Privacy Policy

1. Information we collect

Account and profile information

When you register or sign in, we process your email address, account identifier, authentication status, display name and team name. If social sign-in is enabled, we may also receive basic account information from the provider you choose. Password authentication is handled by Supabase; Fantasy Battle does not store a readable copy of your password.

Gameplay information

We process information needed to run the game, including team and player selections, Power Up choices, scores, results, league membership, standings, forfeits and season or Gameweek progress. Display names, team names and some competitive results may be visible to other players in the same league.

Device, session and support information

Our service providers may process technical information such as IP address, browser and device details, timestamps, request logs and security events so the site can be delivered, protected and troubleshot. If you contact us, we will also process the information you include in your message.

2. How we use information

We use personal data to:

• create and secure accounts, authenticate users and recover access;
• save teams, run battles and leagues, calculate scores and show results;
• prevent abuse, investigate faults and keep the service reliable;
• respond to support or privacy requests;
• understand and improve the service when analytics is enabled; and
• show and measure advertising when advertising is enabled.

3. Our legal bases

We rely on performance of our agreement with you where processing is needed to provide your account and the game. We rely on legitimate interests to secure, maintain and improve the service, provided those interests do not override your rights. We use consent for non-essential cookies, analytics or personalised advertising where consent is required. We may also process information to meet a legal obligation.

4. Supabase and other service providers

Fantasy Battle uses Supabase for account authentication and database storage. Supabase processes account, profile and gameplay information on our behalf. We may also use hosting, infrastructure, security, analytics and advertising providers where needed to operate the site. These providers may only use personal data as permitted by their agreements with us and applicable law.

Some providers may process information outside the United Kingdom. Where required, we will use recognised safeguards for international transfers, such as adequacy regulations or approved contractual terms.

5. Cookies, local storage and sessions

We use essential, secure cookies to keep you signed in and to return you to the part of the game you requested. These cookies are necessary for account and security features. We also use your browser's local storage to retain game state, account ownership information and limited development or reset state on that device.

You can clear cookies and local storage using your browser settings, but doing so may sign you out or remove locally saved progress. Non-essential technologies will be described in the consent controls made available when they are enabled.

6. Analytics

Analytics is not currently enabled. If we enable analytics, it may collect information about visits, sign-ups, navigation, device type and interactions with game features. Where required, analytics will run only after you have made a choice through our consent controls, and this policy will be updated with the provider and retention details.

7. Advertising and Google

The iOS app may offer one optional rewarded advert in the Power Up flow. You choose whether to watch it, and completing it can reveal one extra Power Up option. We do not use banner, app-open or automatic interstitial adverts in the iOS app. The website may separately use Google AdSense on substantial public content pages.

Google and its advertising partners may process IP address, general location, device identifiers, advertising data, diagnostics, performance information and advert interactions to deliver and measure adverts, limit repetition, prevent fraud and produce reports. The iOS app initially requests non-personalised adverts and does not ask for Apple tracking permission.

Users in the UK and European Economic Area are shown Google's consent controls where required and can reopen required advert privacy choices from their account page. Declining or closing an optional advert does not remove or change the original three Power Ups. Learn more about how Google uses information from sites and apps that use its services.

8. Sharing information

We share information with service providers only where needed to run, secure, measure or fund Fantasy Battle. We may also disclose information where required by law, to protect users or the service, or as part of a reorganisation or transfer of the service with appropriate safeguards. We do not sell your personal data.

9. How long we keep information

We keep account and profile information while your account is active and for as long as reasonably needed to provide the service, resolve disputes, prevent abuse and meet legal obligations. Gameplay and league records may be retained across seasons to preserve results and rankings. Local storage remains on your device until the game or your browser removes it. We will delete or anonymise information when it is no longer needed, using these purposes and legal requirements to set retention.

10. Your UK data protection rights

Depending on the circumstances, you may have the right to:

• ask for a copy of your personal data;
• correct inaccurate or incomplete data;
• ask us to delete or restrict the use of your data;
• object to processing based on legitimate interests or direct marketing;
• receive certain data in a portable format; and
• withdraw consent at any time where processing relies on consent.

These rights are not absolute and exemptions may apply. You also have the right to complain to the Information Commissioner's Office. We would appreciate the opportunity to address your concern first.

Signed-in players can request permanent account deletion directly from Account settings. Access is removed and personal account data is deleted immediately. Gameplay or league history retained to preserve other players' results is anonymised so it is no longer linked to you.

11. Security and changes to this policy

We use technical and organisational measures designed to protect personal data, but no online service can guarantee absolute security. We may update this policy as Fantasy Battle changes. Material updates will be highlighted on the site or through another appropriate notice, and the date at the top of this page will be revised.