Goal TimeDraft: these terms are being finalised before launch.
Privacy notice
Last updated: [DATE]
The short version
- We only collect what we need to run the game.
- We never sell your data.
- We don't show your email to anyone.
- Other players only see your display name.
- You can delete your account any time.
- Questions? Ask a parent or carer, or email [EMAIL].
1. Who we are
[COMPANY / TRADING NAME], [ADDRESS], [EMAIL]. ICO registration number: [ICO registration number].
2. What we collect and why
| Data | Why | Lawful basis |
|---|---|---|
| Picks, results, guest device token | To run the game | Legitimate interests / contract |
| Email, first name, display name, password (hashed, if you set one) | Your account, logging in, results emails | Contract |
| Date of birth | Age checks (13+ to register, 18+ for prizes) | Legal obligation / legitimate interests |
| Prize claim details (address, phone, sponsor-chosen fields) | Delivering prizes | Contract |
| Email preferences for reminders | Only if you opt in | Consent |
| Push subscription | Notifications you asked for | Consent |
| Cookies, advertising and analytics data | See the Cookie Policy | Consent (non-essential) |
| IP address, device and abuse signals | Security and fair play | Legitimate interests |
3. Who we share with
- Service providers: Cloudflare (hosting), Mailgun (email, EU region), AllSportsAPI (football data; none of your personal data is shared with them), [ad network / consent platform].
- Sponsors: only the prize claim details needed for delivery, or more if you separately opt in.
4. How long we keep it
- Prize claim details are deleted 6 weeks after dispatch.
- Account data is kept until you delete your account. Your past picks then stay in results without your details.
- Login links expire after 15 minutes to a day, and are deleted with your account.
- Activity logs are kept for [2 seasons].
5. Your rights
- Access, correction, deletion, objection and data portability.
- Withdrawing consent at any time.
- Complaining to the ICO (ico.org.uk).
- How to use them: download or delete your data at Account → Privacy, or email [EMAIL].
6. Children
- You must be 13 or over to register.
- We use high-privacy settings for everyone by default.
- Players aged 13–17 never see marketing or sponsor data-sharing options, and can't win prizes.
7. Changes
We'll show the date of the latest version at the top of this page.