Privacy Policy

Effective date: 2026-10-09 · Version: 2026-10-09

This policy is read together with the Privacy Notice, which satisfies our disclosure obligation under the Personal Data Protection Law (Law No. 6698, "KVKK"). Cookies are covered separately in the Cookie Policy.

In short

Praedix is free. We do not take money and we do not pay out prizes. We do not ask for payment information, because we have no use for it.
You have no password. We do not store passwords and we have no "forgot my password" flow.
The personal data we take from you is, in practice, three things: your e-mail address, your display name, and (if the provider supplies it) your avatar address. To these we add an IP address, recorded only on sign-in and security events.
Your display name and score are visible to everyone on the leaderboards. No other data of yours is visible.
We do not sell your data, we do not use it for marketing, and we do not profile you.
To check whether your display name is appropriate, only your display name (no e-mail, IP or any other data) is sent to an AI service — Google Gemini; details in Section 5.
We send no personal data to the external services from which we pull match and score data.

1. Who we are

Praedix is a free, publicly accessible prediction game built around Champions League matches. For each match you pick home win, draw, or away win; your pick locks when the match starts; you earn your points once the match ends. Alongside the general leaderboard, you can also compete in groups you form with friends.

Praedix is not a betting or gambling product. No money circulates in the system. How many points a given match result will be worth is not known, and is not shown to you, before the match; once the match ends, that pick's "point value" becomes visible.

Data controller: Samet Arslan (gerçek kişi), İstanbul / Ümraniye — kvkk@praedix.app. For details, see Section 1 of the Privacy Notice.

2. What information we collect

2.1 Your account

Information	Where it comes from
E-mail address	Sign in with Google, sign in with Apple, or sign in by e-mail
Display name	Derived at first sign-in from the name given by the provider, or from the part of your e-mail before the `@`; you can change it at any time
Avatar address	Only if you signed in with Google or Apple and the provider supplies it

Your e-mail address is your account's identity. If you sign in with Google today and, tomorrow, via a sign-in link sent to that same e-mail address, you land in the same account — matching is always done through the verified e-mail address.

This is why there are sign-in methods we deliberately did not add: providers that do not return a verified e-mail address would let the same person create a second account, distorting the leaderboard.

2.2 Your gameplay data

The predictions you make, the points you earn, the groups you belong to, and — if you've used it — any report you've submitted about another user.

We also keep the trail of any change made to a prediction (when, by whom, and on what grounds). The sole reason is so that disputes of the "I was awarded the wrong number of points for this match" type can be reviewed afterward. For the same reason, administrator interventions are also recorded together with their grounds.

2.3 Technical data

We record your IP address only on sign-in and security events:

When you request a sign-in link by e-mail,
When you sign in, or a sign-in attempt fails,
When the refresh record that keeps your session alive is created, or a refresh is rejected,
When you send too many requests in a short time and hit a rate limit.

The purpose is abuse detection: this is the only way we can spot a bot requesting hundreds of sign-in links from the same address, or a stolen session.

On these events we record, besides the IP address, the type, outcome and time of the event, your user ID where applicable, and an abbreviated form of your e-mail address (e.g. s***l@gmail.com); the full address is not kept in this record. When a warning or error occurs in the system we also record the technical detail, the time and, where applicable, your user ID and the abbreviated e-mail address; the IP address and the full e-mail address are not written to these error records. Retention periods are in Section 8.

We do not keep a record of your page-by-page browsing on our own server. If you consent to analytics cookies, Google Analytics 4 is used to measure how the site is used in aggregate; this measurement is not linked to your account, and if you do not consent it does not run at all. Details are in Section 4 of the Cookie Policy.

2.4 What we do not collect

Location data, phone number, date of birth, gender, home address, national identity number, payment information, contact-list access, advertising identifier — none of these. We also do not process special-category personal data.

3. What we use this information for

Opening your account and signing you in,
Recording your predictions, locking them when the match starts, and scoring them once the match ends,
Building the general and group leaderboards,
Operating your groups,
Detecting spam, automated requests, and stolen sessions,
Reviewing inappropriate display names and user reports,
Resolving score disputes,
Fulfilling our legal obligations.

Which legal ground each of these purposes rests on is set out in table form in Section 4 of the Privacy Notice.

4. What is public

Praedix is an open game; for the leaderboard to be meaningful, some things have to be visible:

Public: Your display name, total score, number of correct predictions, and your leaderboard rank. If you belong to a group, that group's members also see these on the group leaderboard.

Not public: Your e-mail address, your IP address, which sign-in method you use, and your account settings.

You can change your display name at any time. You are not required to use your real name — choosing a pseudonym is entirely up to you and may be preferable for your privacy.

Your predictions are visible to your group-mates. Other members of groups you belong to can see what you picked after the match has locked. No one can see it before the match locks, and this visibility never extends beyond your groups — non-members cannot see your predictions.

If you don't want a group to see you, you can leave it.

5. Display-name moderation

We run a two-layer check to catch inappropriate display names (insults, harassment, spam):

Rule check on our own server. Names that plainly contain profanity or impersonate staff or the system are rejected the moment you choose them, using a word list that runs on our own server. This step calls no external service.
AI check. A display name that passes the rule check is sent to Google's Gemini API for an assessment of whether it is appropriate. The only thing sent is your display name — not your e-mail address, IP address, account ID or anything else. This check never rejects a name: it only flags a name it finds suspicious for an administrator to review, and only a human decides. If Gemini cannot be reached or its quota is used up, the same request goes to a language model running on our own server as a fallback; if that is unavailable too, the name is accepted without the check (so you are never blocked because of it).

Please note: we use the Gemini API on Google's free tier. Under Google's terms for that tier, the content submitted may be used to improve Google's products and services and may be read by human reviewers. We judged this acceptable because your display name is already public on the leaderboards and nothing that identifies you is sent with it — but if you use your real name as your display name, you should know this. You are free to use a pseudonym (see Section 4). This is a cross-border transfer; details are in Section 6.2 of the Privacy Notice.

Other users can report anything the automated check missed. Reports are reviewed by an administrator; the outcome may be a changed display name or a suspended account. Every administrator decision is recorded together with its grounds.

If a sanction is applied to your account, you may object by writing to kvkk@praedix.app. Your objection is assessed against the administrator action log that recorded the sanction's grounds, and is answered within 30 days at the latest.

6. Who we share with

Who we share with

Resend (headquartered in the US, data processed in Ireland/EU) — solely to send sign-in e-mails. The only things it receives are your e-mail address and the content of the message to be sent. Sender address: giris@praedix.app. Sign-in e-mails are processed within the EU; click or open tracking is not used in these e-mails.
Google / Apple — only if you choose to sign in with these methods, during authentication. In that case the relevant provider's own privacy policy also applies.
Google (Gemini API) — solely for the display-name suitability check, and only your display name (Section 5). Because this is the free tier, Google may use the content to improve its products.

These constitute a cross-border transfer. The basis is a standard contract; details and the full list of recipients are in Section 6.2 of the Privacy Notice.

Who we do not share with

The external services we obtain match and odds data from — we send no personal data to these services; the relationship is one-directional, we only receive match information.
Data brokers and marketing companies — we do not sell, rent, or share your data with anyone for marketing purposes. The advertising and analytics cookies you consent to are the exception; they are described separately below.

Legal requests

If a duly made request arrives from a competent authority, we share information only to the extent legally required and only to the extent requested.

We notify you. We inform you of a request concerning you, unless doing so is legally prohibited; where a confidentiality order or legal restriction applies, we cannot inform you at that time, and we do so once the restriction is lifted. If we find the scope of a request unnecessarily broad, we seek to have it narrowed.

Advertising

The site displays Google AdSense advertisements. Advertising cookies are not essential and are placed only with your explicit consent; you see a preference panel on your first visit, you can decline it, and you can change your preference afterward. Declining disables no function of the game.

Your predictions, your score, and your group memberships are never used for ad targeting. Details are in Section 3 of the Cookie Policy.

Analytics

If you consent to analytics cookies, Google Analytics 4 is used to measure how the site is used in aggregate. If you do not consent, it does not run at all; declining disables no function of the game. Your account, your predictions, and your score are not sent to Google Analytics. Details are in Section 4 of the Cookie Policy.

Links leaving Praedix

There are three ways you can end up on another site starting from Praedix:

Sign in with Google or Apple — to complete the sign-in you are redirected to that provider's own page.
Advertisements — clicking an ad takes you to the advertiser's site.
Links within our texts — for example, a link we provide to a provider's own policy.

This policy does not apply on those sites. From the moment you leave, that site's own privacy policy applies; we have no control over, and bear no responsibility for, the content, cookies, or data-processing practices of those sites. We recommend checking a destination site's policy before clicking through to it.

The reverse also holds: our pages do not connect to third parties in the background without your consent. Praedix loads no external tracking script, no social-media widget, no external image, and no external font without your consent; even club crests are served from our own server, not a provider's CDN — so your IP address never reaches a third party without your knowledge.

There are two exceptions, and both depend on your consent: if you consent to advertising cookies, your browser connects to Google so that ads can be shown; if you consent to analytics cookies, it connects to Google for usage measurement. Unless you consent, these connections are never made.

7. How we protect your data

There is no password, so there is no password to steal. Sign-in happens either via Google/Apple or via a single-use link with a 15-minute lifetime.
The raw code inside the sign-in link exists only in the e-mail sent to you. Our database holds only its irreversible SHA-256 hash. Even someone who breached our database could not use those codes.
A sign-in link can be used only once.
Session-refresh records are protected the same way and are renewed on every use. A canceled record being presented again is treated as a sign of a stolen session; in that case all of that account's sessions are closed.
Whether or not the e-mail address you entered is registered in our system, we give you the same response — so no one outside can learn from the outside whether a given e-mail address has an account on Praedix.
Data is kept in the database on our own server; the database is backed up automatically every day, and backups are stored encrypted. The copy on the server is deleted automatically after 30 days. Against the possibility of losing the server entirely, we keep a second copy in Turkey, on our own server — there too only the 15 most recent backups are kept, and the files are encrypted; the key to decrypt them does not exist on that machine.
If a data breach occurs: we notify the Personal Data Protection Board within 72 hours of learning of the breach, and we inform affected users directly, as soon as reasonably possible. The notification clearly states what was exposed, when, and what we did about it. Every breach and the response to it are separately logged.

No system is one hundred percent secure; nevertheless we are obligated to, and do, take reasonable technical and administrative measures.

8. How long we keep it

In short: your account data stays for as long as your account is open; sign-in and session records are short-lived; prediction and score history remains permanently in anonymized form. Item-by-item periods are in Section 7 of the Privacy Notice.

9. When you want to delete your account

We want to explain this part exactly as it works, because "deletion" works differently from what you might expect.

Upon your deletion request your account is anonymized: your e-mail address is replaced with a value that does not reveal your identity, your display name becomes "Deleted user", your avatar is deleted, your Google/Apple/e-mail links are removed, and all of your sessions are closed. After this, no one can access the account — including you. If you sign in again with the same e-mail address, a brand-new account is created from scratch; your old scores are not linked to it.

Your predictions and score history remain, detached from your identity. The reason is this: if a user's predictions were deleted entirely, past match-day leaderboards would change retroactively — whoever came third that day would suddenly become second. This trail also needs to be preserved so that result disputes can be resolved. The remaining data can no longer be linked to you.

Older entries may remain for a while in database backups that have not yet expired; these backups are deleted within their own cycle.

How to request it: Instantly, via the "Delete my account" button on your profile page, without asking anyone. The request is not put on hold — the button runs the anonymization immediately and your sessions are terminated at that moment.

You may also write to kvkk@praedix.app if you prefer; this route is completed within 30 days at the latest.

10. Your rights

KVKK Art. 11 grants you a range of rights, including learning whether your data is processed, requesting information, correction, deletion, learning who it was transferred to, and requesting that any resulting damage be compensated. The full list of rights and how to apply is in Section 9 of the Privacy Notice.

Application address: kvkk@praedix.app — applications are resolved within 30 days at the latest. Writing from your account's e-mail address is the easiest route: since access to that address shows the account is yours, we do not ask for further documentation to verify your identity.

For the information your application should contain, the other application channels (registered e-mail, e-signature, mobile signature, notary), and complaint deadlines, see the Data Subject Application Form page.

No application is required to change your display name or delete your account — both can be done instantly from your profile page (see Section 9).

11. Children

Praedix is intended only for users who have reached the age of 18. If you are under 18, do not create an account.

When you create your account for the first time, you are asked to explicitly declare that you are over 18 and that you accept these notices; you cannot use the application without declaring this. Your declaration is recorded together with its date and the version of the text you accepted.

We do not verify your age with a document. Requiring an identity document would mean collecting far more, and far more sensitive, personal data than this rule protects; in keeping with the principles of proportionality and data minimization, a declaration-based approach was adopted instead.

If we learn that an account belongs to a user under 18, we close the account and delete their personal data. You can report such a case to kvkk@praedix.app.

12. Changes to this policy

When we update this policy, we publish the new version at this address and change its date. For a significant change — for example, advertising being introduced — we additionally notify you through an in-app announcement.

13. Contact

For any question, request, or complaint about privacy: kvkk@praedix.app