Privacy Policy

We collect information you provide directly when using the Service, including:

• your name or display name;
• your email address;
• your selected nation;
• fan statistics or card customization information;
• optional photo uploads submitted for card generation;
• generated card images;
• Fan Wall opt-in information;
• support or removal requests you send to us.

We also collect payment-related information through Stripe. We do not store your full credit card number or full payment card details. Stripe may provide us with limited payment information, such as payment status, transaction ID, billing email, card brand, last four digits, and fraud or verification signals.

We may also automatically collect basic technical information when you use the Service, such as IP address, browser type, device information, pages visited, timestamps, referral source, and similar usage or security data.

We use your information to:

• generate your personalized football hero card;
• process your payment;
• send your card and purchase confirmation;
• provide customer support;
• handle refunds, disputes, removal requests, and technical issues;
• operate, secure, and improve the Service;
• prevent fraud, abuse, policy violations, and unauthorized use;
• optionally display your card on the public Fan Wall if you opt in;
• send optional marketing communications if you choose to receive them;
• comply with legal obligations and enforce our Terms of Service.

If you upload a photo, we use it to generate your personalized card, operate safety and moderation systems, troubleshoot generation issues, and deliver the final product.

Uploaded photos may be temporarily stored and transmitted to third-party AI service providers for image generation and content moderation. We delete original uploaded photos from our temporary storage after generation is completed or fails, unless a longer retention period is reasonably necessary for security, fraud prevention, legal compliance, dispute resolution, or troubleshooting.

The generated card image, not the original uploaded photo, may be stored in our database so we can deliver the card, support verification pages, support Fan Wall features if you opt in, process removal requests, and maintain purchase records.

We do not use uploaded photos for our own advertising or marketing unless you separately give us permission.

Participation in the Fan Wall is optional and requires your explicit opt-in.

If you opt in to the Fan Wall, your generated card image, name or display name, selected nation, OVR rating, and related card information may be publicly visible on the Service, including at worldofthecup.com/wall.

If a card depicts a minor, the person opting in represents that they are the minor depicted, the minor's parent or legal guardian, or that they have obtained all necessary permission from the minor's parent or legal guardian.

Public Fan Wall content may be viewed, copied, screenshotted, downloaded, indexed by search engines, cached, or shared by others. You may request removal of your card from the Fan Wall by contacting us at legal@worldofthecup.com. We will remove the card from our own website within a reasonable period, but we cannot control copies, screenshots, cached pages, reposts, or third-party sharing that occurred before removal.

We use third-party service providers to operate the Service. These may include:

• Stripe for payment processing;
• OpenAI or other AI service providers for image generation and content moderation;
• Supabase for database and storage services;
• Resend for email delivery;
• hosting, analytics, security, or infrastructure providers.

These third-party services may process information as needed to provide their services to us. Each third-party provider has its own privacy practices and policies.

We do not sell your personal information.

We may send marketing emails only if you opt in or where otherwise permitted by law. You may unsubscribe at any time using the unsubscribe link in our emails or by contacting us at legal@worldofthecup.com.

Transactional emails related to your purchase, card delivery, refunds, support requests, security, or account/service updates are not marketing emails and may still be sent when necessary.

We retain personal information only as long as reasonably necessary for the purposes described in this Privacy Policy, including providing the Service, delivering generated cards, maintaining purchase records, preventing fraud or abuse, resolving disputes, complying with legal obligations, and operating Fan Wall or verification features.

Original uploaded photos are deleted from temporary storage after generation is completed or fails, unless retention is reasonably necessary for security, fraud prevention, legal compliance, dispute resolution, or troubleshooting.

Generated card images, order information, and related card data may be retained to support card delivery, verification pages, Fan Wall features, customer support, fraud prevention, legal compliance, and business records. You may request deletion by contacting us at legal@worldofthecup.com.

Some information may remain in backups, logs, transaction records, or third-party provider systems for a limited period where deletion is not technically immediate or where retention is necessary for legal, security, fraud-prevention, or accounting purposes.

You may contact us at legal@worldofthecup.com to request that we:

• remove your card from the Fan Wall;
• delete your generated card and associated personal information;
• correct inaccurate information;
• unsubscribe you from marketing communications;
• respond to questions about how your information is used.

We may need to verify your identity before completing certain requests. Some requests may be limited where information is needed for payment records, fraud prevention, legal compliance, dispute resolution, security, or legitimate business purposes.

World of the Cup is intended for users 13 years of age or older. The Service is not directed to children under 13, and users under 13 may not use the Service.

We do not knowingly collect personal information directly from children under 13. If we learn that a child under 13 has submitted personal information to us, we will take reasonable steps to delete that information from our active systems.

If you are under 18, you should use the Service only with the permission of a parent or legal guardian.

Parents or guardians who believe a child under 13 has submitted information to us may contact us at legal@worldofthecup.com.

We understand that when you use World of the Cup, you are placing trust in us with personal information — including your name, email address, and in some cases a photo of yourself. Protecting that information is a top priority for us, not an afterthought.

We use reasonable administrative, technical, and organizational safeguards to protect personal information, including encrypted connections, access controls, and secure third-party infrastructure providers.

That said, no internet-based service, storage system, or method of transmission is completely secure, and we cannot guarantee absolute security of your information. If you have concerns about the security of your data, you are always welcome to contact us at legal@worldofthecup.com.

The Service is operated from the United States. If you access the Service from outside the United States, you understand that your information may be processed and stored in the United States or other jurisdictions where our service providers operate.

You are responsible for complying with the laws of your location when using the Service.

We may update this Privacy Policy from time to time. If we make material changes, we will update the “Last updated” date at the top of this page. Your continued use of the Service after changes are posted means you accept the updated Privacy Policy.

For privacy requests, deletion requests, Fan Wall removal requests, or questions about this Privacy Policy, contact us at:

World of the Cup
legal@worldofthecup.com