PRIVACY

1. Controller

The controller responsible for data processing on KickMango is:

2. What data we process and why

When you create an account and use KickMango, we process the following data:

• Account data: username, email address, password (stored encrypted/hashed), avatar
• Game data: your match predictions and your supporting team
• Technical data: when you access the app, our hosting provider automatically processes server log data (such as your IP address) for the purpose of delivering and securing the service

We process account and game data to provide the service and your user account (legal basis: Art. 6 (1)(b) GDPR — performance of a contract). We process technical/server-log data based on our legitimate interest in operating a secure and functional service (legal basis: Art. 6 (1)(f) GDPR).

3. Login

You log in with your email address and password. We do not offer login via Google, Apple, or other third-party providers.

4. Hosting and processors

We use the following service providers, who process data on our behalf under data processing agreements:

• Vercel — hosting and delivery of the app
• Supabase — database and authentication

Where data is transferred to or processed in a country outside the EU/EEA, this is safeguarded by appropriate legal measures (such as EU Standard Contractual Clauses).

5. Cookies

We only use cookies that are strictly necessary to operate the app, for example to keep you logged in (session). These do not require your consent. We do not use analytics or tracking cookies. Should we introduce non-essential cookies in the future, we will ask for your consent beforehand.

6. Data retention

We store your account and game data for as long as your account exists. You can delete your account at any time, after which your data will be deleted, unless we are legally required to retain it.

7. Your rights

Under the GDPR you have the right to access, rectification, erasure, restriction of processing, and data portability, as well as the right to object to processing. To exercise any of these rights, contact us at herst@kickmango.com.

You also have the right to lodge a complaint with a supervisory authority. The competent authority for us is: Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit (HmbBfDI).

8. Changes to this policy

We may update this privacy policy when our service or the legal requirements change. The current version is always available here.