictions