FanPick ("we", "us", or "our") operates fanpick.org. This page informs you of our policies regarding the collection, use, and disclosure of personal information.

Information We Collect

Information you provide: Nickname, predictions, group names, and champion vote selections. If you sign in with Google, we also store your email address and display name to sync your predictions across devices.

Information collected automatically: A random user identifier (localStorage), browser fingerprint hash (anti-abuse only, hashed — not stored in raw form), and IP address (via Cloudflare, retained 72 hours).

Cookies & Consent

Essential storage: We use localStorage to save your predictions and preferences. A session cookie is set if you sign in with Google. These are strictly necessary for the service to function.

Analytics & Advertising: We use Google Analytics, Microsoft Clarity, Plausible, Ahrefs, and Google AdSense. These services set their own cookies and are only loaded after you grant consent via our cookie banner.

We use Google Consent Mode v2 to manage your consent choices. When you decline, analytics and advertising scripts are not loaded and no non-essential cookies are set.

You can change your consent at any time by clearing your browser’s localStorage for fanpick.org.

Third-Party Services

Google OAuth — Optional sign-in. Collects email, name, avatar. Subject to Google Privacy Policy.
Google Analytics (GA4) — Traffic analysis. Collects page views, device info, browsing behavior. Only loaded after consent.
Microsoft Clarity — Session recordings and heatmaps. Records mouse movements, clicks, scrolling, and page interactions to help us improve usability. Session recordings are anonymized — Clarity masks form inputs and personal text. Only loaded after consent. See Microsoft Privacy Statement.
Plausible Analytics — Privacy-focused analytics. No cookies, no personal data. Collects anonymous page view counts.
Ahrefs — SEO analytics. Collects page view data for site performance analysis.
Cloudflare — Hosting and CDN. Collects IP addresses (retained 72 hours). See Cloudflare Privacy Policy.
flagcdn.com — Country flag images. Your IP address is sent to their CDN when loading flag images.

Data Retention

Predictions and account data are retained for 12 months after the relevant event ends, or until you request deletion. Server logs (Cloudflare) are retained for 72 hours. Session recordings (Clarity) are retained for 30 days by Microsoft.

Your Rights (GDPR)

If you are in the EEA, you have the following rights under GDPR:

Right of Access — Request a copy of the personal data we hold about you.
Right to Rectification — Request correction of inaccurate personal data.
Right to Erasure — Request deletion of your personal data (see below).
Right to Restrict Processing — Request that we limit how we use your data.
Right to Object — Object to our processing of your personal data.
Right to Data Portability — Request your data in a structured, machine-readable format (JSON) for transfer to another service.
Right to Lodge a Complaint — You have the right to lodge a complaint with your local data protection supervisory authority.

Lawful basis: We process your data based on consent (analytics, advertising), legitimate interest (anti-abuse fingerprinting), and contractual necessity (providing the prediction service).

Data Deletion

You can request deletion of all your personal data at any time:

Self-service: Sign in with Google, then visit the Account Deletion page to permanently delete your account and all associated data (predictions, pools, votes).
Email request: Send an email to hello@fanpick.org with subject "Data Deletion Request". We will process your request within 30 days.

Deletion is permanent and cannot be undone. Predictions stored in your browser’s localStorage are not affected — you can clear them by clearing your browser data.

Contact

Email: hello@fanpick.org

This Privacy Policy is for informational purposes only and does not constitute legal advice.