Privacy Policy

1. Overview

This Privacy Policy explains how Mitchell John Fuller, a sole trader trading as Matchup Engine (ABN 15 729 771 132) ("Matchup Engine", "we", "us" or "our"), collects, holds, uses, and discloses personal information.

Matchup Engine collects a small amount of personal information needed to operate user accounts and provide access to the product. We do not sell your personal information or provide account information to bookmakers or advertising networks for their independent marketing purposes.

This policy explains what we collect, how we use it, and how you can contact us about your information.

2. Information we collect

Account information: When you create an account, we collect your email address. Authentication is managed by Supabase. We do not store your password in plain text.

Purchase and access records: When you purchase access (such as a Round Pass), we store a record of the entitlement granted — the access type, season, round or game it covers, its status, and its start and end times — linked to your account. We also store limited payment metadata needed to administer the purchase: a Stripe customer identifier, Stripe payment and checkout identifiers, the amount paid, the currency, and any promotion code used. We do not receive or store your card number, CVV, or full payment details.

Usage information: We may collect basic technical information such as page requests, IP addresses, browser type, and device information for security, debugging, fraud prevention, and operational purposes.

Site analytics: We record aggregate usage analytics to understand how the product is used and to improve it. This includes first-party page-view events — such as the page visited, the referring page within the site, short-lived anonymous session and visitor identifiers, the user-agent string reported by your browser, the time of the event, a hashed (non-reversible) form of your IP address, and your account identifier if you are signed in — and aggregate website analytics provided by Vercel. We do not store your raw IP address in these analytics records, and we do not use this information for behavioural advertising.

Bookmaker link analytics: If you click an outbound bookmaker link, we may record details needed to operate, secure, and analyse that redirect, such as the bookmaker, source page or component, round, game, player, market type, displayed odds, selected leg count, combined price, target URL, referrer path, UTM parameters, timestamp, session or anonymous identifiers, account identifier if signed in, hashed IP address, user agent, and deduplication or rate-limit fields.

Marketing preferences: If you opt in to product updates or round notifications, we may use your email address to send those communications. You can opt out of marketing emails at any time.

Consent records: We store the time and version of your 18+ confirmation and acknowledgement of the Terms and Privacy Policy.

Challenge identity and activity: We may store your member number, optional display name, leaderboard visibility choice, Challenge picks, results, streaks, ranks, and related history. A display name is shown publicly only when you choose to show it; otherwise the leaderboard may use your member number.

Optional support payments: If you make an optional support payment, we may store the same limited Stripe identifiers and transaction metadata described for purchases above, including amount, currency, status, and time. A support payment does not create a product entitlement.

Legacy profile-card information: Matchup Engine previously offered an experimental profile-card editor. New profile images, club themes, handles, business descriptions, and website links are no longer collected through that feature. Previously supplied fields or images may be retained temporarily while the feature is retired but are not displayed through a public profile. You may request their deletion or delete your account.

3. How we use your information

We use your information to:

• create and authenticate your account
• provide access to account-gated content
• process purchases and grant, manage, and verify paid access
• maintain purchase records, process refunds or reversals where they apply, and handle payment disputes and fraud prevention
• measure aggregate product usage and improve the product, site reliability, and user experience
• operate bookmaker redirect links, measure outbound-link performance, and prevent duplicate, fraudulent, or abusive click activity
• maintain site security and prevent misuse
• debug errors and investigate technical issues
• send product updates or round notifications if you have opted in
• respond to support, privacy, or account requests

We do not sell your personal information.

We also use relevant information to record legal acknowledgements, operate Challenge identities and leaderboards, process optional support payments and receipts, and respond to associated enquiries.

4. Payment processing

Payments are processed by Stripe, acting as our payment processor. Your card or wallet details are provided directly to Stripe and are handled under Stripe's own security standards and privacy policy. We do not receive or store your card number, CVV, or full payment details.

To operate purchases, we share the email address associated with your account with Stripe for payment-processing, customer-record, and receipt purposes. We store limited Stripe identifiers and purchase metadata alongside your account as described in section 2. Stripe may process personal information in jurisdictions outside Australia in accordance with its own privacy practices and infrastructure.

The same Stripe processing arrangements apply when you make an optional support payment. Support payments are recorded separately from Round Pass entitlements and do not unlock product access.

5. Authentication and data storage

User accounts and authentication are managed by Supabase. Supabase stores and processes account data according to its own infrastructure, security practices, and privacy policy.

6. Cookies and similar technologies

This site uses functional cookies and similar technologies required for authentication sessions, security, and basic site operation.

We may also use session or anonymous identifiers to keep the product working consistently, remember short-lived state, measure first-party page views, and deduplicate or rate-limit outbound bookmaker link activity.

We do not currently use advertising cookies, tracking pixels, or behavioural advertising tools. If that changes, this policy should be updated before those tools are added.

7. Third-party services

The following third-party services may process data as part of normal site operation:

• Supabase — authentication and database
• Stripe — payment processing for purchases
• Vercel — hosting, edge delivery, and aggregate website analytics
• Open-Meteo — weather forecast data
• Licensed Australian wagering operators — only when you choose to open an outbound bookmaker link

When you click a bookmaker link, your browser leaves Matchup Engine and the bookmaker may receive normal browser request information and referral or campaign parameters. We do not intentionally send your password, payment details, or account email address to bookmakers. Internal click records may be stored by Matchup Engine and our infrastructure providers.

Some third-party infrastructure providers may process or store data outside Australia depending on their own infrastructure and service configuration.

No personal data is sold to advertising networks.

7A. Public Challenge information

If you enable leaderboard visibility, your chosen display name or member number and associated Challenge results, rank, or streak may be visible to other users or visitors. You can change your display name or visibility preference from the Account page, subject to product rules and retention needed to preserve completed competition records.

8. Data retention

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including providing the service, maintaining account and purchase records, meeting legal and accounting obligations, resolving disputes, maintaining security, and preventing fraud or misuse.

Retention periods may differ depending on the type of information. For example, account information may be retained while your account remains active, while purchase, payment-related, security, or dispute records may be retained for longer where reasonably necessary for legal, accounting, fraud-prevention, or record-keeping purposes.

Content associated with your account may be deleted or anonymised after account deletion, subject to any information we need to retain for the purposes described above.

9. Access, correction, and deletion

You may contact us to request access to, correction of, or deletion of personal information associated with your account.

We will respond within a reasonable timeframe. Some information may need to be retained where required for legal, security, accounting, dispute-resolution, or fraud-prevention purposes.

10. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the “Last updated” date.

11. Contact

If you have questions about this policy, wish to make a privacy request, or want to raise a privacy complaint, contact us at support@matchupengine.com.

We will review privacy complaints and respond within a reasonable timeframe. Where applicable, you may also have the right to contact the Office of the Australian Information Commissioner about a privacy concern.

The privacy contact is Mitchell John Fuller trading as Matchup Engine (ABN 15 729 771 132) at support@matchupengine.com.