Beta — Your feedback helps us improve
<- Back to home

Privacy Policy

Last updated: January 25, 2026 Version: 2026-01-25


1. Introduction

This Privacy Policy describes how the Picks4All platform ("the Platform", "the Service", "we", "us") collects, uses, stores, and protects your personal information.

We are committed to protecting your privacy and being transparent about our data practices. By using our Service, you agree to the practices described in this Policy.


2. Information We Collect

2.1 Information You Provide

Registration data: - Email address - Username - Display name - Password (stored securely using hashing)

Optional profile data: - Preferred time zone - Notification preferences

Service usage data: - Predictions made in pools - Pool participation (as host or player) - Interactions with other users

2.2 Automatically Collected Information

Technical data: - IP address - Browser type and version - Operating system - Device identifiers - Pages visited and time spent

Log data: - Date and time of access - Actions performed (login, pool creation, etc.) - Errors and system events

2.3 Third-Party Information

If you choose to sign in with Google: - Google user ID - Name associated with your Google account - Google email address

We do not access your contacts, calendar, Drive files, or any other Google data beyond what is mentioned above.


3. How We Use Your Information

We use your information to:

3.1 Provide the Service

- Create and manage your account - Enable your participation in pools - Calculate scores and rankings - Send notifications about relevant activity

3.2 Improve the Service

- Analyze usage patterns (in aggregate) - Identify and fix bugs - Develop new features - Optimize performance and user experience

3.3 Communications

- Send transactional emails (password recovery, etc.) - Notify you of changes to the Terms or Privacy Policy - Send marketing communications (only with your consent)

3.4 Security and Compliance

- Detect and prevent fraud or abuse - Comply with legal obligations - Protect our rights and those of other users - Maintain audit logs


4. Legal Basis for Processing

We process your information under the following legal bases:

| Legal Basis | Application | ConsentMarketing communications, optional cookies Contract performanceProviding the service, managing your account Legitimate interestSecurity, fraud prevention, service improvement | Legal obligation | Compliance with laws and regulations |


5. How We Share Your Information

5.1 With Other Users

Within the Platform, other users may see: - Your username and display name - Your position on leaderboards - Your predictions (after each match's deadline) - Your participation history in shared pools

5.2 With Service Providers

We may share data with providers who help us operate the Service:

| Provider | Purpose | Data Shared | Hosting providerStorage and serversAll service data Email serviceSending emailsEmail, name | Authentication service (Google) | Social login | Session ID |

These providers are contractually obligated to protect your data and may only use it for the specified purposes.

5.3 For Legal Reasons

We may disclose information if we believe in good faith that it is necessary to: - Comply with a legal obligation - Respond to valid legal requests (court orders, etc.) - Protect the safety of users or the public - Defend our legal rights

5.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction. We will notify you of any change in ownership or use of your information.

5.5 What We Do NOT Do

- We DO NOT sell your personal information - We DO NOT share data with advertisers for targeted advertising - We DO NOT use your data for profiling for third-party commercial purposes


6. Data Retention

6.1 Retention Periods

| Data Type | Retention Period | Account dataWhile the account is active + 30 days Predictions and scoresWhile the account is active Security logs12 months Audit logs24 months | Deleted pool data | 90 days (for possible restoration) |

6.2 Account Deletion

When you request account deletion: - Your personal data will be deleted within 30 days - Anonymized data may be retained for statistical analysis - Audit logs are maintained for the legally required period


7. Your Rights

Depending on your location, you may have the following rights:

7.1 General Rights

- Access: Request a copy of your personal data - Rectification: Correct inaccurate or incomplete data - Deletion: Request the deletion of your data - Portability: Receive your data in a structured format - Objection: Object to certain types of processing

7.2 For Users in Colombia

Under Law 1581 of 2012 (Habeas Data Law), you have the right to: - Know, update, and rectify your information - Request proof of the authorization granted - Be informed about the use of your data - Revoke authorization and/or request deletion - File complaints with the SIC (Superintendency of Industry and Commerce)

7.3 For Users in the European Union

Under the GDPR, in addition to general rights, you have the right to: - Withdraw your consent at any time - File complaints with your local data protection authority - Not be subject to automated decisions with legal effects

7.4 For Users in the United States (California)

Under the CCPA, California residents have the right to: - Know what personal information is collected - Know whether their information is sold or shared - Opt out of data sales (we do not sell data) - Not be discriminated against for exercising their rights

7.5 How to Exercise Your Rights

To exercise any of these rights, contact us at: - Email: privacy@picks4all.com

We will respond to your request within the applicable legal timeframes (generally 15-30 days).


8. Data Security

8.1 Technical Measures

We implement security measures including: - Encryption of data in transit (HTTPS/TLS) - Password encryption with secure algorithms (bcrypt) - Authentication tokens with expiration - Protection against common attacks (XSS, CSRF, SQL injection)

8.2 Organizational Measures

- Restricted access to personal data (principle of least privilege) - Internal information security policies - Monitoring of access and suspicious activities

8.3 Limitations

No system is 100% secure. Although we strive to protect your information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your credentials.


9. International Transfers

9.1 Data Location

Our servers may be located in different countries. By using the Service, you consent to the transfer of your data to these locations.

9.2 Safeguards

For transfers outside your jurisdiction, we implement: - Approved standard contractual clauses - Impact assessments when required - Data processing agreements with providers


10. Minors

10.1 Minimum Age

The Service is intended for users 13 years of age or older.

10.2 Users Under 18

If you are between 13 and 17 years old, you must have the consent of your parents or legal guardians to use the Service.

10.3 Users Under 13

We do not intentionally collect information from children under 13. If we discover that we have collected data from a child under 13, we will delete that information immediately.

If you are a parent/guardian and believe your child under 13 has provided information, please contact us.


11. Cookies and Similar Technologies

11.1 Current Use

Currently, the Platform uses: - Browser LocalStorage: To store your session token - We do not use tracking cookies or third-party cookies

11.2 Future Changes

If we implement additional cookies in the future: - We will inform you by updating this Policy - We will request your consent when required - We will provide options to manage your preferences


12. Third-Party Links

The Platform may contain links to third-party websites. We are not responsible for the privacy practices of these sites. We recommend reviewing their privacy policies before providing them with information.


13. Changes to This Policy

13.1 Notification of Changes

We may update this Privacy Policy periodically. We will notify you of material changes through: - A prominent notice on the Platform - An email to your registered address - A request for re-acceptance upon login

13.2 Version History

We maintain a history of previous versions of this Policy, available upon request.


14. Contact

For questions, requests, or complaints related to this Privacy Policy:

Email: privacy@picks4all.com Response time: We strive to respond to all requests within 15 business days.


15. Additional Information for Colombia

15.1 Data Controller

The data controller for your personal data is the operator of the Picks4All Platform.

15.2 Purposes

The purposes of data processing are described in Section 3 of this Policy.

15.3 Data Subject Rights

Your rights as a data subject are described in Section 7.2.

15.4 Supervisory Authority

You may file complaints with: - Superintendency of Industry and Commerce (SIC) - Carrera 13 No. 27-00, Bogota D.C., Colombia - www.sic.gov.co


By using the Platform, you confirm that you have read, understood, and accepted this Privacy Policy.