Privacy Policy

We collect only the data needed to operate the game:

• Account data — your email address, username, and password (stored only as a secure hash by our authentication provider).
• Optional profile data — country, phone number, or a Nitrobet username, only if you choose to provide them.
• Game data — your predictions, points, rank, and referrals.
• Technical data for anti-abuse — your IP address and browser user-agent, used to detect duplicate accounts and fraud and to keep competitions fair.

We do not intentionally collect special-category data, and you shouldn't submit it.

Under the GDPR, we rely on the following legal bases:

• Performance of a contract — to create your account, record predictions, calculate scores and leaderboards, and administer prizes.
• Legitimate interests — to keep the game fair and secure (anti-abuse, fraud prevention) and to operate and improve the Service.
• Legal obligation — where we must keep records or respond to lawful requests.
• Consent — for any optional communications you opt into; you can withdraw consent at any time.

We send transactional emails (email verification, password reset, and essential account or prize notices) because they are necessary to provide the Service.

We use essential cookies only — a secure session cookie that keeps you logged in. We do not use advertising cookies or third-party tracking/analytics that profile you. Because we only use strictly necessary cookies, no consent banner is required.

We share data only with service providers who process it on our behalf, under data-processing agreements:

• Supabase — database, authentication, and hosting of account and game data (EU region).
• Vercel — application hosting and delivery.
• Resend — sending transactional emails.

We do not sell your personal data, and we do not share it for third-party advertising.

We aim to keep data within the EU/EEA. Where a provider processes data outside the EEA, the transfer is protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses.

We keep your account and game data while your account is active and for the duration of the relevant competition. If you delete your account, we remove or anonymise your personal data within a reasonable period, except where we must retain limited records to resolve disputes, prevent abuse, or comply with the law.

If you are in the EU/EEA (or a similar regime applies), you have the right to access, rectify, erase, restrict, and port your data, to object to processing based on legitimate interests, and to withdraw consent where we rely on it. To exercise any of these, email privacy@nitropredict.com. You may also lodge a complaint with your local data protection authority.

Passwords are stored as secure hashes, traffic is encrypted in transit, and access to personal data is restricted. No system is perfectly secure, but we take reasonable technical and organisational measures to protect your data.

The Service is for adults aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe a minor has provided us data, contact us and we will delete it.

We may update this Privacy Policy from time to time. We will update the “Last updated” date above and, for material changes, provide notice in the Service.

Questions or requests about your data? Email privacy@nitropredict.com. See also our Terms of Service.