Privacy policy
Last updated 5 October 2026
Who does what
For information about your club's account — the club name, your admin contact details, billing records — we are the data controller.
For information about your participants — names, usernames, picks — your club is the controller and we act as your processor, handling it on your instructions.
What we collect
- Club account: club name, chosen address, contact name and email, plan.
- Billing: subscription status and identifiers from Stripe. We never see or store card numbers — Stripe handles payment details entirely.
- Participants: whatever your club enters, typically a name and username, plus their picks and results.
- Security logs: login attempts, including IP address, kept to detect and block password-guessing attacks.
- Audit log: a record of actions taken in your competition, so results and picks can be verified.
What we don't collect
No payment details for entry fees, because we never handle entry fees. No advertising or cross-site tracking cookies. We do not sell or share your data with anyone for marketing.
Cookies
We use one strictly necessary cookie to keep you signed in. There are no advertising or analytics cookies on club sites.
Where your data lives
Each club's competition data is stored in its own separate database, so one club cannot see another's. Data is hosted in the United Kingdom or the European Union.
How long we keep it
- Active accounts: for as long as the club uses the service.
- Cancelled accounts: competition data is deleted 90 days after cancellation. Ask us and we can delete it sooner.
- Security logs: a short rolling window, typically 30 days.
- Billing records: retained as long as tax law requires.
Your rights
You have the right to access, correct, delete or export your personal data, to object to certain processing, and to complain to the Information Commissioner's Office.
If you are a participant in a club's competition, ask your club first — they control that data. We will help them action your request.
Sub-processors
- Stripe — subscription payments
- Amazon Web Services — hosting and email delivery
- football-data.org — fixtures and results (no personal data is sent)