World Cup 2026 Bracket

Privacy Policy

Last updated: 30 June 2026

This site is an unofficial fan project — not affiliated with, endorsed by, or sponsored by FIFA or any football body. It collects almost no data: there are no accounts and no forms. Anonymous usage analytics runs by default, and you can opt out at any time — see below.

Who we are

This site (the "Bracket") is operated by Ambedo ("we", "us", the "responsible party"). For any privacy question or request, contact phillipjacobs@ambedo.io. We are based in South Africa, and this policy is primarily framed around the Protection of Personal Information Act, 2013 ("POPIA").

What we collect

The Bracket does not require an account and never asks you for personal information such as your name, email address, or location. The only data collection is anonymous usage analytics:

Google Analytics 4 (via Firebase) — runs by default when you open the live site. On your first visit a short notice tells you analytics is on and lets you opt out, and you can opt out at any time (see "Your choices" below). It sets analytics identifiers and collects usage data such as page views, in-app events (e.g. which mode you use), approximate region (derived from your IP, which Google truncates and does not store in full), and device/browser type. We never receive your name, email, or precise location. If you opt out, analytics is switched off and no further data is collected.
Stored on your device only (in your browser's localStorage, never sent to us): your analytics choice, your theme and display preferences, your bracket predictions, and a cached copy of the live match data. You can clear all of this at any time via your browser.
"Share" links encode your predictions into a URL that you choose to copy and share. We do not store or receive it.

Analytics never runs on local/development hosts, and your opt-out choice is remembered on your device.

Third parties & data we don't control

To display the Bracket, your browser requests content from third parties, who necessarily receive your IP address and request details as part of serving that content:

Google (Firebase Hosting) serves the site and may keep standard request logs for security and operation. Unless you have opted out, Google also processes the anonymous analytics data described above as our processor.
ESPN (site.api.espn.com) provides the live match scores and results shown on the bracket.
flagcdn.com provides the national flag images.

Each is governed by its own privacy policy. We self-host our fonts, so no font CDN is involved. Where data is processed outside South Africa (for example on Google/ESPN servers in the US), that transfer relies on the relevant provider's safeguards and contractual terms.

Why, and our legal basis

We use analytics solely to understand aggregate usage and improve the Bracket. Under POPIA we process this minimal, anonymous information on the basis of our legitimate interest in running and improving a free fan project, weighed against the limited, non-identifying nature of the data — and we give you a clear, persistent way to opt out. If you are in the EU/UK, note that the GDPR / UK GDPR generally expects prior opt-in consent for analytics; if you would prefer not to be measured, simply opt out — it takes effect immediately and is remembered.

Retention

Analytics data is retained per our Google Analytics configuration (currently 14 months). Data stored in your browser persists until you change your choices or clear this site's data.

Your rights

You may request access to, correction of, or deletion of any personal information we hold, and you may object to processing. To opt out of analytics, choose "Opt out" on the first-visit notice or use the "About → Analytics" control in the app at any time (or clear this site's data in your browser). For anything else, email phillipjacobs@ambedo.io. You also have the right to complain to South Africa's Information Regulator (or, if applicable to you, your local EU/UK data-protection authority).

We don't sell your data

We do not sell or share your personal information, and we run no advertising. There are no ads, affiliate links, or paid features on this site.

Children

The Bracket is a general-audience football project and is not directed to children under 18. We do not knowingly collect the personal information of children.

Changes

We may update this policy from time to time; any material change will be reflected by the "Last updated" date above.

← Back to the bracket