ProdeLibre is a free service operated from Argentina. This policy explains what data we keep, what for, who we share it with and what you can do about it.

1. What data we collect

ProdeLibre only stores the data needed for the platform to work:

  • Name: the name you choose when you sign up. It appears in the standings and in your group.
  • Email: your email address. It is used to log in and to recover your password.
  • Password: stored encrypted (bcrypt hash). It is never kept in plain text and nobody can read it.
  • Predictions: the scores you enter for each match.
  • Bonus predictions: your picks for champion, top scorer and advancing teams.
  • Group membership: which groups you belong to and your role (admin or member).
  • Preferences: country, language, time zone and which notifications you want to receive.

2. Google OAuth data

If you sign up or log in with Google, we receive your name and email from Google. We do not access any other data in your Google account (contacts, files, calendar, etc.). We do not store your Google password.

3. What we use the data for

We use your data only to:

  • Let you log in and access your account.
  • Show your name in the standings and in groups.
  • Send notifications inside the platform (group approvals, etc.).
  • Let you recover your password by email if you forget it.
  • Email you when there is platform news: new competitions available to play and important changes to the service.

About the news emails. They are occasional — at most two a month — and are only sent to accounts with a verified email. You can unsubscribe whenever you want, without logging in, from the link at the bottom of each of those emails, or from your notification preferences. Unsubscribing from news does not affect the emails your account needs: email verification and password recovery are always sent.

We do not sell or hand your email address to third parties, and we do not send other companies' advertising.

Legal basis. We process your data to provide the service you asked for (performance of a contract), to comply with legal obligations where applicable, and with your consent for what is optional: usage statistics and news emails. You can withdraw that consent at any time.

4. Usage statistics (Google Analytics)

We use Google Analytics to understand how the platform is used and improve it: pages visited, time spent and device type. We do not send it your name or your email.

If you are in the European Union, the United Kingdom or the European Economic Area, these statistics are not enabled until you accept them in the notice shown when you arrive. If you decline, the site works just the same. You can change your mind by clearing the site's cookies in your browser.

You can read how Google uses this data in Google's privacy policy.

5. Data we do NOT collect

  • We do not collect precise location data.
  • We do not store payment data (the platform is free).
  • We do not sell, share or hand your personal data to third parties.
  • We do not use your data for automated decisions or profiling.

6. Cookies

ProdeLibre uses these first-party cookies, all needed for the site to work:

  • Session: keeps you logged in. It contains no personal data.
  • Remember me: if you turn it on when logging in, it keeps your session for up to 90 days.
  • Preferences: they remember what you chose in the site notices (your country's version, statistics cookies) so we do not ask again.

Google Analytics uses its own cookies. In the European Union they are only loaded if you accepted them.

7. Security

We take steps to protect your data:

  • Passwords are stored with a bcrypt hash (irreversible encryption).
  • Communication runs over HTTPS (encrypted connection).
  • Forms are protected against CSRF attacks.
  • Sessions are regenerated on login to prevent session hijacking.

If a security incident affecting your data ever happens, we will tell you and, where the law requires it, notify the data protection authority within the required deadlines.

8. Data retention and deletion

Your data is kept while your account is active. You can ask for deletion whenever you want from My Account: we process it within 30 days and email you when it is done.

Deleting the account permanently erases your profile, your predictions, your bonus predictions, your membership in every group and your notifications. If you are a group admin, the role passes to the longest-standing member. Technical logs and backups are overwritten within 90 days at most.

9. Who we share data with

We do not sell your data. To run the service we work with providers that process it on our behalf and only for that:

  • Hostinger — servers where the platform and the database live.
  • Cloudflare — network that serves the site and protects it from attacks.
  • Resend and SendGrid — sending account and news emails.
  • Google — login with Google and usage statistics.

Some of these providers are outside your country, including in the United States. In those cases the transfer relies on the standard contractual clauses and the adequacy frameworks each provider maintains.

10. Your rights

You can ask at any time for: access to your data, correction, deletion, a copy in an open format, restriction of or objection to processing, and withdrawal of any consent you gave.

  • View and correct: from My Account.
  • A copy of your data: the "Download my data" button in My Account downloads a CSV with your profile, your groups, your predictions and your bonus picks.
  • Delete the account: from My Account, processed within 30 days.
  • Anything else: write to us at [email protected].

If you are in the European Union or the United Kingdom and believe we are not handling your data properly, you can also complain to your country's data protection authority.

11. Minimum age

ProdeLibre is not intended for people under 16. If you live in the European Union or the United Kingdom, you confirm when signing up that you are 16 or older. If we find an account belonging to someone younger, we delete it.

12. Changes to this policy

We may update this privacy policy. Any change will be published on this same page with the update date. We recommend reviewing it from time to time.

13. Contact

Data controller: Emiliano Elías, Argentina.

For any question about this policy or about your data, write to us at [email protected] and we will reply there. If you have an account, you can also use Contact.