Privacy Policy
📋 At a glance
We collect the minimum data needed to run the Service: your sign-in identifier, a small amount of profile data from your chosen sign-in provider, your token balance, and your prediction-unlock history. We do not sell your data, and we do not run advertising trackers.
Sign-in is handled by Google Firebase. Payments are handled by NOWPayments. We have no access to your Google/Apple password or your crypto wallet keys.
1. Who We Are
This Privacy Policy describes how the operator of this football prediction service ("we", "us", "the Operator") collects, uses, and discloses personal information. The Operator is an individual based in Australia. For questions, see section 13. Contact below.
2. What We Collect
2.1 Account information (from Firebase Authentication)
| Data | Source | Why |
|---|---|---|
| Firebase UID | Firebase | Identifies your account |
| Email address (optional) | Google / Email sign-in | Account recovery, identity |
| Display name (optional) | Google / Email sign-in | UI personalisation |
| Profile photo URL (optional) | Google sign-in | UI personalisation |
| Mobile number (optional) | Phone sign-in | SMS verification, identity |
You choose which sign-in method to use. We only receive the fields that method provides.
2.2 Service data
- Token balance — how many tokens your account holds
- Transaction history — token credits, deductions, and purchase IDs
- Unlock history — which matches you have unlocked Asian Handicap or Top Scoreline data for
- Shared snapshots — if you share a prediction, the prediction data (not your identity) is stored under a random token for up to 90 days
2.3 Technical data
- Server logs — request method, path, status code, response time. Retained for up to 30 days for security and debugging. Logs may contain your IP address.
- Anonymous visitor count — a single global counter, not linked to any user.
- Cloudflare Turnstile token — a one-time bot-detection token; we do not store it.
2.4 What we do NOT collect
- We do not collect your Google/Apple password — sign-in is handled entirely by Firebase
- We do not collect your cryptocurrency wallet private keys — payments are handled entirely by NOWPayments
- We do not use advertising trackers or third-party analytics
- We do not collect precise location data
3. How We Use Your Data
- To authenticate you and manage your account
- To debit and credit tokens accurately
- To deliver predictions you have unlocked, and to remember them so you do not pay twice
- To process cryptocurrency payments via NOWPayments
- To prevent abuse (rate limiting, bot detection)
- To debug errors and improve the Service
We do not use your data for advertising, profiling, or sale to third parties.
4. Cookies & Local Storage
- Firebase auth session — required to keep you signed in. Stored by Firebase in your browser.
- Language preference — we store your EN/ZH choice in your browser's
localStorageso the right language loads next time. - Cloudflare Turnstile — may set cookies for bot detection during sign-in.
We do not use third-party advertising cookies or cross-site tracking.
5. Third Parties
The Service relies on the following processors. By using the Service, you also accept their privacy practices for the data they process on our behalf.
| Provider | Purpose | Data shared |
|---|---|---|
| Google Firebase | Authentication, hosted in Google Cloud | Sign-in data, auth tokens |
| NOWPayments | Cryptocurrency payment processing | Firebase UID (as order ref), payment amount, currency |
| Cloudflare | Bot detection (Turnstile) | Anonymous browser fingerprint |
| QR Server API | QR-code generation for sharing | The public share URL only |
| Hosting providers (Fly.io, Render) | Server hosting | Server-side data |
6. Data Retention
- Account & service data: kept while your account is active. If you ask us to delete your account, we remove personal identifiers (email, display name, mobile) within 30 days. Anonymised transaction records may be retained for accounting and fraud-prevention purposes.
- Server logs: up to 30 days.
- Shared snapshots: 90 days from creation, then deleted automatically.
- Payment records: kept for as long as required by applicable financial and tax law.
7. International Transfers
The Service uses cloud infrastructure that may store and process data in regions including the United States, Japan, and Australia. By using the Service you consent to this transfer. We rely on the security and contractual protections offered by our infrastructure providers.
8. Your Rights
Depending on where you live, you may have the following rights:
- Access — ask what data we hold about you
- Correction — correct inaccurate data
- Deletion — ask us to delete your account and personal data
- Export — receive a copy of your data in a portable format
- Withdraw consent — stop using the Service at any time
- Lodge a complaint — with your local data-protection authority (e.g., Australian OAIC, EU supervisory authority)
To exercise these rights, contact us via the channels listed in section 13.
9. Children
This Service is for adults aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe we have collected such data, please contact us and we will delete it.
10. Security
We use industry-standard security measures including HTTPS-only traffic, encrypted authentication tokens, and isolated infrastructure for payment processing. However, no online service is 100% secure. You are responsible for keeping your sign-in credentials and crypto wallet keys safe.
11. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent change. Continued use of the Service after changes means you accept the updated policy.
12. Governing Law
This Privacy Policy is governed by the laws of Australia, including the Privacy Act 1988 and the Australian Privacy Principles. Nothing in this Policy limits rights you may have under other applicable laws (including, where relevant, the EU General Data Protection Regulation and the People's Republic of China Personal Information Protection Law).
13. Contact
For privacy questions or to exercise the rights described above, please contact us at predictorcontact@proton.me. We aim to respond within 30 days.
See also: Terms of Service
隐私政策
📋 概览
我们仅收集运行本服务所必需的最少数据:您的登录标识、所选登录方式提供的少量个人资料、代币余额,以及预测解锁记录。我们不出售您的数据,也不使用广告追踪。
登录由 Google Firebase 处理,支付由 NOWPayments 处理。我们无法获取您的 Google/Apple 密码或加密钱包私钥。
1. 我们是谁
本《隐私政策》说明本足球预测服务的运营方("我们"、"运营方")如何收集、使用与披露个人信息。运营方为身处澳大利亚的个人。如有疑问,请参阅下方 第 13 条「联系方式」。
2. 我们收集哪些数据
2.1 账号信息(来自 Firebase 身份验证)
| 数据 | 来源 | 用途 |
|---|---|---|
| Firebase UID | Firebase | 识别您的账号 |
| 邮箱地址(可选) | Google / 邮箱登录 | 账号恢复与身份识别 |
| 显示名称(可选) | Google / 邮箱登录 | 界面个性化 |
| 头像 URL(可选) | Google 登录 | 界面个性化 |
| 手机号(可选) | 手机号登录 | 短信验证与身份识别 |
您可自主选择登录方式,我们仅接收该方式提供的字段。
2.2 服务数据
- 代币余额 — 您账号当前代币数量
- 交易记录 — 代币充值、消耗记录与支付订单号
- 解锁记录 — 您已解锁亚洲盘口或前五比分数据的比赛
- 分享快照 — 若您分享某场预测,预测数据(不含您身份)会以随机令牌存储最多 90 天
2.3 技术数据
- 服务器日志 — 请求方法、路径、状态码、响应时间,用于安全与排查,最多保留 30 天。日志可能包含您的 IP 地址。
- 匿名访问计数 — 全站总访问量计数器,不关联任何用户。
- Cloudflare Turnstile 令牌 — 一次性机器人检测令牌,我们不留存。
2.4 我们「不」收集的数据
- 我们不收集您的 Google/Apple 密码 — 登录完全由 Firebase 处理
- 我们不收集您的加密货币钱包私钥 — 支付完全由 NOWPayments 处理
- 我们不使用广告追踪或第三方分析工具
- 我们不收集精确地理位置
3. 我们如何使用您的数据
- 验证您的身份并管理账号
- 准确记录代币的扣减与充值
- 向您提供已解锁的预测,并记忆解锁状态以避免重复扣费
- 通过 NOWPayments 处理加密货币支付
- 防止滥用(限流、机器人检测)
- 排查错误并改进服务
我们不会将您的数据用于广告、画像或出售给第三方。
4. Cookie 与本地存储
- Firebase 登录会话 — 用于保持登录状态,由 Firebase 在浏览器中存储。
- 语言偏好 — 您选择的 EN/中文 偏好会保存在浏览器
localStorage中,便于下次自动加载正确语言。 - Cloudflare Turnstile — 登录时可能设置用于机器人检测的 Cookie。
我们不使用第三方广告 Cookie,也不进行跨站追踪。
5. 第三方
本服务依赖以下处理方。使用本服务即表示您同时接受其相应的隐私实践。
| 服务方 | 用途 | 共享数据 |
|---|---|---|
| Google Firebase | 身份验证(Google Cloud 托管) | 登录信息、认证令牌 |
| NOWPayments | 加密货币支付处理 | Firebase UID(作为订单参考)、支付金额、币种 |
| Cloudflare | 机器人检测(Turnstile) | 匿名浏览器特征 |
| QR Server API | 分享 QR 码生成 | 仅公开分享链接 |
| 托管服务(Fly.io、Render) | 服务器托管 | 服务端数据 |
6. 数据保留
- 账号与服务数据:账号活跃期间保留。如您请求注销,我们将在 30 日内删除个人识别信息(邮箱、显示名称、手机号)。脱敏后的交易记录可能因会计与反欺诈目的继续保留。
- 服务器日志:最多 30 天。
- 分享快照:自创建起 90 天,到期自动删除。
- 支付记录:依据适用的财务与税务法律期限保留。
7. 跨境数据传输
本服务使用的云基础设施可能在美国、日本与澳大利亚等地存储与处理数据。使用本服务即视为您同意此种传输。我们依赖基础设施供应商提供的安全与合同保护措施。
8. 您的权利
视您所在地区适用法律,您可能享有以下权利:
- 访问 — 查询我们持有您的哪些数据
- 更正 — 修正不准确的数据
- 删除 — 要求删除您的账号与个人数据
- 导出 — 获取数据的便携格式副本
- 撤回同意 — 随时停止使用本服务
- 提出投诉 — 向您所在地数据保护机构投诉(如澳大利亚 OAIC、欧盟监管机构)
如需行使上述权利,请通过第 13 条所列方式与我们联系。
9. 未成年人
本服务面向 18 周岁及以上成年人。我们不会故意收集 18 周岁以下用户的数据。如您认为我们收集了此类数据,请联系我们删除。
10. 安全
我们采用行业标准的安全措施,包括全程 HTTPS、加密的认证令牌,以及独立隔离的支付处理基础设施。但任何在线服务都无法保证 100% 安全。您应自行妥善保管登录凭据与加密钱包私钥。
11. 政策变更
我们可能不时更新本《隐私政策》。页面顶部的"最后更新"日期反映最近一次修改。修改后继续使用本服务即视为接受更新后的政策。
12. 适用法律
本《隐私政策》受澳大利亚法律管辖,包括 1988 年《隐私法》与《澳大利亚隐私原则》。本政策不限制您依据其他适用法律所享有的权利(包括但不限于欧盟《通用数据保护条例》与中华人民共和国《个人信息保护法》)。
13. 联系方式
有关隐私问题或行使上述权利,请通过 predictorcontact@proton.me 联系我们。我们将在 30 日内回复。
参见:服务条款