Privacy policy

Topplay (topplay.tech) gives football match analysis and betting picks. This policy explains what we collect when you use it, why, who helps us run it, and how you can get your data deleted. We keep it short and only collect what the service needs.

What we collect

• From Google sign-in: your name, email address and profile picture link. We ask Google only for these basic profile details (the openid, email and profile scopes) — never your contacts, Gmail, Drive or anything else.
• What you do in Topplay: the picks you unlock, your plan and when it ends, the results of your picks, journal entries you write, and your avatar choice.
• Payments: payments are handled by Whop. We receive a payment ID, the plan bought, the amount and its status. We never see or store your card or bank details.
• Technical data: a sign-in session cookie and a few preference cookies (for example, hiding a banner). Our hosting provider keeps standard server logs, such as IP address and browser type, for security.

How we use it

• To sign you in and keep your account, picks, results and journal.
• To give you the right access for your plan and confirm your payments.
• To show you account messages inside the app, such as when your pass is about to end.
• To answer support requests, stop abuse and keep the service secure.
• To see overall numbers (for example, how many people signed up) so we can improve Topplay.

We do not sell your data, use it for advertising, or share it with data brokers. There are no ad or tracking cookies.

Google user data

Topplay's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Your Google name, email and picture are used only to create and run your Topplay account. They are not used to train AI models, not shared with anyone except the service providers below, and not read by people except when you ask us for support or the law requires it.

Who processes it for us

• Supabase — sign-in and database (stored in Frankfurt, Germany).
• Vercel — website hosting.
• Whop — payments and checkout.
• Google — the sign-in itself.

Match analysis uses football data from API-Football and AI from Anthropic. These receive match and team statistics only — never your personal data.

How long we keep it

We keep your account data while your account is open. If you ask us to delete your account, we delete your profile, picks and journal within 30 days. Payment records may be kept longer where tax or accounting law requires it.

Your rights

You can ask to see, correct, export or delete your data, or object to how we use it, by emailing valeriot786@gmail.com. You can also remove Topplay's access to your Google account at any time from your Google account permissions. If you are in the EU or UK, you can also complain to your local data protection authority.

Age

Topplay is only for people aged 18 or over (or the legal gambling age where you live). We don't knowingly collect data from anyone younger.

Security

Data is encrypted in transit, access to the database is restricted, and each person can only read their own account data. No system is perfectly secure, but we work to protect your information.

Changes and contact

If we change this policy we will update the date at the top, and tell you in the app if the change is significant. Questions? Email valeriot786@gmail.com.