Privacy policy

1. Controller and scope

Guess2Score is published by Mustafa Turan, who is the data controller. Contact support@guess2score.site with privacy questions or requests.

This policy covers the Guess2Score mobile app, guess2score.site and support communications. The app is available on the App Store; a Google Play release is coming soon. It covers Süper Lig, Premier League, UEFA Champions League and UEFA Europa League matches. Feature availability may differ by version.

2. Information and purposes

• Account and session: Apple or Google sign-in provides a provider user identifier, a shared email address (including an Apple private relay address), name/profile image where supplied, and session authentication information. We use these to create and identify your account and provide secure sign-in. We do not receive your Apple/Google password.
• Profile and game: your display name, user identifier, predictions, prediction timestamps, score settlements and derived accuracy/performance statistics support gameplay and rankings.
• Friend leagues: league names, founder/manager details, memberships, joining dates, invitations and security-related join attempts support social competition and access protection.
• Security and operations: server requests, IP/network information, timestamps, error/access records and technical service information may be processed in service providers’ logs for security, abuse prevention and troubleshooting.
• Support: your email, message and voluntarily supplied bug details are used to respond to your request. Do not send passwords, sign-in codes or access keys.

Depending on the purpose and applicable law, processing relies on delivering the service/performing the contract, legitimate interests in secure operations, legal obligations and consent where required. Features requiring consent must offer the appropriate choices before activation.

3. Visibility to other players

Your display name and league-ranking performance may be visible to members of your friend league. After kickoff, members of the same league may see your home/draw/away result pick. This sharing is hidden before kickoff. This feature does not expose your exact-score prediction, first-goal prediction or email address to other users.

Platform-wide prediction percentages may be shown after kickoff. They come from frozen aggregate counts and do not expose individual platform users’ identities.

4. Services we use

• Supabase / Supabase Auth: authentication, sessions, database storage and server operations. Supabase privacy information.
• Apple and Google: your chosen sign-in provider authenticates you. Your use of their own services is also subject to their privacy policies. Apple · Google.
• Cloudflare: website delivery, network security and support email routing. Support messages are forwarded to the publisher’s Apple iCloud mailbox. These services may process message/network information for delivery and security. Cloudflare privacy information.
• Football data provider: a third-party football data provider supplies fixtures, results and match events to the app’s backend. This data-fetching flow does not send your Guess2Score account, email or individual predictions to the provider.

Provider infrastructure may process information outside your country. We do not claim that all data stays exclusively in Türkiye. Applicable data-protection obligations must be considered for transfers. We do not sell your data as an independent data product; necessary service processing and legally required disclosures are distinct.

5. Crash reporting and analytics

Data transmission to Sentry and PostHog is not enabled in the app’s current release configuration. The app contains a technical foundation for future crash reporting and limited usage measurement. Before activation, this policy and store disclosures will be reassessed against the actual configuration. Infrastructure/security logs are separate from this optional app analytics.

6. Advertising

Guess2Score requests a rewarded advertisement through Google AdMob when a user chooses to watch an ad for an eligible Joker change or for the supporter badge. Ad loading or delivery is not guaranteed. Watching an ad is optional; you are not required to pay money.

Non-personalized in-list ads labelled “Ad” may appear in the Predictions week list. Results, score breakdowns, friend picks and rankings show no ads.

Supporter badge: Each optional rewarded ad you watch counts towards your supporter badge. The badge is visual only; it gives no points or game advantage. For this feature we keep, linked to your account, a daily count (for the daily limit, by Istanbul time) and a total count (for the badge level) of server-verified rewarded ads. Your badge level may be shown next to your name to members of your friend leagues; it is not shown to members you blocked or who blocked you. These records are deleted when you delete your account.

When enabled, Google and its advertising technologies may process device/app identifiers, IP/network information (including approximate-location inference), ad interactions and diagnostics for ad delivery, measurement, fraud prevention and consent choices. The scope depends on the SDK version, platform, enabled settings and your consent preferences.

On Android the app includes the Google advertising ID permission. Ads are not personalized; Google may use the ID for ad delivery (including frequency capping), measurement and fraud prevention. You can reset or delete it in your device settings.

Read Google’s Privacy Policy, Google’s use of information from partner services, and its Android / iOS ads SDK disclosures.

Required consent and privacy choices, including those relevant to the EEA, UK and Switzerland, must be provided before ad activation. This policy is not itself consent to advertising tracking. Rewarded ads do not directly sell points or match results. Guess2Score is not betting or gambling.

The app refreshes consent information through Google User Messaging Platform (UMP) each app session and presents a consent form when required. Ads load only when UMP allows ad requests; a check or form failure blocks the request. All ad requests (in-list and rewarded) specify non-personalized advertising. This does not guarantee an absence of identifiers, measurement or tracking. When Google requires it, you can reopen advertising privacy options from Profile. If a rewarded ad cannot be delivered, your Joker remains unchanged and your supporter count does not increase; rewards are applied only after a server-verified Google SSV reward.

7. Retention, security and deletion

Account and game records are retained to provide your account’s services. We use HTTPS, database access restrictions and server-side authorization. No system can be guaranteed completely secure.

Visit account deletion to request permanent deletion of your account and associated personal data. Once deletion is completed, your profile, predictions, memberships and related game records are removed. Leagues you founded with remaining members are preserved through an ownership transfer; other members’ records are not deleted.

Frozen prediction aggregates without user identifiers may remain. Security logs, support correspondence and backups may be retained as necessary for security, legal obligations or disputes and within providers’ retention cycles. We do not promise immediate removal from every copy or an unverified fixed retention period. Contact support about retention applicable to your request.

8. Your rights and contact

Depending on your location and applicable law, you may have rights to access, correct, delete, restrict or object to processing, obtain portability, or withdraw consent. Contact support@guess2score.site. We may verify your identity to protect other users’ accounts. Your right to contact the relevant data-protection authority is unaffected.

If you have concerns about a child’s personal data, contact us at the same address. Do not attach identity documents or sensitive information that is unnecessary for the initial review.

9. Website and policy updates

This website contains no advertising, analytics trackers, tracking pixels or code that sets app-owned cookies. Language selection uses links without storing a browser preference. Cloudflare’s processing of network/access information to deliver and secure pages is separate.

This policy may be updated as the service or data practices change. The current revision date appears above; material changes and processing requiring consent will also be addressed in the relevant version.