Privacy Policy

1. Introduction & Who We Are

CupTrivia (“we”, “us”, “our”) operates the CupTrivia web application — a collection of football trivia minigames centred on FIFA World Cup history. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.

We are committed to protecting your personal data and being transparent about how we use it. Please read this policy carefully. If you do not agree with its terms, please discontinue use of the site.

2. Information We Collect

Personal Data

When you create an account or interact with our services, we may collect:

• Name and email address (when you register or sign in)
• Profile information (display name, avatar)
• Authentication credentials (hashed passwords, social login tokens)

Usage Data

We automatically collect certain information when you use the site:

• IP address and approximate geographic location
• Browser type, operating system, and device information
• Pages visited, time spent, and interaction patterns
• Game scores, streaks, and gameplay statistics

Cookies & Tracking Technologies

We use cookies and similar technologies as described in our Cookie Policy. You can manage your preferences at any time through our cookie consent tool.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain CupTrivia and its trivia games
• Manage your account, leaderboard rankings, and game progress
• Analyse usage patterns to improve our games and user experience
• Communicate with you about updates, features, or support requests
• Detect, prevent, and address technical issues or fraudulent activity
• Comply with legal obligations

4. Legal Basis for Processing

Under the GDPR and UK GDPR, we process your data on the following legal bases:

• Consent: When you opt in to analytics, marketing, or functional cookies
• Contract: To provide the service you signed up for (account, gameplay, leaderboards)
• Legitimate interests: To improve our service, ensure security, and prevent fraud
• Legal obligation: To comply with applicable laws and regulations

5. Data Sharing & Third Parties

We do not sell your personal data. We may share information with third parties only in the following circumstances:

• Analytics providers (e.g., Google Analytics) to understand usage patterns
• Authentication providers (e.g., social login services) to manage sign-in
• Advertising partners to show relevant ads, only with your consent
• Hosting and infrastructure providers that store and process data on our behalf
• Legal authorities when required by law, court order, or governmental request

6. International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence, including countries that may not provide the same level of data protection. When we transfer data internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission, or equivalent measures under applicable laws.

7. Your Rights

Under the GDPR & UK GDPR

If you are in the European Economic Area or the United Kingdom, you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate or incomplete personal data
• Erase your personal data (“right to be forgotten”)
• Restrict or object to certain processing activities
• Data portability — receive your data in a structured, machine-readable format
• Withdraw consent at any time (without affecting prior lawful processing)
• Lodge a complaint with a supervisory authority

Under the CCPA (California)

If you are a California resident, you have the right to:

• Know what personal information is collected, used, shared, or sold
• Delete personal information held by us (with certain exceptions)
• Opt-out of the sale of personal information — we do not sell personal data
• Non-discrimination for exercising your CCPA rights

Under the LGPD (Brazil)

If you are a resident of Brazil, you have the right to:

• Confirm whether your data is being processed
• Access, correct, or anonymise your data
• Request deletion of unnecessary or excessive data
• Data portability to another service provider
• Information about third parties with whom data is shared
• Revoke consent at any time

To exercise any of these rights, please contact us using the details in the Contact Us section below.

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes described in this policy, or as required by law. Account data is retained for the lifetime of your account and deleted within 30 days of account deletion. Usage and analytics data is retained in aggregated, anonymised form and may be kept indefinitely for statistical purposes.

9. Children's Privacy

CupTrivia is not directed at children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us and we will promptly delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by updating the “Last updated” date at the top of this page and, where appropriate, through a notice on the site. We encourage you to review this policy periodically.

11. Contact Us

If you have questions about this Privacy Policy, your personal data, or wish to exercise your rights, please contact us at:

CupTrivia
Email: privacy@cuptrivia.com