Privacy Policy
Last updated: 31 May 2026
This policy explains what personal data Pure Predictions collects, why, and what your rights are. Pure Predictions is a free football-prediction game. We collect only what we need to sign you in, show you on leaderboards, and score your predictions — nothing else, and we don't sell your data or share it with anyone for marketing.
1. Who we are
Pure Predictions ("the site", "we", "us") is operated by Tom Pedley as a personal project.
- Site:https://www.purepredictions.co.uk
- Contact for privacy questions:admin@purepredictions.co.uk
We are the data controller for the personal data described below.
2. What we collect and why
We only collect the minimum needed to run the site:
| Data | When | Why |
|---|---|---|
| Email address | When you register or sign in | To create and identify your account. |
| Nickname | When you choose one after signing in | Shown on leaderboards and in groups so others can see who you are. |
| Your predictions and scores | When you make predictions | To score them and rank you on the leaderboards. |
| Group membership | When you create or join a group | To show group leaderboards to members. |
| Sign-in credentials (e.g. passkeys) | When you set up passwordless sign-in | Handled by our authentication provider, Hanko — we never see or store passwords. |
| Session cookie | When you sign in | To keep you signed in across pages and visits. |
| IP address and basic request data | Whenever you visit | Logged transiently by our hosting provider for security and reliability. |
| Anonymous usage analytics | Only if you accept analytics cookies | To understand how the site is used and improve it. |
We do not collect or process any special-category data (health, political views, etc.), and we don't profile you or use your data for automated decision-making.
3. Legal bases (UK GDPR)
| Purpose | Legal basis |
|---|---|
| Creating your account and letting you play | Contract — you've asked us to provide the service. |
| Keeping you signed in | Contract — necessary to deliver the sign-in feature you used. |
| Showing your nickname, predictions and rank on leaderboards | Legitimate interests — providing the core game and leaderboards. |
| Server logs / security | Legitimate interests — keeping the site secure and reliable. |
| Analytics | Consent — only if you've accepted analytics cookies. |
You can withdraw consent for analytics at any time using the "Cookie preferences" link in the footer. Withdrawing consent does not affect any processing that happened before you withdrew it.
4. Cookies and similar storage
Pure Predictions uses a small number of cookies and browser-storage entries:
Strictly necessary (always on):
- A session cookie set by our authentication provider (Hanko) when you sign in — keeps you signed in.
- Browser localStorage keys (your cookie choice and small preferences such as the colour theme) — these never leave your browser.
Analytics (only with your consent):
- Google Analytics cookies (
_ga,_ga_*) — see Google below.
You can change your cookie preferences at any time using the "Cookie preferences" link in the footer.
5. Who we share data with
We don't sell your data and we don't share it with anyone for marketing. The only third parties that process your data when you use Pure Predictions are:
- Hanko — handles sign-in and stores your authentication credentials. We receive your email address and a user identifier. See Hanko's Privacy Policy.
- Google Analytics — only if you accept analytics cookies, Google Analytics receives anonymous usage data (pages visited, rough device info).
- Our hosting provider — processes server requests and stores the database. They have no independent right to use your data.
- jsDelivr (CDN) — serves the cookie consent banner script. They see the request your browser makes for the script (your IP and user-agent) but no Pure Predictions data.
- Google Fonts — serves the site's fonts. Your browser's request includes your IP and user-agent.
6. International transfers
Hanko processes data within the EU. Google operates from the United States, so if you accept analytics cookies your analytics data is transferred to the US — Google relies on the EU-US Data Privacy Framework and Standard Contractual Clauses for these transfers.
7. How long we keep data
- Account, nickname, predictions and group membership — kept while your account exists. You can ask us to delete your account at any time (see Section 9) and we will delete your account and associated data.
- Session cookie — expires according to your authentication provider's settings.
- Server / security logs — retained for a short period for security and reliability, then deleted.
- Google Analytics data — retained according to the Google Analytics account configuration (currently 14 months).
8. Where data is stored
- Account, prediction and group data is stored in our database.
- Authentication credentials are held by Hanko (in the EU).
- Analytics data is held by Google.
9. Your rights
Under UK GDPR you have the right to:
- Access — ask for a copy of the personal data we hold about you.
- Rectification — ask us to correct anything that's wrong.
- Erasure — ask us to delete your account and associated data.
- Restriction — ask us to stop processing your data in certain cases.
- Portability — receive your data in a machine-readable format.
- Object — object to processing based on legitimate interests.
- Withdraw consent — for any processing based on consent (e.g. analytics).
To exercise any of these, email admin@purepredictions.co.uk. We aim to respond within 30 days.
10. Complaints
If you're not happy with how we've handled your data, you can complain to the UK Information Commissioner's Office:
- Website: https://ico.org.uk/make-a-complaint/
- Helpline: 0303 123 1113
You're welcome to come to us first — we'd rather resolve it directly.
11. Children
Pure Predictions is not aimed at children under 13. If you believe a child has provided personal data to us, please contact us and we'll delete it.
12. Changes to this policy
If we materially change this policy, we'll update the "Last updated" date at the top and, where appropriate, surface the change in the app.
