Privacy policy

Last reviewed: 15 June 2026.

Why does this page exist?

We take privacy seriously. This page explains exactly what data World Cup Drops collects, why we collect it, and what we do with it. No fine print, no surprises.

Who is responsible for your data?

World Cup Drops is operated by Rocksteady Malta (19/7B, Mc Iver Street, Tas-Sliema SLM 3132, Malta), the data controller responsible for the personal data described on this page. For any privacy question or request, email contact@worldcupdrops.com.

What do we collect?

In plain terms, very little. We do not ask you for personal data.

• Aggregated analytics via Google Analytics and Google Search Console. These track page views, referrers, country, and device type so we understand how people use the site. Google may set cookies as part of this. See the Cookies section below.
• Search-engine tools like Bing Webmaster Tools and Yandex Webmaster. These verify the site and help search engines index it. They give us aggregate search data, never anything that identifies you.
• Outbound affiliate clicks, once the click redirector is live. We log the partner slug, country, and timestamp to measure performance. None of that identifies you personally.
• Contact form submissions, when you reach out. We receive your message and respond. We don't add you to any list.
• localStorage flags in your browser, like your theme choice (light or dark mode). These never leave your device.

That's the whole list.

What do we never do?

• No personal accounts (yet)
• No selling, renting, or sharing your data
• No advertising networks
• No retargeting
• No data brokers

Cookies

We use:

• First-party preference flags in localStorage to remember your theme choice (light or dark). No tracking, just a remember-me toggle.
• Google Analytics cookies to measure how people use the site. Google manages these directly. See Google's privacy policy for the full list.

We don't use marketing cookies, retargeting cookies, or third-party advertising cookies.

Your cookie choices

Analytics cookies only load after you accept them. You see a consent banner on your first visit, and you can change or withdraw your choice at any time using the "Cookie settings" link in the footer. You can also block or delete cookies in your browser settings. Essential first-party flags, like your theme choice, are always on because the site needs them to work.

Where does your data live?

Our site runs on Vercel, with content served from edge servers worldwide. Google Analytics and Search Console are operated by Google, Bing Webmaster Tools by Microsoft, and Yandex Webmaster by Yandex, on their global infrastructure. Contact form submissions land in our inbox. We choose providers that take security and privacy seriously.

International data transfers

Some of our providers, such as Google and Vercel, are based in the United States, so your data may be processed there. When data moves outside the EU, the UK, or your home region, we rely on safeguards such as the EU Standard Contractual Clauses and the providers' own data-protection frameworks.

How long do we keep your data?

• Google Analytics data: 14 months by default, then aggregated to anonymous totals
• localStorage flags: until you clear your browser
• Contact form messages: kept until the conversation is resolved, then archived
• Affiliate click logs: 12 months for performance analysis, then aggregated to monthly totals

Our legal basis (EU and UK visitors)

When the GDPR or UK GDPR applies, we rely on these legal bases:

• Consent, for analytics cookies and any non-essential tracking. You give it through the cookie banner and can withdraw it at any time.
• Legitimate interests, to keep the site secure, understand aggregate traffic, and measure affiliate performance, balanced against your rights.
• Responding to your request, when you send us a message and we reply.

Your rights

Even with the limited data we collect, you have the right to:

• Ask what we have on you
• Export it
• Request deletion
• Object to processing

EU and UK visitors (GDPR)

You also have the right to restrict or object to processing, to data portability, and to withdraw consent at any time. You can lodge a complaint with your local data protection authority, for example the CNIL in France or the ICO in the United Kingdom.

US visitors

Depending on your state, including California (CCPA and CPRA), Virginia, Colorado, Connecticut, and Utah, you have the right to know what personal information we collect, to access or delete it, and to opt out of its "sale" or "sharing."

We do not sell or share your personal information as those laws define it, so there is nothing to opt out of. You will never be treated differently for exercising any of these rights.

To exercise any right, reach out via the contact page. We aim to respond within 30 days, in line with the GDPR.

Children's privacy

World Cup content is for everyone, but the betting and casino offers we link to are for adults only, 18+ and 21+ in some regions. The site is not directed to children. We do not knowingly collect personal data from anyone under 18, and in the United States we do not knowingly collect it from children under 13 (COPPA). If you believe a minor has submitted data to us, contact us at contact@worldcupdrops.com so we can investigate and remove it.

Data security

Where data is stored, it's protected by the security infrastructure of the providers we use. Vercel, Google, and any future tools we adopt have their own security teams and controls. We do our part by limiting internal access and collecting only what we need.

Where can you learn more?

• Terms of service, the rules for using the site
• Editorial policy, how we produce and check our content
• Affiliate disclosure, how we make money
• Responsible gambling, help if betting stops being fun

Updates to this policy

We update this policy whenever something changes, whether that's a legal requirement or the way we operate the website. When we update it, we bump the "Last reviewed" date at the top. Big changes get a more visible note. Small clarifications happen quietly.

If anything here is unclear, the contact page is open. We read every message.