Privacy Policy

Last updated: May 2026

    The short version: this tool stores nothing on any server. The only data saved locally is your optional API key preference in your browser's localStorage. We do not collect, sell, or share personal data.
  

1. Introduction

Who Plays Who is a free, browser-based tool for tracking and simulating the 2026 FIFA World Cup knockout bracket. It is not affiliated with FIFA or any official World Cup organisation. This policy explains what information is used when you visit the site.

2. Information We Collect

We collect essentially nothing. Specifically:

No accounts. There is no sign-up, login, or user profile.
No server-side storage. Your bracket state and any scores you enter exist only in your browser's memory for the current session.
localStorage (optional). If you choose to enter a BALLDONTLIE API key for live score data, that key is saved in your browser's localStorage so you don't have to re-enter it each visit. It never leaves your device.
No analytics or tracking pixels are embedded in the app itself.

3. Cookies & Advertising

This site uses Google AdSense to display advertisements. Google AdSense may set cookies and use similar technologies to serve personalised ads based on your browsing activity across sites.

You can opt out of personalised advertising at any time via Google's Ad Settings, or by visiting aboutads.info. You can also manage or disable cookies through your browser settings.

4. Third-Party Services

The app communicates with these external services:

Google AdSense (ads.google.com) — serves advertisements. Subject to Google's Privacy Policy.
flagcdn.com — provides country flag images. No personal data is sent; only the flag code (e.g. us) is requested.
api.balldontlie.io — provides live match scores if you supply an API key. Your key is sent as a request header directly from your browser.
eloratings.net — provides team Elo ratings for simulation accuracy. Only a page fetch is made; no personal data is transmitted.

Each third-party service is governed by its own privacy policy. We have no control over their data practices.

5. Data Retention

Any data stored in localStorage (your API key preference) persists until you clear it. You can remove it at any time by clearing your browser's site data, or by using the Settings panel inside the app and removing your API key.

6. Children's Privacy

This site is not directed at children under 13 years of age, and we do not knowingly collect any information from children. If you believe a child has provided information through this site, please contact us and we will take appropriate steps.

7. Changes to This Policy

We may update this policy from time to time. The "Last updated" date at the top of the page reflects when changes were last made. Continued use of the site after changes constitutes acceptance of the revised policy.

8. Contact

Questions about this privacy policy? Reach us at: privacy@[yourdomain].com