Effective: 2026-05-22 (DOB added)
Who we are
The ZINGO World Cup Predictor (the "Service") is operated by ZINGO ("we", "us", "our"), reachable at info@zingo.buzz. We are the data controller for personal data processed through this Service.
What we collect
When you create an account or use the Service, we may collect:
- Account data — your email address, display name, date of birth (used to confirm you are 16+ at sign-up and 18+ for prize eligibility), and (optionally) your Instagram handle.
- Authentication data — encrypted password (we never see plaintext), session tokens.
- Predictions & gameplay — your match score predictions, ZINGO Zone player picks, league memberships, team names within leagues, timestamps.
- Technical data — minimal IP address and user-agent information collected by our hosting providers (Netlify, Supabase) for security and abuse prevention.
- Multi-account detection signals — at sign-up and sign-in we record your IP address, browser user-agent, timezone, language, a non-cryptographic browser fingerprint hash, and a random identifier we store in your browser's localStorage. We use these solely to detect and prevent the same person creating multiple accounts to manipulate prize leaderboards. We do not share them externally, do not use them for advertising or profiling, and do not sell them. Reviewed by an admin before prize payouts.
We do not use advertising cookies, behavioural tracking, or third-party analytics that build profiles.
Why we use it
- To operate the Service — store and display your predictions, leaderboards, leagues.
- To authenticate you and keep your account secure.
- To send transactional emails: signup confirmation, password recovery, and match-reminder emails sent roughly 2 hours before a match kicks off if you haven't predicted it yet. You can turn off reminder emails any time from your profile page.
- To debug, investigate abuse, and improve the Service.
Legal basis (UK / EU users)
We process your data under the following GDPR / UK GDPR legal bases:
- Contract — to provide you the Service you signed up for.
- Legitimate interest — to keep the Service secure, prevent fraud, and improve features.
- Consent — where required (e.g. optional Instagram handle, opt-in emails).
Who we share it with
We use a small set of trusted infrastructure providers:
- Supabase (database + authentication) — hosted in the EU (Ireland, eu-west-1).
- Netlify (static hosting + CDN).
- Resend (transactional email delivery — receives your email address and the email content to send signup/password/reminder messages on our behalf). US-based.
- flagcdn.com (country flag images served to your browser).
We do not sell your data. We will only disclose data if legally compelled.
International transfers
Data may be processed outside your country — Netlify's CDN serves traffic globally, and Resend processes email sending in the United States. Where applicable, transfers are made under standard contractual clauses or equivalent safeguards.
Retention
Account and prediction data is retained for as long as your account is active and for a reasonable period afterwards for record-keeping. You can request deletion at any time (see "Your rights" below).
Your rights
Under UK GDPR / EU GDPR (and similar US state laws where applicable) you have the right to:
- Access the personal data we hold about you.
- Have inaccurate data corrected.
- Request deletion ("right to be forgotten").
- Receive a copy of your data in a portable format.
- Object to, or restrict, certain processing.
- Lodge a complaint with your national data protection authority (e.g. ICO in the UK, DPC in Ireland).
To exercise any of these, email info@zingo.buzz. We will respond within 30 days.
Cookies
We only set cookies and local-storage entries strictly necessary for the Service — primarily your authentication session. We do not use advertising or third-party tracking cookies.
Children
The Service is intended for users aged 16 and over. We collect your date of birth at sign-up and accounts with a date of birth showing the user is under 16 are rejected. If you believe a user under 16 has somehow created an account, please email info@zingo.buzz and we will remove it.
Changes to this policy
We may update this policy. Material changes will be highlighted on this page with an updated effective date.
Contact
Questions about this policy or your data? Email info@zingo.buzz.