Last updated: July 9, 2026
Data we use
Bolz uses your account identity, display name, avatar, favorite team, group memberships, predictions, reactions, and leaderboard scores to run the football prediction game.
If you sign in with Google or Apple, Bolz receives the account details needed for sign-in, such as your email address, name, and profile image when provided by the sign-in service.
Uploaded images
Avatar uploads and generated avatar results are processed by Cloudflare Images and stored in Cloudflare R2 so they can be shown on your profile, leaderboards, game cards, and group member views.
Images used for AI avatar generation are processed only for the requested avatar workflow and should not include sensitive documents or private information.
Visibility
Your display name, avatar, favorite team, predictions after reveal, reactions, and scores can be visible to members of groups you join.
Private group content is intended for group members. Public or featured groups can show group-level information to other signed-in users.
When a group member publishes a completed competition result, the final ranking, display names, avatars, scores, and reaction awards included in that result can be viewed by anyone who has its public results link. Published results use a fixed snapshot and the sharing member can revoke the link.
A Company group owner can publish a private-token website widget that exposes limited group ranking and match data to holders of its URL. Embedding is restricted to the HTTPS origins selected by the owner.
Billing providers
Apple, Google, RevenueCat, or Stripe processes subscription payments. Bolz stores provider customer and subscription identifiers, status, product, renewal date, and an opaque Bolz billing identity so paid access can be verified.
Bolz does not use your email address as the cross-platform billing identity and does not store full payment-card details.
Access requests and beta invitations
If you request Bolz access, Bolz stores your name, email address, selected mobile platform, optional note, consent, and application decision.
For approved applications, Bolz sends your name and email address to Apple through the App Store Connect API and stores the Apple beta tester identifier and device details Apple returns so invitation access can be managed and revoked individually.
For Android access, Bolz verifies the Google Account you choose, stores its stable Google account identifier and verified email, and manages that email as a member of the private Google Play tester group. Membership is removed when Android beta access is revoked or your Bolz account is deleted.
Bolz may create an account for an approved email address and use Resend to deliver secure, time-limited sign-in links. Feedback submitted from the beta feedback form is stored with your Bolz account and access request so the Bolz team can investigate and resolve it.
Access-request data is visible only to Bolz administrators and is retained while needed to operate the beta program. You can request removal through the privacy contact below.
Retention and control
Bolz keeps account, group, prediction, reaction, and avatar data while your account and groups are active so the game history remains usable.
Published result snapshots remain available until their public link is revoked or the underlying group is deleted.
You can permanently delete your account from Profile. You must first delete groups you own and cancel any external subscription separately; deleting Bolz does not cancel billing through Apple, Google, or the web.
Account deletion removes your account data and stored account images. Bolz retains only a one-way billing identity tombstone needed to prevent a deleted identity from being reassigned.
Privacy contact
The operator is Tommy Szewczuk, Max-Brauer-Allee 8, 22765 Hamburg, Germany.
For privacy requests, contact bolz@merou.de.