Privacy Policy

May 3, 2026

At Mi Mundial 2026 we take your privacy seriously. This policy explains what data we collect, how we use it, who we share it with, and what rights you have. It applies to all users of the website, PWA, and any associated mobile apps.

1. Data we collect

Account data (email, name, avatar if you sign in with Google), usage data (predictions, lineups, leagues, points, language), payment data (Stripe processes your card; we only store a customer identifier and subscription state) and technical data (IP, user-agent, errors). We never see or store card numbers.

2. How we use your data

To provide the service (predictions, leagues, lineup, ranking); send operational notifications if you opt in; improve the product through aggregated metrics; meet legal and tax obligations.

3. Who we share with

We work with vendors under confidentiality clauses and DPAs: Supabase (auth and database), Stripe and MercadoPago (payments), API-Football (only fixture queries, no personal data), Vercel (hosting and observability), Sentry or similar (technical errors). We don't sell your data. We don't share with advertisers.

4. Minimum age

The service is intended for people 13 years or older. If you are a minor, you may not use Mi Mundial 2026 without the express consent of a responsible adult.

5. Your rights (GDPR, LGPD, CCPA, LFPDPPP)

Access and portability: download all your data as JSON from settings. Rectification: edit your profile or write us. Deletion: delete your account from settings (definitive and immediate). Objection and restriction: turn off notifications or communications at any time.

6. Retention

We keep your data while your account is active. Technical logs are anonymized or deleted after 90 days. Accounting data tied to payments is kept for as long as Argentine law requires.

7. Security

We apply encryption in transit (TLS 1.2+), Row Level Security on the database, HTTP security headers (CSP, HSTS) and periodic security reviews. No system is 100% secure; we will notify you without delay if we detect an incident affecting your data.

8. Cookies

We use strictly-necessary cookies (Supabase session, language preference, consent) and operational cookies from Stripe. No advertising or third-party tracking cookies. Your consent is captured by the initial banner and can be revoked by clearing your browser.

9. Changes

If we modify this policy we will notify you in the app or by email before it takes effect.

For any inquiries: Ariel Vega · privacy@mundial2026.com

Privacidad — Mi Mundial 2026 · Mi Mundial 2026