Privacy Policy

Last updated: 16 July 2026

Who We Are

PendliEndel is operated by Sten Olmre, an individual based in Estonia ("we", "us"). For any privacy question or request, contact: stenolmre@icloud.com.

What We Collect

Account data: your name, email address, and profile picture, as provided by GitHub or Google when you sign in. We do not see or store your password — sign-in is handled entirely by those providers.
Your predictions: the picks and answers you submit for competitions, which become visible to other users once a competition starts.
Preferences: your email notification settings (race reminders, season updates, marketing).

We do not collect payment information, and we do not sell your data.

Why We Use It

To provide the app (create your account, record and display your predictions and leaderboard standing) — necessary to perform our contract with you.
To send race reminders and season updates — based on our legitimate interest in operating the service you signed up for (e.g. letting you know a prediction window is closing). These are on by default, and you can turn them off at any time in your account settings.
To send marketing emails (news about new features and other updates) — only with your consent. This is off by default; you can opt in, and later withdraw your consent, at any time in your account settings.
To send account and system emails (e.g. a welcome email, or a confirmation when you change your settings) — necessary to perform our contract with you, so these cannot be turned off.

Who We Share It With

We use a small number of service providers to run the app, each acting on our behalf:

MongoDB Atlas — database hosting for account and prediction data.
Vercel — application hosting. We use Vercel's cookie-free Web Analytics for aggregate traffic stats; it does not collect personal data or set tracking cookies.
GitHub and Google — authentication only. When you sign in, they share your name, email, and profile picture with us as authorized by you.

Some of these providers may process data outside the EU/EEA (e.g., in the US), under their own standard contractual safeguards. We don't otherwise share your data with third parties, and we never sell it.

Cookies

We use one strictly-necessary cookie to keep you signed in. It is required for the app to function and isn't used for tracking or advertising. We don't use any other cookies.

How Long We Keep It

We keep your account and prediction data for as long as your account is active. You can permanently delete your account and all associated data (predictions, scores, league memberships) yourself at any time in account settings — this takes effect immediately and cannot be undone. Any leagues you created are deleted along with your account, which also removes them for their other members. Alternatively, contact us at stenolmre@icloud.com and we'll process a deletion request without undue delay.

Your Rights

Under GDPR, you have the right to:

Access the personal data we hold about you.
Correct inaccurate data.
Request deletion of your data ("right to be forgotten") — self-serve via account settings, or by contacting us.
Request a copy of your data in a portable format.
Object to or restrict certain processing, including withdrawing marketing consent.
Lodge a complaint with a supervisory authority — in Estonia, the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), or the data protection authority in your own EU/EEA country of residence.

To exercise any of these rights, email stenolmre@icloud.com.

Children

PendliEndel is not directed at children under 13, and we do not knowingly collect data from them.

Changes to This Policy

We may update this Privacy Policy from time to time. We'll notify users of any significant changes through the application.

See also our Terms of Service and the Manual.