Privacy policy

Last updated 2 October 2026

This privacy policy governs the collection, processing, and use of personal data by MissPredict in accordance with the General Data Protection Regulation (GDPR) and other relevant data protection laws. It applies to visitors, people who contact us, and account holders.

1. Responsible entity

2. Collection and processing of personal data

Visiting the website

When you open a page, the server records technical data needed to deliver it: IP address, date and time, the page requested, the referring address, and your browser type. We use this to operate the site, find faults, and protect it against abuse. The legal basis is our legitimate interest in a working and secure website (Art. 6 (1) (f) GDPR). Log data is kept only as long as we need it for those purposes. Browsing the public pages does not require an account.

Cookies

This website uses cookies and similar technologies so the site works, so we can measure how it is used, and so we can show advertisements based on your interests.

The public site sets a cookie where it is required to keep the page secure, for example the CSRF token that protects forms. If you sign in, we also set a session cookie and a login cookie so you stay signed in. These cookies are strictly necessary. The legal basis is Art. 6 (1) (f) GDPR, and Art. 6 (1) (b) GDPR where the cookie is needed to provide the account you requested.

Analytics and marketing cookies are used only with your consent (Art. 6 (1) (a) GDPR). By accepting those cookies you also consent to the transmission of your data by Google, LinkedIn, and other providers to recipients outside the European Economic Area, including the United States, where an adequate level of protection cannot be assumed. Authorities there may access the data without you being informed and without a legal remedy that is equivalent to EU law. You can withdraw your consent at any time through the contact form. Withdrawal does not affect processing that took place before you withdrew.

Google Analytics

We use Google Analytics, a web analytics service, to understand how the website is used and to adapt it. Google Analytics creates usage profiles based on pseudonyms. Persistent cookies are stored on your device and read for this purpose, so recurring visitors can be recognised and counted. The cookie records, among other things, pages visited, how long a visit lasts, and technical details such as operating system and device. The information generated by the cookie is usually transmitted to and stored by Google on servers in the United States.

Google Ireland Limited and Google LLC (USA) assist us as processors pursuant to Art. 28 GDPR. Processing can therefore take place outside the EU or EEA. Because Google LLC processes data in the United States, no adequate level of data protection can be assumed. There is a risk that authorities access the data for security and monitoring purposes without informing you or providing legal remedies. Please consider this when you decide whether to consent.

Processing is based on your consent (Art. 6 (1) (a) GDPR). Transfer to a third country is based on Art. 49 (1) (a) GDPR. You can withdraw your consent at any time via the contact form.

HubSpot

We use HubSpot for marketing and customer relationship management. HubSpot may store and process personal data, including for email campaigns, lead management, and related marketing activity. Processing of marketing data through HubSpot is based on your consent (Art. 6 (1) (a) GDPR) or, where we contact existing customers about our own similar services, on Art. 6 (1) (f) GDPR as described under Marketing below.

3. Purpose and legal basis

We process personal data for the following purposes:

• Operating our web services. This covers MissPredict and the associated services on benjaminkrueger.com, including content, user accounts, and keeping the website available. Legal basis: Art. 6 (1) (b) GDPR for accounts you request, and Art. 6 (1) (f) GDPR for operating a secure site.
• Billing. Where a paid service is used, we process data to collect fees and to communicate about payments and invoices. Legal basis: Art. 6 (1) (b) GDPR and, where we must keep invoices, Art. 6 (1) (c) GDPR.
• Providing and improving the website. This includes publishing content, updating the design, and changes that make the site easier to use. Legal basis: Art. 6 (1) (f) GDPR.
• Analysing website use with Google Analytics. We look at pages visited, visit duration, and technical details to understand how the site is used. Legal basis: Art. 6 (1) (a) GDPR.
• Marketing with HubSpot. We use HubSpot to plan, run, and review marketing, including email campaigns and lead generation. Legal basis: Art. 6 (1) (a) GDPR, or Art. 6 (1) (f) GDPR for direct marketing of our own similar goods or services as set out below.

Accounts

Signing in uses an email address. We send a one-time link to that address and store the address together with the sign-in session. The legal basis is the account you asked us to provide (Art. 6 (1) (b) GDPR). We keep the account until you ask us to delete it or the account is no longer needed.

Public profiles and predictions

MissPredict collects public statements by people who comment on markets, then checks those statements against later prices. For that we store names, public handles, public posts, and the outcome of each call. The source is content those people have already published, for example on YouTube or X.

The legal basis is our legitimate interest in showing whether public financial claims turned out to be right (Art. 6 (1) (f) GDPR). The people concerned can object. We then weigh their reasons against the public interest in the record and stop the processing where their interest prevails.

4. Transmission of data to third parties

We transmit personal data to third parties only when the law requires it, when you have consented, or when it is necessary to perform a contract. Processors include the hosting and analytics providers named in this policy. They process data on our instructions where a data processing agreement is in place.

5. Your rights

You have the right to access, rectify, erase, and restrict processing of your personal data, to data portability, and to object to processing. To exercise these rights, or if you have questions about how we process your data, contact us using the details at the end of this policy.

• Access (Art. 15 GDPR): confirmation of whether we process data about you, and a copy of that data.
• Rectification (Art. 16 GDPR): correction of inaccurate data.
• Erasure (Art. 17 GDPR): deletion of data, including the right to be forgotten, where the statutory conditions are met.
• Restriction (Art. 18 GDPR): restriction of processing in the cases set out in that article.
• Data portability (Art. 20 GDPR): the data you provided, in a portable format, where processing is based on consent or a contract and is carried out by automated means.
• Objection (Art. 21 GDPR): you can object to processing based on legitimate interest, including profiling based on that provision. You can object at any time to processing for direct marketing.
• Automated decisions (Art. 22 GDPR): you have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or similarly significantly affects you, except where Art. 22 allows it. We do not make such decisions about you.
• Complaint (Art. 77 GDPR): you can lodge a complaint with a supervisory authority. The authority for North Rhine-Westphalia, where we are established, is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen.

6. Marketing

If we receive your email address in connection with the sale of a product or service, we use it for direct marketing of our own similar goods or services, unless you have objected. When we collect the address, and each time we use it for this purpose, we tell you that you can object at any time, at no cost other than the transmission costs under the basic tariffs. The legal basis is Art. 6 (1) (f) GDPR. You can object through the contact form or by email to hello@benjaminkrueger.com.

7. Contact form

You can contact us through the contact form. To send a message we need the fields marked as mandatory. We process that data under Art. 6 (1) (f) GDPR so we can answer, and under Art. 6 (1) (b) GDPR where the message is about using the service. Any further information you add is voluntary and is not required to contact us. We process voluntary information on the basis of your consent (Art. 6 (1) (a) GDPR). We delete the message once the matter is closed, unless we have to keep it for a legal claim or a statutory retention period.

Fonts and icons

Pages load typefaces from Google Fonts and icon files from jsDelivr and cdnjs. Your browser therefore sends your IP address to those providers when it fetches the files. We use them so the site displays consistently. The legal basis is our legitimate interest in a readable layout (Art. 6 (1) (f) GDPR). Google, jsDelivr, and Cloudflare (which operates cdnjs) process that request under their own policies.

8. Hosting

MissPredict is hosted so the site can be served. Connection data described above is processed by the host for that purpose. The following providers are used. Data processing agreements are in place with them.

Amazon processes connection data as a processor so this website can be delivered.

9. How long we keep data

We keep personal data only while the purpose still applies, or while a law requires us to keep it. Server logs are deleted or anonymised on a rolling basis. Account and contact data follow the rules in the sections above. Public prediction records stay online while the comparison remains relevant, unless an objection or a deletion request succeeds.

10. Changes to this privacy policy

We may update this privacy policy. We will tell you about significant changes. The date at the top of this page shows when it was last updated.

11. Contact for data protection inquiries

Imprint