Privacy Policy

World Cup Calendar works without an account when you use .ics downloads or calendar feed URLs.

When you choose Google or Microsoft direct insert, we store your basic provider account profile, an authenticated session, server-side OAuth credentials, and the provider event IDs created by the app. These records let us insert selected matches, refresh authorization when permitted, and avoid duplicate events.

Google access is limited to calendars you own. Microsoft direct insert requests delegated Calendars.ReadWrite access. The app uses these permissions only to create the match events you request and does not call provider APIs to read unrelated personal events. OAuth credentials are never exposed to the browser.

We do not sell personal data. You can revoke access from your Google Account or Microsoft Account security settings. Revoking access stops future insertions but does not remove events already created.

Database records are retained while needed to provide direct insertion and duplicate detection. To request deletion of account and synchronization records, open an issue in the project's GitHub repository.