Last updated: July 31, 2026

1. Introduction

This Privacy Policy describes how BeaverCode (the "Operator", "we", "us") collects, uses, shares, and protects your personal information when you use MiPodio (the "Service"), available at mipodio.com. By using the Service, you agree to the practices described in this Policy.

The data controller responsible for your data is BeaverCode, contact email [email protected].

2. What data we collect

We collect the following personal data:

  • Account data: email address, display name, and, optionally, an avatar image.
  • Preferences: timezone and other application preferences.
  • Google Sign-In data: if you choose to sign in with Google, we receive basic profile information from Google (such as your email and name), in accordance with the permissions you authorize.
  • Content and activity: your predictions, the groups ("pools") you create or join, your scores, leaderboard positions, and other interactions within the Service.
  • Technical data: IP address, browser and device type, session identifiers, and usage data collected through cookies and similar technologies.

We do not intentionally collect special categories of sensitive data (for example, health, religion, ethnic origin). We do not request payment data, as the Service is free.

3. How we use your data

We use your data to:

  • Create and manage your account and authenticate your access.
  • Operate the Service: manage groups, record predictions, calculate points, and display rankings.
  • Personalize your experience (for example, showing times in your timezone).
  • Send you transactional emails related to your account (verification, password reset, Service notifications).
  • Protect the Service against fraud, abuse, and bots (via reCAPTCHA and security controls).
  • Maintain, improve, and analyze the performance and security of the Service.
  • Comply with legal obligations.

4. Legal basis for processing

Where applicable (for example, under the GDPR or equivalent laws), we process your data on the following legal bases:

  • Performance of a contract: to provide the Service you request by creating an account and participating.
  • Consent: for certain cookies or optional communications; you may withdraw it at any time.
  • Legitimate interest: for security, fraud prevention, and improving the Service, provided your rights and freedoms do not override it.
  • Compliance with legal obligations: where the law requires us to retain or disclose data.

5. Cookies and similar technologies

We use cookies and browser local storage (localStorage) to:

  • Keep you signed in (essential/technical cookies).
  • Remember your preferences (for example, visual theme, timezone).
  • Enable security and anti-bot protection features.

Essential cookies are necessary for the Service to function. You can configure your browser to block or delete cookies, but some features may stop working correctly. Where required by law, we will request your consent for non-essential cookies.

6. Providers and third parties that process your data

We share data with external providers that help us operate the Service, acting as processors or controllers as appropriate:

  • Google — Google Sign-In (OAuth) and anti-bot protection (reCAPTCHA). Use of reCAPTCHA is subject to Google's Privacy Policy and Terms.
  • Cloudflare — content delivery, network security, and attack mitigation; may process technical data such as your IP address.
  • Transactional email provider (Brevo) — sending account-related emails.

We do not sell your personal data. We only share data with third parties when necessary to operate the Service, comply with the law, or protect our rights and those of users.

7. Data retention

We retain your personal data while your account is active and for as long as necessary for the purposes described in this Policy. When you delete your account, we delete or anonymize your personal data within a reasonable timeframe, unless we must retain it to comply with legal obligations, resolve disputes, or enforce our agreements.

8. Your rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal data we hold about you.
  • Rectify inaccurate or incomplete data.
  • Delete your data ("right to be forgotten").
  • Object to or restrict certain processing.
  • Port your data to another service.
  • Withdraw your consent at any time, where processing is based on it.

To exercise these rights, write to us at [email protected]. We will respond in accordance with applicable law. You may also lodge a complaint with the competent data protection authority in your country.

9. Security

We apply reasonable technical and organizational measures to protect your data, including encryption in transit (HTTPS), secure password storage, access controls, and network protection through Cloudflare. However, no system is completely secure, so we cannot guarantee the absolute security of your data.

10. International transfers

Your data may be processed and stored on servers located outside your country of residence, including those of our providers (for example, Google, Cloudflare, Brevo). When we make international transfers, we will adopt the appropriate safeguards required by applicable law (for example, standard contractual clauses).

11. Children

The Service is not directed to children under 18 years old. We do not knowingly collect personal data from children below that age. If we become aware that we have collected data from a child without proper consent, we will delete it. If you are a parent or guardian and believe a child has provided us with data, contact us at [email protected].

12. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date and, if changes are material, will make reasonable efforts to notify you. We recommend reviewing this Policy periodically.

13. Contact

If you have questions or requests about this Policy or your personal data, contact us at: