Privacy Policy

What we collect, and why

• Phone number. Used only to sign you in via a one-time code (OTP) — this is currently the app's only login method. Your number is never stored in plain text: it's cryptographically hashed before being used for rate-limiting checks (e.g. how many codes have been sent to a number recently).
• Profile info you choose to add. Display name, WagOne tag, and a profile photo, if you set one. These are visible to other players (e.g. on league rosters and Quick Game opponents).
• Gameplay activity. The leagues and Quick Games you create/join, your predictions, and your Sandbox token balance and transaction history — this is how the app itself works.
• Basic device/network data for fraud prevention. We hash the IP address associated with a Quick Game to help detect self-play (one person secretly playing both sides). This is used only for that fraud-detection check, not for tracking or advertising.
• Notification preferences. The in-app notification categories you've opted into or out of.
• Error/crash reports. If something breaks, we may automatically receive technical details about the error (e.g. what happened, which page, basic browser/device information) so we can fix it. This should never include your phone number or Sandbox balance, but as with any crash-reporting tool, an unexpected bug could in principle include more context than intended.

Who we share it with

We don't sell your data. A small number of service providers process it on our behalf, strictly to run the app:

• Supabase — hosts our database, authentication, and file storage (e.g. profile photos).
• football-data.org — supplies real match fixtures/results. Nothing about you or your account is ever sent to them; data only flows in.
• Sentry — our error-tracking tool, used only to find and fix bugs (see "Error/crash reports" above).

Data retention

Your token transaction history is kept permanently and can't be edited or deleted, by design — this is what makes everyone's Sandbox balance trustworthy and auditable. Other account data (profile info, gameplay history) is kept for as long as your account exists.

Your choices

You can edit your display name, WagOne tag, and photo, and adjust notification preferences, in Settings. Because this is a small beta with no automated self-service deletion tool yet, if you'd like your account changed, exported, or removed, email titoplus99@gmail.com and we'll handle it directly.

Age

WagOne is not intended for anyone under 18.

Contact

Questions about this Policy? Email titoplus99@gmail.com.