Forecast, not a tip. Probabilities are model outputs and carry uncertainty. Do not risk money on them.
Privacy
What we hold, why we hold it, and how to get rid of it. Last updated 14 September 2026.
This notice covers both Brainer Lab sites: brainerlab.com, the brand page that explains what we publish, and forecast.brainerlab.com, the application you are reading now. Everything below about accounts, alerts and watchlists applies to the application only — the brand page has no account, no cookie and nothing to sign in to.
Forecasts, match pages, the reliability record and the weekly recap are public. Signing in adds a watchlist and optional email alerts, and nothing else.
There is no advertising on this site, no third-party analytics, and no tracking pixel in any email we send. We do not sell or share your data.
Sign-in uses Google. We request three scopes — openid, email and profile — which give us your email address, your display name, and a stable account identifier Google uses to recognise you across sign-ins.
That is the whole list. We do not request access to your contacts, calendar, files, or anything else in your Google account, and we could not read them if we tried.
Google issues us a token so the sign-in completes. It is encrypted before it is stored and is never sent to your browser.
Your account — email address, display name, the Google identifier above, and the dates you signed up and were last seen.
Your preferences — timezone, language, theme, default league, and whether email alerts are on.
Your watchlist — the teams you follow.
Alerts we have sent you — a record of which alert went to which account, kept so the same alert is never sent twice.
Your IP address is used briefly to rate-limit requests and is not stored alongside your account.
Alerts are off by default. You will not receive email because you signed in — only because you turned alerts on in Settings.
Email is delivered through Resend, who process it on our behalf. We do not record whether you opened a message: open tracking would mean embedding a pixel that reports back, and nothing here needs that.
Every alert carries a one-click unsubscribe link, and you can switch alerts off in Settings at any time. If a message bounces or is reported as spam, we turn your alerts off automatically rather than keep sending.
Email privacy@brainerlab.com from the address you signed up with and we will delete your account, your watchlist and your preferences.
We are being straight with you here: there is no delete button in the app yet. It is worth having and it is not built, so for now this is the route.
The same address works for asking what we hold about you, or for correcting it. If you are in the UK or the EU, those are rights you have and we will honour them.
This application and its database are hosted on Render. Sign-in is handled by Google and email by Resend. Match fixtures and results come from API-Football, which receives nothing about you — we ask it about football, not about readers.
The brand page at brainerlab.com is hosted on Vercel, which keeps ordinary server logs — the requested address, your IP address, your browser's user-agent string and the time — for as long as it needs to serve and protect the site. That page sets no cookie, loads nothing from a third party, and asks you for nothing.
Traffic is served over HTTPS only, and your session cookie cannot be read by JavaScript.
If what we do with your data changes materially, the date at the top of this page changes with it. Questions go to privacy@brainerlab.com.