The Bracket 26

Privacy Policy

Last updated: June 2026

Draft for review. This document is a working draft and not legal advice. It must be reviewed by a qualified attorney before the service charges any user, and adapted to the specific data laws (GDPR, CCPA, etc.) that apply to your users.

This Privacy Policy explains how MishoTech Inc., a Delaware corporation operating from Los Angeles, California, USA ("we", "us"), handles information when you use The Bracket 26 (the "Service"). The Service is operated from the United States.

1. Information we collect

Account information: your email address, and a display name (which you can edit). If you sign in with Google or Apple, we receive your email and basic profile from that provider.
Game data: your bracket predictions, scores, league memberships, and entitlement balance (free entry used, tokens, Pass).
Purchase data: records of purchases (product, amount, date). Card details are handled by Stripe; we do not store full card numbers.
Technical data: standard server and security logs (e.g. IP address, timestamps) used to operate and protect the Service.

2. How we use it

To run the game: save and score your brackets, show leaderboards, manage leagues.
To process purchases and apply entitlements.
To authenticate you and keep your account secure.
To prevent abuse (e.g. duplicate accounts, post-deadline submissions).
To send you essential account and sign-in emails. We do not send marketing email without your consent.

3. What's public

Your display name and score appear on public and league leaderboards. Your email address, individual picks, and purchase history are never shown publicly. You can change your display name at any time.

4. Service providers

We use trusted third parties to operate the Service, including Supabase (authentication, database, hosting of server functions), Cloudflare (hosting, DNS, security), and Stripe (payments). These providers process data on our behalf under their own terms and security practices.

5. Data retention

We keep your account and game data while your account exists and as needed to operate the Service and meet legal obligations. You may request deletion of your account (see "Your rights"). Some records (e.g. purchase records) may be retained where required by law.

6. Your rights

Depending on where you live, you may have rights to access, correct, delete, or export your personal data, and to object to certain processing. To exercise these, contact info@misho.tech. We will respond as required by applicable law.

7. Children

The Service is not directed to children under 13, and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.

8. Where your data is processed

The Service is operated from the United States. Your data is processed in the United States and in other regions our providers use to run their services. If you access the Service from outside the United States, you understand and agree that your data will be transferred to and processed in the United States. Where required by law for users in certain regions, we will rely on appropriate safeguards for such transfers. [If you actively market to EU/UK users, counsel should confirm the transfer mechanism and any additional disclosures.]

9. Cookies

See our Cookie Policy for how we use cookies and similar technologies.

10. Changes

We may update this policy; the date above reflects the latest version. Material changes will be made prominent.

11. Contact

Privacy questions: info@misho.tech.

The Bracket 26 is operated by MishoTech Inc. Not affiliated with, endorsed by, or sponsored by FIFA or any football federation. No prizes are awarded.