Pick-em Hubs

Privacy Policy

How we collect, use, and protect your personal data.

Last updated: 9 June 2025

Who we are

Pick-em Hubs is operated from Romania (European Union). For privacy questions, contact us at stefanpana00@gmail.com.

What data we collect

When you sign in with Google we receive your email address, display name, and profile photo URL from Google. You may also upload a profile picture, choose a display name, join private pick-em rooms, submit match picks, and send feedback. We store room names, hub cover images you upload as a room owner, and technical logs from our hosting provider.

Why we use your data

We process your data to provide the pick-em service (account, rooms, leaderboards), to keep the app secure, and to respond to feedback. Our legal basis under GDPR is performance of a contract (providing the service you signed up for) and, where applicable, legitimate interest (security and abuse prevention).

Who we share data with

We use third-party processors: Google (authentication), Supabase (database, auth, file storage — EU region where configured), Vercel (hosting and optional analytics), and football-data.org (match and team data). We do not sell your personal data.

How long we keep data

We keep your account data while your account is active. When you delete your account, we remove your profile, picks, room memberships, feedback, and uploaded images. Rooms you own are deleted along with your account. Match and team reference data is shared across all users and is not personal data.

Your rights (GDPR)

If you are in the EU/EEA (including Romania), you have the right to access, rectify, erase, restrict, or object to processing of your personal data, and to data portability. You can update your display name and avatar in Profile, export your data from Profile, and delete your account from Profile. To exercise other rights, email stefanpana00@gmail.com. You may lodge a complaint with ANSPDCP (Romania) or your local supervisory authority.

Cookies and analytics

We use essential cookies to keep you signed in (Supabase session). With your consent, we load Vercel Analytics to understand aggregate usage. You can accept or decline analytics cookies via the banner on first visit.

Children

The service is not directed at children under 16. If you believe a child has provided personal data, contact us and we will delete it.

Changes

We may update this policy. We will post the new version on this page with an updated date. Continued use after changes constitutes acceptance of the updated policy.