Privacy Policy

This Privacy Policy describes how Fixture ("we", "us") collects, uses, and protects information when you use our web application at fixture.gg (the "Service"). By using the Service, you agree to this policy. If you do not agree, please do not use the Service.

• Identity data:a random, anonymous session token (the "fixture_sid" cookie) is set when you first visit the Service. The token is opaque — it is not a public identifier and cannot be used to look you up — and is used server-side to link you to your picks and fixtures.
• Profile data (optional): if you complete your profile, we collect a display name, first and last name, email address, mobile phone number, favorite country, and an avatar image. None of these fields are required to use core prediction features.
• Authentication data: if you sign in via SMS, we collect your mobile phone number for the purpose of sending you a one-time verification code.
• Activity data: your match predictions, fixture memberships, and pick history.
• Technical data: standard server logs (IP, user-agent, timestamps) collected by our hosting provider.

• To provide and operate the Service.
• To authenticate your sign-in and link your activity to your account.
• To compute leaderboards, points, and other Service features.
• To prevent abuse and enforce our Terms.
• To communicate with you about your account when necessary.

We do not sell your personal information. We do not use your information for advertising or behavioral profiling.

Fixture sends one-time authentication codes via SMS to the mobile phone number you provide during sign-in. We do not share, sell, or transfer mobile phone numbers or SMS opt-in data to third parties or affiliates for marketing or promotional purposes. SMS messages are sent only on demand, when you initiate a sign-in. We do not send recurring, promotional, or marketing SMS. Expected frequency is one to three messages per user per month. Message and data rates may apply. You may opt out at any time by replying STOP to any message; reply HELP for help, or contact support@fixture.gg.

We use a single first-party cookie, fixture_sid, to maintain your session and tie your activity to your account. This cookie is HTTP-only, same-site, and is set automatically on your first visit. We also use locale and theme preference cookies. We do not use advertising cookies.

We use PostHog for first-party product analytics — anonymous event data that tells us which features are being used. PostHog does not receive your email, name, phone number, pick contents, or any identifying content; it sees only an anonymous user identifier and the events listed below.

We honor your browser's Do Not Tracksetting — if it's enabled, we never initialize analytics. You can also opt out at any time in your profile settings; the opt-out follows your account across devices.

We use the following processors to operate the Service. Each handles only the data necessary for their function:

• Supabase — database and file storage (avatar images, picks, profile data).
• Vercel — application hosting and request logs.
• Twilio — SMS delivery for sign-in codes (phone numbers only, no profile data).
• Stripe— payment processing for premium fixture unlocks (handled entirely on Stripe's servers; we do not store card details).
• PostHog— first-party product analytics (anonymous event data only; no PII). See "Product analytics" above.
• Sentry — error monitoring. Receives stack traces and an anonymous user identifier when an error occurs; never receives your email, name, picks, form values, or cookies.

We retain account, profile, pick, and fixture data for as long as your account exists. Server logs are retained per our hosting provider's standard retention. You may request deletion of your account and associated data by contacting support@fixture.gg.

Depending on your jurisdiction, you may have rights to access, correct, export, or delete your personal information. Contact support@fixture.gg to exercise any of these rights.

The Service is not directed at children under 13 (or under 16 in the EEA). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us.

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Material changes will be communicated via the Service.

Questions about this Privacy Policy? Email support@fixture.gg.