Privacy policy

1. Controller and scope

Guess2Score is published by Mustafa Turan, who is the data controller. Contact support@guess2score.site with privacy questions or requests.

This policy covers the Guess2Score mobile app, guess2score.site and support communications. The app is in a closed beta focused on the Süper Lig. Feature availability may differ by version.

2. Information and purposes

• Account and session: Apple or Google sign-in provides a provider user identifier, a shared email address (including an Apple private relay address), name/profile image where supplied, and session authentication information. We use these to create and identify your account and provide secure sign-in. We do not receive your Apple/Google password.
• Profile and game: your display name, user identifier, predictions, prediction timestamps, score settlements and derived accuracy/performance statistics support gameplay and rankings.
• Friend leagues: league names, founder/manager details, memberships, joining dates, invitations and security-related join attempts support social competition and access protection.
• Security and operations: server requests, IP/network information, timestamps, error/access records and technical service information may be processed in service providers’ logs for security, abuse prevention and troubleshooting.
• Support: your email, message and voluntarily supplied bug details are used to respond to your request. Do not send passwords, sign-in codes or access keys.

Depending on the purpose and applicable law, processing relies on delivering the service/performing the contract, legitimate interests in secure operations, legal obligations and consent where required. Features requiring consent must offer the appropriate choices before activation.

3. Visibility to other players

Your display name and league-ranking performance may be visible to members of your friend league. After kickoff, members of the same league may see your home/draw/away result pick. This sharing is hidden before kickoff. This feature does not expose your exact-score prediction, first-goal prediction or email address to other users.

Platform-wide prediction percentages may be shown after kickoff. They come from frozen aggregate counts and do not expose individual platform users’ identities.

4. Services we use

• Supabase / Supabase Auth: authentication, sessions, database storage and server operations. Supabase privacy information.
• Apple and Google: your chosen sign-in provider authenticates you. Your use of their own services is also subject to their privacy policies. Apple · Google.
• Cloudflare: website delivery, network security and support email routing. Support messages are forwarded to the publisher’s Apple iCloud mailbox. These services may process message/network information for delivery and security. Cloudflare privacy information.
• SportScore: supplies football fixtures, results and events to the app’s backend. This data-fetching flow does not send your Guess2Score account, email or individual predictions to SportScore.

Provider infrastructure may process information outside your country. We do not claim that all data stays exclusively in Türkiye. Applicable data-protection obligations must be considered for transfers. We do not sell your data as an independent data product; necessary service processing and legally required disclosures are distinct.

5. Crash reporting and analytics

Data transmission to Sentry and PostHog is not enabled in the currently uploaded beta configuration. The app contains a technical foundation for future crash reporting and limited usage measurement. Before activation, this policy and store disclosures will be reassessed against the actual configuration. Infrastructure/security logs are separate from this optional app analytics.

6. Optional rewarded advertising

Guess2Score may use Google AdMob to provide optional rewarded advertisements in versions where this feature is enabled. Watching an ad is optional; you are not required to pay money.

When enabled, Google and its advertising technologies may process device/app identifiers, IP/network information (including approximate-location inference), ad interactions and diagnostics for ad delivery, measurement, fraud prevention and consent choices. The scope depends on the SDK version, platform, enabled settings and your consent preferences.

Read Google’s Privacy Policy, Google’s use of information from partner services, and its Android / iOS ads SDK disclosures.

Required consent and privacy choices, including those relevant to the EEA, UK and Switzerland, must be provided before ad activation. This policy is not itself consent to advertising tracking. Rewarded ads do not directly sell points or match results. Guess2Score is not betting or gambling.

7. Retention, security and deletion

Account and game records are retained to provide your account’s services. We use HTTPS, database access restrictions and server-side authorization. No system can be guaranteed completely secure.

Visit account deletion to request permanent deletion of your account and associated personal data. Once deletion is completed, your profile, predictions, memberships and related game records are removed. Leagues you founded with remaining members are preserved through an ownership transfer; other members’ records are not deleted.

Frozen prediction aggregates without user identifiers may remain. Security logs, support correspondence and backups may be retained as necessary for security, legal obligations or disputes and within providers’ retention cycles. We do not promise immediate removal from every copy or an unverified fixed retention period. Contact support about retention applicable to your request.

8. Your rights and contact

Depending on your location and applicable law, you may have rights to access, correct, delete, restrict or object to processing, obtain portability, or withdraw consent. Contact support@guess2score.site. We may verify your identity to protect other users’ accounts. Your right to contact the relevant data-protection authority is unaffected.

If you have concerns about a child’s personal data, contact us at the same address. Do not attach identity documents or sensitive information that is unnecessary for the initial review.

9. Website and policy updates

This website contains no advertising, analytics trackers, tracking pixels or code that sets app-owned cookies. Language selection uses links without storing a browser preference. Cloudflare’s processing of network/access information to deliver and secure pages is separate.

This policy may be updated as the service or data practices change. The current revision date appears above; material changes and processing requiring consent will also be addressed in the relevant version.