Draft — not yet legally reviewed
This document is a working draft prepared for review by a qualified lawyer. It is not legal advice and should not be relied on. Placeholders in square brackets are unresolved.
Privacy Policy
Last updated 1 September 2026
This policy explains what Quorum collects, why we collect it, who we share it with, and what you can ask us to do about it.
Who we are
Quorum is operated by [COMPANY LEGAL NAME], [COMPANY NUMBER], of [REGISTERED ADDRESS]. In this policy “we” and “Quorum” mean that company.
Quorum is a sports information service. It does not accept bets, hold funds, process deposits or withdrawals, or act as a wagering operator.
What we collect
You can read Quorum without an account. Most of what follows applies only if you choose to create one.
Everyone who visits:
- A region cookie.
- A first-party cookie named
quorum_region- that records which market you chose, so we do not ask again. It contains a two-letter country code and nothing else, and lasts a year.
- Browser storage.
- We keep a few things in your own browser rather than on our servers: a sign-in token so you are not signed out on every page, your display name so the screen does not flicker while it loads, and a note of which kickoffs you have already been shown, so a celebration is not repeated. Clearing your browser data removes all of it.
- Usage events.
- Which screens and features are used, as an event name, a random session identifier and non-identifying properties such as a fixture slug.
- Server logs.
- Standard web server records of requests made, kept for
- [RETENTION PERIOD]
- .
If you create an account, additionally:
- Your email address, username and display name. An email address is required to create an account, because it is the only way to get back in if you forget your password.
- Anything you choose to publish: your bio, the teams you follow, predictions you post and comments you make.
- Session records.
- One per device you sign in on, holding a device label, your browser’s user-agent string, and a
- hashed
- form of your IP address. We do not store your IP address itself, and the hash cannot be reversed to recover it.
- Your simulated performance: streaks, virtual units and prediction accuracy. These are scorekeeping only and are not money.
What we do not collect
- No payment information.
- We take no payments and store no card, bank or account numbers.
- No betting activity.
- If you place a bet with a bookmaker, that happens on their site under their policies. We do not receive your stake, your account details or your outcomes.
- No location tracking.
- The region you see is decided by the website address you visit, not by tracking where you are.
- No plaintext passwords or tokens.
- Passwords are hashed, and sign-in tokens are stored only as hashes.
Why we collect it
- To show you the product and remember your preferences.
- To operate accounts, keep them secure, and let you see and end your own sessions.
- To understand which features are used, so we can improve them.
- To detect and prevent abuse of the service.
- To meet legal obligations.
We do not sell personal information, and we do not share it with data brokers.
Who else handles it
We use a small number of suppliers to run the service. They act on our instructions and may not use your information for their own purposes.
- Our hosting provider,
- [HOSTING PROVIDER AND REGION]
- , which runs the servers and the database and therefore stores everything above.
- Our email provider,
- SMTP2GO, which delivers the two messages we send: a welcome message when you create an account, and a password reset when you ask for one. It receives your email address and display name, and nothing else. We send no marketing and operate no mailing list.
Our sports data and odds suppliers send information to us; we send none to them. Nothing about you reaches TheSportsDB or The Odds API.
[CONFIRM WHETHER ANY SUPPLIER STORES DATA OUTSIDE THE OPERATING COMPANY’S JURISDICTION, AND DISCLOSE THE COUNTRIES]
Advertising
Quorum shows advertising through Google AdSense. Google and its partners may set cookies or use similar technologies to serve and measure ads, and may use information about your visits to this and other sites. That processing is governed by Google’s own privacy policy, not this one.
You can control personalised advertising at Google Ads Settings and youronlinechoices.com.
[CONFIRM: consent banner required for this audience under the EU user consent policy, and whether AU/NZ-only traffic changes that]
Who else receives data
- Our hosting provider
- , which runs the servers this site is served from.
- Cloudflare
- , which sits in front of the site to provide security and delivery.
- , for advertising, as described above.
- Bookmakers you choose to visit.
- If you follow a link to a bookmaker, they will know you arrived from Quorum. We may be paid for that referral — see our
- Terms
- .
Our sports data and odds providers send data to us. We do not send them anything about you.
[CONFIRM: whether the AI provider is enabled at launch; if it is, questions asked of the assistant are sent to that provider and this list must say so]
Where your data is held
Our servers are located in [HOSTING REGION], which may be outside the country you are in. Where personal information is transferred overseas we take reasonable steps to ensure it is handled consistently with this policy.
How long we keep it
- Account information: while your account is open, and for
- [PERIOD]
- after you close it.
- Session records: until the session expires or you revoke it.
- Usage events:
- [PERIOD]
- .
- Anything you published: until you delete it, or your account is closed.
Your rights
You can ask us to give you a copy of the personal information we hold about you, correct it if it is wrong, or delete it and close your account. We will respond within [STATUTORY PERIOD].
You can clear the region cookie and everything in browser storage at any time through your browser, and block advertising cookies through the links above.
If you are unhappy with how we have handled your information you can complain to us at [PRIVACY CONTACT EMAIL], and to the [REGULATOR: NZ Office of the Privacy Commissioner and/or the Australian OAIC, depending on where the operating entity is established].
Children
Quorum is not intended for anyone under 18 and we do not knowingly collect information from under-18s. If you believe a child has given us information, contact us and we will delete it.
Changes
If we change this policy we will update the date at the top of this page. Material changes will be signalled in the app.
Contact
[PRIVACY CONTACT EMAIL] — [POSTAL ADDRESS]