Privacy Policy

1. Introduction

This Privacy Policy explains how PunterPick ("PunterPick", "we", "us", "our") handles information when you visit our website and use our football prediction content (the "Service"). It applies to every visitor, wherever you are located.

We have written this policy in plain language because a privacy policy that nobody can read protects nobody. If anything here is unclear, contact us and we will explain it.

2. Our core commitment: we do not want your personal data

PunterPick is deliberately built as a read-only publication. There are no user accounts, no registration, no login, no passwords, no profiles and no newsletters. You cannot create an account on this Service because we have not built one.

This is a privacy decision, not an oversight. Because we hold no accounts, there is no customer database to leak, no credentials to steal and no betting history tied to your identity. The safest way to protect personal data is not to collect it.

3. What we do NOT collect

We do not collect or ask for: your name, your email address, your postal address, your telephone number, your date of birth, your payment or card details, your bank details, your government identifiers, your betting account details, your stake sizes, your winnings or losses, your photograph, or any biometric data.

We do not build advertising profiles about you, we do not sell data, we do not rent data, and we do not trade data with third parties for their own marketing purposes.

4. Information processed automatically

Like every website on the internet, our hosting provider automatically records limited technical information when a page is served. This typically includes your IP address, the date and time of the request, the page or file requested, the HTTP status code, your browser type and version, your operating system and the referring page.

This information is generated by the web server itself and is used only to deliver the site, keep it available, diagnose faults, measure aggregate traffic volume and detect abuse such as automated scraping or denial-of-service attempts. We do not use server logs to identify individual visitors and we do not combine them with any other data set.

Where our infrastructure or security providers process this information on our behalf, they act as processors under contract and may not use it for their own purposes.

5. Cookies and browser storage

We do not use analytics cookies, tracking cookies, advertising cookies or cross-site tracking technologies of our own.

We use your browser’s local storage for two strictly functional purposes: to remember predictions you have starred ("pp-saved") and to remember your cookie and privacy choice ("pp-consent"). Both are stored on your own device only. Neither is transmitted to us, neither is readable by us, and neither contains anything that identifies you.

You can erase both at any time by clearing site data in your browser. Doing so removes your starred predictions, because they exist nowhere except on your device.

Our Cookie Policy explains this in more detail.

6. Third-party services we rely on

To deliver the Service we load resources from a small number of third parties. When your browser requests those resources, the provider necessarily sees your IP address and basic request information, and each operates under its own privacy policy which we do not control.

Fonts are served by Google Fonts. Competition and country flag images are served by a flag content delivery network. Football fixture, odds and standings data is supplied by a licensed sports data provider. Where advertising is displayed, it is delivered by an advertising network.

We choose providers who publish a privacy policy and, where relevant, offer standard data-protection terms. We are not responsible for the independent practices of these providers; their own policies apply and are linked where possible.

7. Advertising

The Service carries advertising in order to remain free to use. Advertising networks may use cookies or similar technologies to measure impressions and, unless you refuse consent, to personalise the advertising you see.

If you decline non-essential cookies, we instruct our advertising partners to serve non-personalised advertising where that option is available. Non-personalised advertising still requires limited processing, such as counting impressions and preventing fraud.

We do not provide advertisers with any information that identifies you, because we do not hold any.

8. Legal bases for processing (UK & EU GDPR)

Where the UK GDPR or EU GDPR applies, we rely on the following legal bases. For serving the site, maintaining security and preventing abuse, we rely on our legitimate interests in operating a functioning and secure publication (Article 6(1)(f)). For non-essential cookies and personalised advertising, we rely on your consent (Article 6(1)(a)). For complying with legal obligations, including responding to lawful requests, we rely on Article 6(1)(c).

Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect processing carried out before withdrawal.

9. How long information is kept

Server and security logs are retained only for as long as needed to operate and secure the Service and to meet any applicable legal obligation, after which they are deleted or aggregated so that they no longer relate to an individual request.

Data held in your browser’s local storage persists on your device until you clear it. We cannot delete it for you because we cannot reach it.

10. International transfers

The Service is delivered through global infrastructure, so technical information may be processed in countries outside your own, including outside the United Kingdom and the European Economic Area.

Where personal data is transferred internationally by a provider acting for us, we rely on the safeguards that provider has in place, such as adequacy decisions or Standard Contractual Clauses.

11. Your rights under the GDPR

If the UK or EU GDPR applies to you, you have the right to be informed, the right of access, the right to rectification, the right to erasure, the right to restrict processing, the right to data portability, the right to object, and the right not to be subject to solely automated decision-making that produces legal effects.

We will always answer a rights request honestly. In most cases our answer will be that we hold no personal data about you, because we operate no accounts. If you believe we hold something about you, tell us what you believe we hold and we will investigate and respond.

12. Additional rights under your local law

Local data-protection law where you live may give you further rights: to learn whether your personal data is processed, to request information about that processing and its purpose, to know the third parties to whom data is transferred, to request correction of incomplete or inaccurate data, to request erasure or destruction, to object to results produced solely by automated analysis, and to claim compensation for damage caused by unlawful processing.

Requests may be sent to us using the contact details below and will be answered within the statutory period.

13. Your rights under CCPA and CPRA (California)

If you are a California resident, you have the right to know what personal information is collected, the right to delete personal information, the right to correct inaccurate personal information, the right to opt out of the sale or sharing of personal information, and the right not to be discriminated against for exercising those rights.

We do not sell personal information and we do not share personal information for cross-context behavioural advertising in exchange for money. We do not collect the categories of sensitive personal information listed in the CPRA.

14. Age restriction

The Service is intended strictly for adults aged 18 or over, and in jurisdictions with a higher minimum gambling age, for persons who meet that higher age. The Service is not directed at children and we do not knowingly process information relating to a child.

If you believe a minor has been using the Service, please contact us.

15. Security

We take reasonable and proportionate technical measures to protect the Service, including serving it over encrypted connections, restricting what the page is permitted to load, and keeping our attack surface deliberately small by holding no accounts and no personal database.

No method of transmission or storage over the internet is completely secure, and no honest operator will promise you that their site can never be attacked. What we can tell you is that a successful attack on this Service would not expose your identity, your credentials or your payment details, because we never collect them.

16. Changes to this policy

We may update this Privacy Policy to reflect changes in the Service, in our providers or in the law. The date at the top of this page shows when it was last revised, and material changes will be signalled on the Service.

Continuing to use the Service after a revision means you accept the revised policy.

17. Contact

For any privacy question or rights request, contact us through the details on our Contact page. Tell us clearly what you are asking for so that we can respond usefully.