Privacy
Policy

Who we are

SportsStack (“we”, “us”, “our”) operates the sports quiz platform at sportsstack.com.au, based in Victoria, Australia. We are committed to protecting your personal information in accordance with applicable privacy laws worldwide.

For privacy enquiries contact us at sportstack1@gmail.com.

Information we collect

Information you provide

• Account information — your name and email address, provided directly or via Google Sign-In.
• Marketing preferences — whether you have opted in to receive promotional emails from us at the time of registration.

Information generated by your use

• Quiz activity — scores, completion times, streaks, and badges earned.
• Sticker book progress — World Cup sticker cards earned through daily game completions.
• Usage data — anonymised analytics via Google Analytics 4 (pages visited, session duration, device type, country). GA4 does not store your IP address.

Lawful basis for processing (GDPR)

For users in the European Economic Area and the United Kingdom, we process your personal data on the following lawful bases under Article 6 of the GDPR:

• Contract — processing your account information and quiz activity is necessary to provide the service you signed up for.
• Consent — sending marketing emails requires your explicit opt-in consent, which you can withdraw at any time.
• Legitimate interests — anonymised analytics to improve the platform, where these interests are not overridden by your rights.

How we use your information

• To operate your account and save quiz progress, scores, streaks, and sticker collections.
• To display your username and scores on public leaderboards. Your email address is never shown publicly.
• To send a welcome email when you register.
• To send marketing emails and platform updates only if you have explicitly opted in.
• To improve the platform using aggregated, anonymous analytics.

Google Sign-In

If you sign in with Google, we receive your name and email address from Google solely for the purpose of creating and managing your SportsStack account. We do not receive your password or any other Google account data. Your use of Google Sign-In is also subject to Google’s Privacy Policy.

Marketing emails

We will only send marketing or promotional emails if you ticked the opt-in box when registering. You can unsubscribe at any time by:

• Clicking the unsubscribe link in any email we send, or
• Emailing us at sportstack1@gmail.com.

We will action unsubscribe requests within 5 business days.

Data storage and international transfers

Your data is stored using Supabase, a cloud database provider. Supabase may store and process data on servers located outside your country, including outside the European Economic Area. Where data is transferred internationally, Supabase implements appropriate safeguards in accordance with applicable data protection law.

Email communications are managed using industry-standard email delivery tools.

Data retention

• Account data — retained for as long as your account is active. If you request deletion, your account and associated data will be removed within 30 days.
• Quiz scores and sticker data — retained for the lifetime of your account to maintain leaderboard integrity.
• Analytics data — anonymised GA4 data is retained for 14 months in accordance with Google’s default settings.
• Marketing consent records — retained until you withdraw consent or request deletion.

Cookies

We use the following cookies and similar technologies:

• Authentication cookies — necessary to keep you signed in. These cannot be disabled without breaking account functionality.
• Google Analytics 4 — anonymised analytics to understand how people use the site. If you are in the EU or UK, we only activate GA4 analytics after obtaining your consent.

We do not use advertising, tracking, or third-party marketing cookies.

Children — COPPA and global protections

SportsStack is not directed at children under the age of 13, and we do not knowingly collect personal information from children under 13.

United States (COPPA): In compliance with the Children’s Online Privacy Protection Act, if we become aware that a child under 13 has provided us with personal information without verifiable parental consent, we will delete that information promptly. Parents or guardians who believe their child has registered may contact us at sportstack1@gmail.com to request immediate deletion.

European Economic Area: Under the GDPR, the minimum age for consent varies by member state (13–16 years). If you are under the applicable age in your country, you must obtain parental consent before registering.

Australia: We treat users under 15 as minors and will not send marketing communications to users we reasonably believe to be under 15.

If you are a parent or guardian and have concerns about your child’s use of SportsStack, please contact us at sportstack1@gmail.com.

Your rights

All users

• Request access to the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your account and all associated personal data.
• Withdraw marketing consent at any time.

EU and UK users (GDPR / UK GDPR)

• Right to restriction — request that we limit how we process your data in certain circumstances.
• Right to portability — request a copy of your data in a machine-readable format.
• Right to object — object to processing based on legitimate interests.
• Right to lodge a complaint — you have the right to lodge a complaint with your local supervisory authority. In the UK this is the Information Commissioner’s Office (ICO). In Ireland, the Data Protection Commission.

California users (CCPA)

• You have the right to know what personal information we collect and how it is used.
• You have the right to request deletion of your personal information.
• We do not sell personal information to third parties.

Australian users (Privacy Act 1988)

• You have the right to access and correct personal information we hold about you, in accordance with the Australian Privacy Principles.
• If you are unsatisfied with our handling of a privacy complaint, you may contact the Office of the Australian Information Commissioner (OAIC).

To exercise any of these rights, contact us at sportstack1@gmail.com. We will respond within 30 days.

Third-party services

SportsStack uses the following third-party services that may process your data:

• Supabase — database and authentication.
• Google — sign-in authentication and analytics (GA4).
• Cloudflare — website hosting and content delivery.

Changes to this policy

We may update this policy from time to time. For significant changes, we will notify registered users by email. The updated date at the top of this page will always reflect when the policy was last revised.

Contact and complaints

For privacy enquiries, requests, or complaints, contact us at sportstack1@gmail.com. We aim to respond within 30 days. If you are not satisfied with our response, you have the right to escalate to your local data protection authority (see Your Rights above).