Privacy Notice

This Privacy Notice describes how WorldCup Timeline Friends ("we", "us", "our") collects, uses, and protects personal data when you use worldcuptimeline.net (the "Service").

1. Data controller

WorldCup Timeline Friends acts as the data controller for personal data processed through the Service. You can reach us by email at support@worldcuptimeline.net.

2. Categories of personal data we collect

• Account data: name, email address, login credentials (via Google OAuth or email/password).
• Purchase data: a record of your Fan Pass purchase (transaction ID, product, amount, currency, status). Card details are handled by Paddle and never reach our servers.
• Support communications: messages you send us by email.
• Usage and device data: IP address, browser type, pages viewed, and basic analytics.

3. Why we use your data (purposes & legal basis)

• To create and maintain your account and provide the Service — performance of a contract.
• To process your Fan Pass purchase and grant access to premium content — performance of a contract.
• To prevent fraud, secure the Service, and improve features — legitimate interests.
• To comply with legal, tax, and accounting obligations — legal obligation.
• To send service-related notifications — legitimate interests; marketing emails only with consent.

4. Who we share data with

• Paddle.com Market Ltd — our Merchant of Record. Paddle handles payment, billing, tax, invoicing, refunds, and related fraud checks. See Paddle's privacy policy at paddle.com/legal/privacy.
• Service providers / subprocessors: cloud hosting, database, authentication, and analytics providers acting under our instructions.
• Professional advisers: lawyers, accountants, and auditors where necessary.
• Authorities: when required by law or to protect our rights.

5. International transfers

Some of our providers are located outside your country. When data leaves the UK/EEA we rely on adequacy decisions or Standard Contractual Clauses to protect your information.

6. Retention

We keep account data for as long as your account is active and for a reasonable period afterwards to comply with legal obligations. Purchase records are retained for at least the period required by tax law. We delete or anonymise data when it is no longer needed.

7. Your rights

Depending on where you live you may have the right to access, rectify, erase, restrict, or port your personal data, to object to certain processing, and to withdraw consent. You may also lodge a complaint with your local data protection authority. We respond to verified requests within one month.

8. Security

We use appropriate technical and organisational measures — encrypted transport (HTTPS), access controls, and database row-level security — to protect your data against unauthorised access and loss.

9. Cookies

We use only essential cookies and local storage required to keep you signed in and to remember your language preference. We do not use advertising cookies.

10. Changes

We may update this Notice from time to time. Material changes will be announced on the Service.