Privacy Policy

SpotOn90 is a football prediction game that's free to play, with an optional paid membership. This policy explains what we collect, why, and what you can do about it. We keep it short because we collect little.

Who we are

SpotOn90 is operated by Kinsleo Media LLC ("we", "us"), a company based in Georgia, USA, running the game at spoton90.com. For anything in this policy, reach us at hello@spoton90.com.

What we collect

• Your email address — to sign you in (we email you a one-time link; there's no password), to send you occasional emails about your account or a summary of your week (which you can opt out of at any time), and, if you joined the waitlist, to tell you when we launch.
• A display name — the name you choose to show on the leaderboard.
• Your predictions — the calls you make and save, so we can score them and rank you.
• Basic, privacy-first analytics — aggregate page views and visitor counts via Cloudflare Web Analytics, which uses no cookies and does not track you across other sites.
• Membership purchase records — if you buy a membership, Stripe processes the payment on its own pages. Your card number never touches our servers. We keep what you bought, for which season, and a Stripe customer reference so we can find the payment if you ask us about it.
• Sign-in records — when you sign in, we record the time, IP address, and browser it came from, to help us spot suspicious activity on your account.
• Standard server logs — like most websites, our host records requests (including IP address) briefly, for security and reliability.

We never see or store your card number, and we do not sell your data to anyone, ever.

Why we're allowed to (legal basis)

We process your email and predictions to provide the service you asked for (to run your account and show you on the board), and your membership purchase records to deliver what you bought. We use minimal analytics, sign-in records, and logs under our legitimate interest in keeping the site working, secure, and roughly understood. Where the law requires consent, we ask for it.

Who we share it with

Only the service providers we need to run the game, each handling data on our behalf:

• Resend — delivers your sign-in and notification emails.
• Cloudflare — privacy-first, cookieless traffic analytics.
• Render — hosts the application and database.
• Stripe — processes membership payments on its own pages, under Stripe's privacy policy.

We share only what each provider needs, and we don't hand your data to advertisers or data brokers.

Cookies

We use a single, strictly-necessary cookie to keep you signed in after you click your magic link. That's it — no advertising or tracking cookies. Our analytics are cookieless.

Your rights

You can ask us to show you the data we hold about you, correct it, or delete it. Email hello@spoton90.com and we'll act on it. If you're in the UK or EU, you also have the right to complain to your local data protection authority.

How long we keep it

We keep your account, predictions, and sign-in records while your account exists. Membership purchase records are kept as long as tax and accounting rules require. Ask us to delete your account and we'll remove your personal data, keeping only what those rules make us hold. Waitlist emails are kept until we launch or you ask us to remove you.

Children

SpotOn90 isn't directed at children under 13, and we don't knowingly collect their data.

Changes

If we change this policy we'll update the date above. Material changes will be made clear on the site.

Questions? Get in touch.