Effective date: 20 August 2026

This Data Privacy Policy explains how WG Sports, Inc. ("Victra Sports," "we," "us," "our") collects, uses, discloses, and protects information about you when you visit or use www.victrasports.com (the "Site"), the Victra mobile application for iOS and Android (the "App"), and related features and services such as user accounts, newsletters, and push notifications (collectively, the "Services").

1. Information we collect

A. Information you provide

Account information: such as name, username, email address, password, and other profile details you choose to provide.

Newsletter and communications: such as your email address and any other information you submit when you subscribe or contact us.

Support requests: information you provide when you contact us (e.g., message content, email address).

Purchases and payments: subscriptions purchased through the App are processed by Apple or Google and managed through our subscription provider. Payments made through the Site may be processed by Stripe. We do not store full payment card numbers. These providers may collect and process payment and billing details in accordance with their own policies.

B. Information collected automatically When you use the Services, we may automatically collect:

Device and usage data: IP address, device identifiers, advertising identifiers, browser type, operating system, app version, pages and screens viewed, links clicked, features used, referring/exit pages, approximate location (derived from IP), and timestamps.

Cookies and similar technologies: information collected through cookies, pixels, SDKs, and similar tools.

C. Push notifications (if enabled) If you opt in to notifications, we may use OneSignal to deliver push notifications. You can disable notifications in your device settings.

2. How we use information

We use information to:

Provide, operate, maintain, and improve the Services (including account features).

Communicate with you (e.g., newsletters, updates, account notices, security alerts).

Respond to requests and provide customer support.

Monitor and analyze usage and performance (e.g., analytics).

Personalize content and measure advertising performance.

Detect, prevent, and address fraud, abuse, security incidents, and technical issues.

Comply with legal obligations and enforce our terms.

3. Cookies, analytics, and advertising

We use cookies and similar technologies for essential functions, analytics, and advertising measurement.

Essential cookies help the Site and App function (e.g., security, login/session).

Analytics (e.g., Mixpanel, Firebase) helps us understand how users interact with the Services (e.g., screens viewed, feature usage).

Advertising measurement / targeting (e.g., Meta Pixel, AppsFlyer) helps us measure ad effectiveness, attribute installs and conversions, and (where enabled) build audiences and deliver more relevant ads.

Consent (EU/UK and other regions where required): Where legally required, we will not set non-essential cookies (like analytics/advertising) until you opt in through our cookie banner/preferences tool. You can change your choices at any time (see "Managing cookies" below).

Managing cookies:

Use our cookie banner/preferences tool (where available) to accept/reject categories.

You can also control cookies through your browser settings, and advertising identifiers through your device settings. If you disable cookies, some features may not work properly.

Do Not Track: Some browsers offer "Do Not Track." There is no common standard; we do not currently respond to such signals.

4. How we share information

We may share information:

With service providers/processors that help us run the Services, such as:

Hosting and infrastructure (e.g., MongoDB Atlas, Cloudflare, Google Cloud/Firebase)

Email delivery (e.g., SendGrid)

Payment and subscription processing (e.g., Apple App Store, Google Play, RevenueCat, Stripe)

Analytics (e.g., Mixpanel, Firebase)

Attribution and measurement (e.g., AppsFlyer)

Push notifications (e.g., OneSignal)

Advertising measurement and partners (e.g., Meta)

Content processing and messaging tools (e.g., OpenAI, ManyChat)

For legal and safety reasons: to comply with law, respond to lawful requests, protect rights/safety, investigate fraud/security issues.

Business transfers: If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, dissolution, or sale or transfer of all or a portion of our assets or business, your information — including account information, user content, and usage data — may be transferred as part of that transaction. The successor or acquiring entity will be bound by the commitments made in this Privacy Policy with respect to information transferred, unless and until you are notified of a new or amended policy. We will provide notice where required by applicable law.

With your direction: when you ask us to share information or connect third-party services.

5. "Sale" / "Sharing" of personal information (California and certain U.S. states)

Some privacy laws define "sale" or "sharing" broadly to include disclosing certain identifiers and online activity information for cross-context behavioral advertising (for example, through advertising pixels or attribution SDKs).

Depending on how our advertising is configured, we may "share" information such as:

Identifiers (e.g., cookie IDs, device IDs, advertising IDs, IP address)

Internet/network activity (e.g., pages and screens viewed, interactions)

Inferences (e.g., interest categories)

We do not knowingly sell personal information for money. However, certain advertising-related disclosures may be considered "sharing" under applicable laws. A transfer of personal information in connection with a merger, acquisition, or sale of assets, as described in Section 4, is a business transfer and not a "sale" where the recipient is bound by the commitments in this Policy.

6. Your choices and privacy rights

A. Do Not Sell or Share My Personal Information (Opt-out of targeted advertising) You can opt out of "sale"/"sharing" and targeted advertising (where applicable) by:

Using our cookie banner/preferences tool to reject Advertising/Targeting cookies (and Analytics if you prefer), and/or

Adjusting your device's advertising settings (e.g., limiting ad tracking), and/or

Emailing us at team@victrasports.com with the subject line "Do Not Sell/Share Request."

If we use additional opt-out mechanisms (like a dedicated form or footer link), those will also be honored.

B. Other U.S. privacy rights Depending on where you live, you may have rights to:

Access your personal information

Correct inaccurate information

Delete personal information

Portability (receive a copy, where applicable)

Non-discrimination for exercising your rights

To submit a request, email team@victrasports.com with the subject line "Privacy Request." We may verify your request (e.g., by confirming you control the email associated with your account).

Authorized agents (California): You may designate an authorized agent to submit requests on your behalf, subject to verification.

C. EEA/UK rights (GDPR/UK GDPR) If you are located in the EEA/UK, you may have rights to access, rectification, deletion, restriction, objection, portability, and to withdraw consent where processing is based on consent. You also have the right to lodge a complaint with your supervisory authority.

To exercise these rights, contact team@victrasports.com.

7. Data retention

We retain personal information only as long as reasonably necessary for the purposes described in this Policy, including to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods vary depending on the type of data and why it is processed.

8. Security

We use reasonable administrative, technical, and physical safeguards designed to protect information. No system is completely secure, so we cannot guarantee absolute security.

9. International transfers

We are based in the United States. If you access the Services from outside the U.S., your information may be processed and stored in the U.S. and other countries where our service providers operate.

If you are located in the EEA/UK/Switzerland, we use appropriate transfer mechanisms (such as Standard Contractual Clauses) where required.

10. Children's privacy

The Services are not directed to children under 13 (and not directed to children under 16 in certain regions), and we do not knowingly collect personal information from children. If you believe a child has provided personal information, contact us and we will take steps to delete it.

11. Third-party links

The Services may include links to third-party sites or services. Their privacy practices are governed by their own policies, not ours.

12. Changes to this Privacy Policy

We may update this Policy from time to time. We will post the updated Policy and update the "Effective date." If changes are material, we may provide additional notice.

13. Contact us

WG Sports, Inc. 535 Mission Street, San Francisco, California, 94105, USA Email: team@victrasports.com