Privacy Policy

Ocaso Arena is a product of Ocaso Ventures Limited (“we”, “us”), operated from New Zealand. This policy explains what personal information we collect, why, and your rights under the NZ Privacy Act 2020 and equivalent regimes (UK GDPR, EU GDPR, CCPA) where they apply.

What we collect

• Account: email, display name, optional alias, optional favourite team.
• Activity: predictions, leagues joined, leaderboard standings.
• Device & session: IP address (for security and rate-limiting), browser type, push-notification token if you turn notifications on, timezone.
• Bug reports: if you use the Report a bug button, we also store the category and message you wrote, the page URL you were on, your viewport and screen size, your device’s user-agent string, your language, and your account id. We email this to our support address so we can reproduce the issue. We never include the contents of your predictions or your password.

Why we collect it

• To run the prediction arena you signed up for.
• To secure your account against fraud and abuse.
• To notify you about matches and league activity, if you opt in.
• To improve the product, using aggregated, anonymised data only.

Lawful basis

Performance of contract (running your account) and legitimate interest (security, anti-abuse). Push notifications and any future analytics require your explicit consent.

Who processes your data

• Lovable Cloud: managed backend hosting (database, authentication, storage).
• Cloudflare: edge runtime and DDoS protection.
• Email delivery: transactional email for sign-in links and notifications.

Retention

We keep your account and predictions while the account exists. When you delete your account, identifiable data is removed within 30 days. Aggregated, anonymised leaderboard history may be retained.

Your rights

• Access: request a copy of your personal data.
• Rectify: correct anything that’s wrong.
• Erase: delete your account and personal data.
• Port: export your data in a machine-readable format.
• Object: withdraw consent for notifications or analytics at any time.

See the Your data page for how to export or delete your information, or email arena@ocasoventures.nz.

Children

Ocaso Arena is not directed at anyone under 18. We do not knowingly collect data from anyone under 18.

Changes

We’ll update the “last updated” date and, for material changes, re-prompt for consent.