Privacy Notice

Who is responsible

Bolão.io is the controller of the personal data described in this notice. Use our contact form for privacy questions, requests, or concerns.

Data we handle

We only handle data needed to run and improve the service.

• Account data provided through Clerk, such as your name, username, email address and authentication identifiers.
• Bolão activity, including bolão names, memberships, predictions, points and leaderboard display information.
• Contact-form information, including the email address and message you send us.
• Technical and usage information, such as browser, device, pages viewed and performance information.

Why we use data

We use personal data to create and secure accounts, operate bolões and predictions, show standings, provide support, prevent abuse, maintain and improve the service, and understand aggregate site use. The applicable legal basis depends on the purpose, including performance of the service, legal obligations, legitimate interests such as security and reliability, or consent where required.

Service providers and data sharing

We use service providers to operate Bolão.io. They process data on our instructions or under their own applicable privacy terms. Depending on your use, data may be processed outside Brazil.

• Clerk provides account authentication and session management.
• Vercel provides hosting, web analytics and performance insights.
• Umami provides website analytics.
• Vercel Postgres stores application data such as bolões, memberships and predictions.
• Prismic provides content-management services for site content.
• Resend sends messages submitted through the contact form.
• API-Football provides fixture and result data; we do not send it your account data to retrieve public football information.

Cookies and similar technologies

Bolão.io uses cookies and browser storage for the purposes below. You can manage or clear cookies in your browser, but doing so may affect sign-in or preferences.

• A NEXT_LOCALE cookie remembers your selected language for up to one year.
• Clerk uses authentication-related cookies or similar technologies to keep your account session secure.
• Temporary session storage may keep an invite or selected competition while you continue a sign-in or creation flow.
• Vercel Analytics, Vercel Speed Insights and Umami help us understand performance and aggregate use. Their behavior may vary with their configuration and your browser settings.

How long we keep data

We keep data only for as long as necessary for the purposes described here, including maintaining your account and bolão history, resolving disputes, meeting legal obligations and protecting the service. We may retain anonymized or aggregated information longer.

Your privacy rights

Subject to applicable law, you may request confirmation and access to your data, correction, anonymization, blocking or deletion where appropriate, information about sharing, portability, revocation of consent, and review of certain automated decisions. Contact us to make a request. You may also complain to the Brazilian data-protection authority (ANPD).

Security

We use reasonable technical and organizational measures intended to protect personal data. No internet service can guarantee absolute security, so please keep your account credentials confidential.

Changes to this notice

We may update this notice when our practices or legal requirements change. We will post the updated version here and change the date above.