Legal
Privacy Policy
Last updated: June 2026
What we collect
Depending on how you use SuperBrain, we may collect the following:
- Account data — email address and password (via Supabase Auth) when you create an account.
- Profile data — your chosen display name and avatar. Additional profile fields are entirely optional.
- Prediction data — match score predictions you submit, including scores awarded and timestamps.
- League data — leagues you create or join, including league names and member lists.
- Email preferences — whether you have opted in to match-day notifications and standings emails.
- Analytics events — actions such as page views and feature interactions (see PostHog section below).
- Technical data — browser type, device type, and general location derived from your IP address.
How we use your data
We use your data to:
- Operate your account and record your match predictions.
- Calculate and display scores on the global leaderboard and within your private leagues.
- Send match-day reminders and standings summaries if you have opted in to email notifications.
- Improve SuperBrain using aggregated, anonymised usage insights.
We do not sell your personal data to third parties. We do not use your data for advertising targeting.
Public leaderboard & league standings
Your leaderboard position and prediction history for completed matches are visible to other users. The following information may be publicly visible:
- Display name
- Total points and rank
- Match predictions (after kick-off only — future predictions are never shown)
Your email address is never shown publicly.
Analytics — PostHog
We use PostHog to collect anonymised product analytics. PostHog records events such as page views and feature usage. This data is used exclusively to improve SuperBrain.
PostHog does not receive your email address or prediction data linked to your identity. Data is stored on PostHog's servers. You can learn more at posthog.com/privacy.
Infrastructure — Supabase
We use Supabase for authentication and our database. Your account credentials are stored securely using industry-standard practices. Supabase is SOC 2 Type II certified. Learn more at supabase.com/security.
Data retention and deletion
You can request deletion of your account and all associated data at any time by emailing hello@superbrain.social. We will process deletion requests within 30 days.
Anonymous test results (taken without an account) are not linked to any identity and cannot be attributed or deleted.
Cookies
We use minimal cookies required for authentication session management. We do not use third-party advertising cookies.
Children
SuperBrain is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has submitted personal data, contact us and we will delete it.
Changes to this policy
We may update this policy as the product evolves. Significant changes will be communicated via a notice on the site. Continued use after an update constitutes acceptance.
Contact
Questions about this policy? Email us at hello@superbrain.social.