Privacy Policy
Last updated: 16 September 2026
This policy explains what personal data Pure Predictions collects, why, and what your rights are. Pure Predictions is a free football-prediction game. We collect only what we need to run it — signing you in, showing you on leaderboards, scoring your predictions, keeping the site working, and sending the emails you've opted into — and we don't sell your data or share it with anyone for marketing. We do sometimes use the public parts of a profile — nickname, predictions, rank — to show the game off, and you can ask us not to (Section 8).
1. Who we are
Pure Predictions ("the site", "we", "us") is operated by Pure Sports Predictions Ltd, a company registered in England and Wales (company number 17274262). You can find more about us on our About page.
- Site:https://www.purepredictions.co.uk
- Registered address: 67 Westfield Lane, Kippax, Leeds, LS25 7JA
- Contact for privacy questions:admin@purepredictions.co.uk
We are the data controller for the personal data described below.
2. What we collect and why
We only collect the minimum needed to run the site:
| Data | When | Why |
|---|---|---|
| Email address | When you register or sign in | To create and identify your account. |
| Nickname | When you choose one after signing in | Shown on leaderboards and in private leagues and clubs so others can see who you are, and sometimes in our own promotional material (see Section 8). |
| Favourite team and national team | When you pick them during first-run setup, or change them in your profile | To personalise the site for you. |
| Your predictions and scores | When you make predictions | To score them and rank you on the leaderboards. |
| Achievements and honours | When you earn them by playing | Shown on your profile and on Hall-of-Fame style boards. |
| Private league and club membership | When you create, join, or ask to join a private league or club | To show their leaderboards and member lists to members. |
| Email preferences and unsubscribe token | Set to defaults when you register; updated when you change them | To know which kinds of email you've opted into, and to let you manage them from a link in any email without signing in. |
| Reminder send log | When we send you a prediction-reminder email | So we never send you the same reminder twice. Only the most recent send is kept — older entries are deleted automatically (see Section 6). |
| Prize-draw claim details (name, county, evidence of identity and UK residence — provided by a parent or guardian when the winner is under 18) | Only if you win a monthly prize draw and claim the prize | To verify you're eligible to win, record a parent or guardian's consent for a winner under 18, and deliver the prize. Verification evidence is deleted once checked; see the Terms & Conditions for how winners are announced. |
| Sign-in credentials (e.g. passkeys) | When you set up passwordless sign-in | Handled by our authentication provider, Hanko — we never see or store passwords. |
| Session cookie | When you sign in on the website | To keep you signed in across pages and visits. |
| Push registration | If you allow notifications in one of our mobile apps | The token that lets us send a notification to that copy of the app, with its platform and app and operating-system version so we can diagnose failed deliveries (Section 5). |
| IP address and basic request data | Whenever you visit | Logged transiently by our hosting provider for security and reliability. |
| Anonymous usage analytics | Only if you accept analytics cookies | To understand how the site is used and improve it. |
| Error reports | If something breaks while you're using the site | Sent to our error-monitoring service (Sentry) so we can find and fix bugs. Reports are configured not to include personal data, and the session recording attached to an error masks all text and media. |
We do not collect or process any special-category data (health, political views, etc.), and we don't profile you or use your data for automated decision-making.
3. Legal bases (UK GDPR)
| Purpose | Legal basis |
|---|---|
| Creating your account and letting you play | Contract — you've asked us to provide the service. |
| Keeping you signed in | Contract — necessary to deliver the sign-in feature you used. |
| Showing your nickname, predictions and rank on leaderboards | Legitimate interests — providing the core game and leaderboards. |
| Showing the public parts of your profile in our own promotional material | Legitimate interests — showing prospective players what the game actually looks like. You can object at any time (see Section 8). |
| Service emails (tournament news, feature news, prediction reminders) | Legitimate interests — keeping players informed about the game they've joined. Every category can be switched off in your email preferences. |
| Marketing emails | Consent — only if you've opted in, and you can withdraw at any time. |
| Running monthly prize draws (picking winners, notifying them, verifying eligibility, announcing winners) | Legitimate interests — administering a draw you've entered by playing, and meeting the UK advertising rules on announcing winners. |
| Server logs / security / error monitoring | Legitimate interests — keeping the site secure, reliable and working. |
| Analytics | Consent — only if you've accepted analytics cookies. |
| Push notifications to our mobile apps | Consent — only if you allowed notifications when your device asked. You can withdraw it in your device's settings at any time. |
You can withdraw consent for analytics at any time using the "Cookie preferences" link in the footer. Withdrawing consent does not affect any processing that happened before you withdrew it.
4. Cookies and similar storage
This section is about the website. Our mobile apps use no cookies at all — see Section 5.
On the website, Pure Predictions uses a small number of cookies and browser-storage entries:
Strictly necessary (always on):
- A session cookie set by our authentication provider (Hanko) when you sign in — keeps you signed in.
- Browser localStorage keys (your cookie choice and small preferences, such as a banner you've dismissed) — these never leave your browser.
Analytics (only with your consent):
- Google Analytics cookies (
_ga,_ga_*) — see Google below.
You can change your cookie preferences at any time using the "Cookie preferences" link in the footer.
5. Our mobile apps
The Pure Predictions apps for iPhone, iPad and Android are the same game as the website, but what they keep on your device is different. Everything in this policy applies to them too — this section covers what is specific to the apps.
No cookies, no trackers, no banner. The apps ship without Google Analytics and without any advertising or tracking code, so there is nothing to consent to and no cookie banner to answer. Nothing you do in the app is measured for analytics. We do not track you: nothing we collect is combined with data from other companies for advertising, and we share nothing with data brokers.
Pages the app opens in your browser. Two things happen on our website rather than inside the app — signing in, and managing your account details. When the app opens one of those in your device's browser, that page also shows no cookie banner and loads no analytics: the only cookie involved is the one that signs you in.
Signing in. Sign-in opens your device's own browser (Safari on an iPhone or iPad, Chrome on Android) so you can use a passkey or a social account. The session cookie our authentication provider (Hanko) sets there belongs to that browser, not to the app. The app itself receives only a sign-in token, which it keeps in the device's secure storage — the Keychain on Apple devices, encrypted storage on Android — and sends with each request. Signing out of the app erases it.
Working offline. The app keeps the most recent copy of what you've loaded — fixtures, leaderboards, your own predictions — on the device, so it still shows something when you have no signal. That copy never leaves your device, and it is erased when you sign out, so nothing carries over to the next person to sign in on a shared phone.
Push notifications. If you allow notifications, we register the app with Firebase Cloud Messaging (Google) and store, against your account, the registration token it issues, which platform it is for, and the app and operating-system version — the versions so we can work out why a notification failed to arrive. Your device's permission prompt is the consent: decline it and no token is ever created. You can choose which kinds of notification you receive from the Communications section of your profile, and turn them off entirely in your device's settings. A registration belongs to the installed app rather than to you, so when someone else signs in on the same device it is reassigned to them — never duplicated, so you cannot receive notifications meant for them.
Error reports. As on the website, crashes and errors go to Sentry so we can fix them (see Section 7). Reports are tagged with the platform they came from, and any session recording attached to one has all text masked and images blocked.
Apple and Google run the stores the apps are downloaded from, and their own privacy policies cover that. The game is free, so we receive no payment details, and the stores give us only aggregate figures such as downloads and crash counts — nothing that identifies you.
6. Emails we send
We send a small number of email types, each controlled by your email preferences:
- New tournament — when a new prediction tournament opens. On by default.
- New features — when a new feature or improvement lands. On by default.
- Prediction reminders — a weekly summary of what you've still to predict before kick-off. On by default.
- Marketing — promotional email. Off by default; opt-in only.
If you win a monthly prize draw we'll email you about it whatever your preferences say — it's about something you've won, not marketing.
You can change any of these at any time from the Communications section of your profile, or via the "manage your email preferences" link included in every email we send — that link carries a secure token, so it works even when you're signed out.
To avoid sending the same reminder twice we keep a log of the most recent reminder run (who was emailed, when, and a summary of what the email covered). Each run replaces the last, so older entries are deleted automatically within days.
7. Who we share data with
We don't sell your data and we don't share it with anyone for marketing. The only third parties that process your data when you use Pure Predictions are:
- Hanko — handles sign-in and stores your authentication credentials. We receive your email address and a user identifier. See Hanko's Privacy Policy.
- AuthSMTP — delivers the emails we send (see Section 6). They process your email address and the content of those emails in order to deliver them. AuthSMTP is a UK-based provider.
- Sentry — our error-monitoring service. When something breaks, Sentry receives a report of the error (what went wrong, the page URL, and browser details) and a session recording of the failure with all text masked and media blocked. It's configured not to receive personal data such as your email or nickname. Our Sentry data is hosted in the EU.
- Google Analytics — only if you accept analytics cookies, Google Analytics receives anonymous usage data (pages visited, rough device info). The website only; the apps contain no analytics (see Section 5).
- Firebase Cloud Messaging (Google) — delivers push notifications to our mobile apps, and only if you allow notifications on your device. It issues the registration token that identifies your copy of the app and carries the text of each notification we send to it. Nothing is sent to it from the website.
- Our hosting provider — processes server requests and stores the database. They have no independent right to use your data.
- jsDelivr (CDN) — serves the cookie consent banner script. They see the request your browser makes for the script (your IP and user-agent) but no Pure Predictions data.
- Google Fonts — serves the site's fonts. Your browser's request includes your IP and user-agent.
Nobody receives your data in order to market their own products. Where we publish promotional material containing the public parts of a profile (Section 8), the platform we publish on — a social network, or an app store — necessarily sees whatever appears in that image or post.
8. Using your profile to promote the game
Pure Predictions is played in public: your nickname, predictions, points and rank are shown to other players on leaderboards, and in the private leagues and clubs you join. We sometimes reuse those same public details to show people what the game looks like — screenshots of leaderboards and match pages, social media posts, app store listings, and pages on this site.
Legal basis: legitimate interests — giving prospective players an honest picture of a game whose whole point is playing against other people. We've weighed that against your privacy, and limited what we do accordingly:
- We use only what other players can already see — nickname, club and private league names, predictions, points, rank, badges, and prizes won. Never your email address, and nothing from your account settings.
- We don't add anything that identifies you further, don't present you as endorsing the site, and don't use a nickname that is plainly someone's full real name.
You can object at any time. There's a switch for it in the Communications section of your profile — turn off "Feature me in promotional material" and we'll leave you out from then on, and remove or replace you in anything still under our control. You can email admin@purepredictions.co.uk instead if you'd rather, and a parent or guardian can ask on behalf of a player under 18. What we can't do is recall material already printed, or copies other people have shared onwards.
Announcing a monthly prize winner's nickname is a separate matter: UK advertising rules require it, so it's governed by the promotion's own terms and isn't something you can be left out of.
9. International transfers
Hanko processes data within the EU, Sentry hosts our error reports in the EU, and AuthSMTP is UK-based. Google operates from the United States, so if you accept analytics cookies your analytics data is transferred to the US, as is the push registration and notification content if you allow notifications in one of our mobile apps — Google relies on the EU-US Data Privacy Framework and Standard Contractual Clauses for these transfers.
10. How long we keep data
- Account data — your email, nickname, team picks, email preferences, predictions, achievements, honours, and private-league and club memberships are kept while your account exists. You can ask us to delete your account at any time (see Section 12) and we will delete your account and associated data.
- Reminder send log — only the most recent reminder run is kept; each run replaces the last.
- Prize-draw claim details — evidence of identity and residence is deleted as soon as it's been checked. A winner's name and county (and any parent or guardian consent) are kept for the period the UK advertising rules require us to make winner details available, then deleted.
- Session cookie — expires according to your authentication provider's settings.
- Push registration — kept while the app is installed and you're signed in to it. Signing out of the app deletes it, as does deleting your account.
- Server / security logs — retained for a short period for security and reliability, then deleted.
- Error reports — retained by Sentry for a limited period (currently 90 days), then deleted automatically.
- Google Analytics data — retained according to the Google Analytics account configuration (currently 14 months).
11. Where data is stored
- Account, prediction, private-league and club data is stored in our database.
- Authentication credentials are held by Hanko (in the EU).
- Error reports are held by Sentry (in the EU).
- Analytics data is held by Google.
12. Your rights
Under UK GDPR you have the right to:
- Access — ask for a copy of the personal data we hold about you.
- Rectification — ask us to correct anything that's wrong.
- Erasure — ask us to delete your account and associated data.
- Restriction — ask us to stop processing your data in certain cases.
- Portability — receive your data in a machine-readable format.
- Object — object to processing based on legitimate interests, including our use of your profile in promotional material (see Section 8).
- Withdraw consent — for any processing based on consent (e.g. analytics).
To exercise any of these, email admin@purepredictions.co.uk. We aim to respond within 30 days.
13. Complaints
If you're not happy with how we've handled your data, you can complain to the UK Information Commissioner's Office:
- Website: https://ico.org.uk/make-a-complaint/
- Helpline: 0303 123 1113
You're welcome to come to us first — we'd rather resolve it directly.
14. Children
Pure Predictions is not aimed at children under 13. If you believe a child has provided personal data to us, please contact us and we'll delete it.
15. Changes to this policy
If we materially change this policy, we'll update the "Last updated" date at the top and, where appropriate, surface the change in the app.