Privacy Policy

1. Who we are

BracketSoccer.com (“we”, “us”, “the site”) is an independent World Cup 2026 bracket builder. The controller of your personal data is BracketSoccer Media LLC, 104 Sportsman Lane, Suite 22, Brooklyn, NY 11201, USA. We are not affiliated with FIFA.

2. Data we collect

We collect only what we need to run the site and answer your questions.

• Form data: when you submit the contact form, we collect your name, email, optional phone number, the topic you chose, and your message.
• Bracket picks: your bracket selections are stored in your own browser via localStorage. We do not receive a copy unless you copy and paste them in the form.
• Technical data: standard server logs — IP address, browser type, referrer, and pages visited — collected for security and analytics.
• Push subscriber data: if you opt in to push notifications, OneSignal stores a pseudonymous subscription ID and your device’s push token. We never see your real device identifier.

3. Cookies and local storage

We use a single first-party cookie or local-storage flag to remember that you accepted the cookie banner. We use local storage to keep your bracket picks between visits. We do not run advertising cookies.

4. Push notifications

Push alerts are delivered through OneSignal, Inc. (USA). OneSignal acts as our data processor. You can revoke push permission at any time from your browser’s site settings — that will stop all alerts immediately.

5. Purposes and legal basis

We use the data above to: reply to your messages, send the alerts you opted into, keep your bracket between sessions, secure the site, and improve features. Our legal bases are consent (for marketing and push alerts), contract (for replying to your enquiries) and our legitimate interest (for security logs).

6. Retention

Contact form messages are kept for 24 months unless you ask for deletion sooner. Push subscriber IDs are kept while your subscription is active and for 30 days after you unsubscribe. Server logs are rotated after 30 days.

7. Sharing

We never sell your data. We share it only with the processors that run the service for us — OneSignal for push, our hosting provider, and an email provider for replies. Each is bound by a written data-processing agreement.

8. Your rights

You can ask for access, correction, deletion, restriction, portability or objection at any time. See the dedicated Your Rights page for full details and templates.

9. Children

The site is not directed at children under 16. If you believe a child has submitted personal data, please email us and we will delete it.

10. Changes

If we change this policy, we will update the “Effective” date at the top and, for material changes, post a banner on the site for at least 30 days.

11. Contact

For any privacy question, write to [email protected] or to the postal address above. We aim to reply within 30 days.