Beta legal version · 2026-08-18-beta.1
Privacy Policy
Last updated: August 18, 2026
1. Controller and contact
The controller of personal data processed through Win Pickers is Tomas Bazys, an individual based in Lithuania. For privacy questions or to exercise your rights, email support@winpickers.com.
2. Data we process
- Account data: email, password hash, verification status, Display name, optional Instagram handle, settings, and legal acceptance.
- Competition data: prediction drafts and submissions, scores, ranks, followed championships, and notification preferences.
- Administration data: permissions, actions, result changes, and audit records for authorised administrators.
- Support and feedback data: messages you send and the page from which feedback is submitted.
- Technical and security data: IP address, browser or device details, session identifiers, timestamps, and operational logs.
3. Why we process data
| Purpose | Legal basis |
|---|---|
| Create and secure accounts, save predictions, calculate scores, and provide leaderboards | Performance of our agreement with you |
| Prevent abuse, investigate security incidents, preserve fair competitions, and maintain audit records | Our legitimate interests in service security and integrity |
| Send verification, reset, and competition-integrity messages | Performance of our agreement and our legitimate security interests |
| Show your optional Instagram handle publicly | Your consent, withdrawn by removing the handle |
| Send optional event emails for followed championships | Your consent, withdrawn in notification settings |
| Meet legal requests and obligations | Compliance with a legal obligation |
4. What is public
Display names, scores, and ranks are public. An Instagram handle is public only when provided. Predictions are private before event lock and are public afterward only if Community Predictions is enabled for that event. Email addresses, session data, and security data are not public.
5. Service providers and recipients
We use service providers where necessary to operate Win Pickers, currently including Hostinger for application hosting, database, and email delivery. Authorised championship administrators may receive participant identity and email information only within their assigned competition scope. They cannot see other users’ prediction selections before event lock.
Data may also be disclosed where required by law, to protect service security or legal rights, or during a lawful transfer of the service. We do not sell personal data.
6. International transfers
If a provider processes data outside the European Economic Area, we will rely on an applicable adequacy decision or appropriate safeguards such as standard contractual clauses, as required by law.
7. Cookies and sessions
Win Pickers currently uses only essential cookies or similar storage needed for secure login, sessions, and user choices. We do not use non-essential advertising or analytics cookies in this beta. If that changes, we will update this Policy and request consent where required.
8. Retention
We keep personal data only while it is needed for the purposes above, while an account remains active, or while required to resolve security, legal, or competition-integrity issues. Verification and password-reset tokens expire after a short period. When an account is deleted, personal profile data is removed or anonymised; submitted predictions and scores may remain under a non-identifying deleted-user label. Limited copies may remain temporarily in secured backups until their normal rotation.
9. Your rights
Subject to applicable conditions, you may request access, correction, deletion, restriction, objection, or portability of your data. You may withdraw consent at any time without affecting earlier lawful processing. We may need to verify your identity before completing a request. Contact support@winpickers.com.
You may complain to the Lithuanian State Data Protection Inspectorate or the supervisory authority in your country. Information about the Lithuanian authority is available at vdai.lrv.lt.
10. Children
Win Pickers is a general-audience motorsport service and is not specifically directed to children. Where applicable law requires a parent or guardian to authorise a child’s use or a consent-based data activity, that authorisation is required. Contact us if you believe a child’s data has been provided unlawfully.
11. Security
We use access controls, encrypted connections, hashed passwords, database-backed sessions, restricted administrative permissions, and operational safeguards designed to protect data. No online service can guarantee absolute security.
12. Changes and contact
We may update this Policy as the beta evolves. Material changes will receive a new version and effective date, and renewed acknowledgement will be requested where required. Questions may be sent to support@winpickers.com.