Privacy Policy

1. Overview

La Copa Mundo ("we", "us", "our") respects your privacy. This policy explains what data we collect, how we use it, and your rights. No hidden tracking, no selling your data.

2. Information We Collect

We collect the following types of information:

• Account information: email address, display name, and optional profile details (favorite team, gender) that you provide during sign-up or onboarding
• Authentication data: encrypted password hash (or OAuth tokens if you sign in with Google)
• Usage data: interactions with the Platform including pages visited, features used, and preferences set
• Conversation data: messages you send to El Capi™ (our AI assistant), which are stored to maintain conversation history and improve the service
• Quiniela data: predictions, pool memberships, and scores in La Quiniela
• Technical data: IP address (stored only as an irreversible hash, we never store your raw IP), browser type, device type, and approximate location inferred from IP for analytics

3. How We Use Your Information

We use collected data to:

• Provide and personalize your experience (match schedules, city guides, El Capi conversations)
• Manage your account, authentication, and preferences
• Operate La Quiniela prediction pools and leaderboards
• Enforce rate limits and prevent abuse (using hashed IPs, never raw IPs)
• Improve the Platform through aggregated, anonymized analytics

4. AI Features & Conversations

When you use El Capi, your messages are sent to Anthropic's Claude API for processing. Messages are logged with a hashed session identifier, not linked to your personal identity for logged-out users. For logged-in users, conversations are tied to your account for continuity. We use conversation topics in aggregate (never individual messages) to understand what fans care about. Anthropic may process conversation data per their own privacy policy.

5. Analytics

We use Plausible Analytics, a privacy-friendly service that does not use cookies and does not collect personal data; it gives us aggregate insights (page views, referrers, countries) without tracking individuals. Separately, for advertising measurement we run the Meta (Facebook) Pixel and the TikTok Pixel, which collect usage and device data associated with cookies. You can opt out of these advertising pixels anytime on our Do Not Sell page (see the Cookies and Third-Party sections below).

6. Cookies

We use strictly necessary cookies for authentication (session tokens) and language preferences. We also use advertising and measurement pixels from Meta (Facebook) and TikTok, which set cookies such as _fbp and _ttp to measure ad performance. You can opt out of this ad tracking at any time on our Do Not Sell or Share My Personal Information page. Our own site analytics (Plausible) remains cookie-free.

7. Third-Party Services

We use the following third-party services that may process data on our behalf:

• Supabase: database hosting, authentication, and real-time features (data stored in their infrastructure)
• Anthropic (Claude): AI processing for El Capi conversations
• Plausible Analytics: privacy-friendly, cookie-free website analytics
• Vercel: application hosting and content delivery (processes request data including IP addresses)
• Stripe: payment processing for premium subscriptions (we do not store your payment card details, Stripe handles all payment data securely under PCI-DSS compliance)
• Meta (Facebook): advertising pixel to measure ad campaigns and build audiences (sets the _fbp cookie; opt out via Do Not Sell)
• TikTok: advertising pixel to measure ad campaigns (sets the _ttp cookie; opt out via Do Not Sell)

8. Data Retention

Account data is kept as long as your account is active. Conversation logs are kept for up to 12 months to improve the service, then deleted. If you delete your account, we remove your personal data within 30 days, except where the law requires us to keep it. Anonymized, aggregated data may be kept indefinitely.

9. Your Rights

Depending on your location, you may have the following rights:

• Access: request a copy of the personal data we hold about you
• Correction: request that we fix inaccurate information
• Deletion: request that we delete your account and personal data
• Portability: request your data in a machine-readable format
• Do Not Sell: We do not sell your personal information to third parties or share your data for behavioral advertising. California residents have additional rights under the CCPA, including the right to know what personal information we collect and the right to request deletion
• Object: You have the right to object to processing of your personal data based on legitimate interests (GDPR Article 21). If you object, we will stop processing unless we demonstrate compelling legitimate grounds
• Withdraw consent: Where processing is based on your consent, you can withdraw it at any time by emailing privacy@lacopamundo.com or deleting your account. Withdrawal does not affect the lawfulness of processing before it was withdrawn

To exercise any of these rights, email us at privacy@lacopamundo.com. We will respond within 30 days.

10. Children's Privacy

La Copa Mundo is not intended for children under 13. We do not knowingly collect personal information from anyone under 13. If we find out a child under 13 has created an account, we will delete it and all associated data. If you believe a child under 13 is using our Platform, contact us at privacy@lacopamundo.com.

11. International Users

La Copa Mundo serves a global audience. Your data may be processed and stored in the United States and other countries where our service providers operate. For data transferred outside the European Economic Area, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission, as incorporated into our Data Processing Agreements with each processor (including Anthropic, Vercel, and Supabase). We take steps to protect your data in line with this policy regardless of where it is processed.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes through the Platform or by email. The "Effective Date" at the top of this page indicates when the policy was last revised.

13. Contact Us

For privacy questions or to exercise your data rights, email us at privacy@lacopamundo.com.