Privacy policy

Last updated: 1 November 2026 · Courtesy translation; the Spanish version prevails.

Owner and controller: MailPrediction. Tax ID (NIF): 507326311J. Address: Calle Tres de Abril, 6, Torrejón de Ardoz, Madrid, Spain. You can get in touch through the contact form.

1. What data we process and why

When you create and use an account we process the identification and contact data provided, the access credentials, the licence or purchases associated and the preferences needed to provide the service. When you contact us we process your name, email, phone and message to handle the enquiry.

The prediction functions may process recipients’ names and addresses, game contents, generated images, signatures and sending data. The email configuration may include an SMTP server, username and credentials or, if you connect a compatible account, Google or Microsoft identifiers and authorisation tokens. They are used to set up and carry out the sends you request and to manage that connection.

The server may record IP address, date, requested path and technical browser data to maintain availability, prevent abuse and diagnose errors.

2. Legal bases

Managing accounts, licences, configuration and sends is based on performing the contract or on pre-contractual measures requested. Handling enquiries is based on those measures when they concern purchasing and, in other cases, on the legitimate interest in replying to whoever contacts us. Security is based on the legitimate interest in protecting the service; invoicing and tax obligations, on compliance with legal obligations. Optional processing that requires consent can only be carried out with that consent, which can be withdrawn.

3. Recipients of prediction emails

If you enter data of spectators or other people, you must have an adequate legal basis and inform them of its use. When you use MailPrediction in a professional activity and decide the purpose and recipients of the sends, you act as controller of that processing and MailPrediction provides the service on your behalf. That relationship requires the applicable data processing terms under Article 28 of the GDPR. This policy does not replace that agreement.

If you have received a prediction and want to find out its origin or request erasure of your data, contact the person who sent it or MailPrediction through the form, identifying the send without providing unnecessary information.

4. Providers and communications

Hosting, maintenance and email providers may process data to provide their services. Payments are processed through Stripe and, in the flows that offer it, PayPal, according to their own privacy information. The email connection you choose may involve Google, Microsoft or another SMTP provider. The contact form uses Google reCAPTCHA to prevent automated submissions. The public website also requests fonts from Google Fonts; when external resources are loaded, technical data such as the IP address are transmitted.

These services may involve processing outside the European Economic Area. Where applicable, they must be covered by an adequacy decision or safeguards under Chapter V of the GDPR, such as standard contractual clauses. You can request information about the providers and safeguards that apply through the form. Data may also be disclosed to authorities when there is a legal obligation.

5. Retention

Account data are kept for as long as is needed to provide the service; enquiries, during their handling and the period needed to address possible liabilities. Tax and contract data are kept for the applicable legal periods. Technical logs are kept for the time needed for security and diagnosis. When the purpose ends, they are deleted or blocked where a retention obligation exists. You can request deletion of connections and associated data; emails already delivered also depend on the recipient and their provider.

6. Your rights

You can request access, rectification, erasure, objection, restriction and portability where applicable, as well as withdraw your consent, from the contact form, stating “Data protection”. Only the information needed to verify your identity will be requested. The reply will generally be given within one month; any extensions provided for by law will be communicated within that period.

You can lodge a complaint with the Spanish Data Protection Agency. This policy involves no automated decisions with legal effects or commercial profiling.

7. Security and changes

Use your own passwords and protect the devices you access from. You can revoke email authorisations from the controls of the corresponding provider. Substantial changes to the processing must be communicated by appropriate means. See also our cookie policy.