Legal

Privacy Policy

Last updated 26 July 2026

This policy explains what personal data Beat the Gaffer (“we”, “us”) collects when you play, why we collect it, and the choices you have. We are the data controller for the purposes of UK data protection law (UK GDPR and the Data Protection Act 2018).

Who we are

Beat the Gaffer is a free Premier League prediction game at beatthegaffer.com. For any privacy question, or to exercise your rights, contact us at hello@mikelitman.me. The data controller is Michael Litman.

What we collect

  • Account details: the email address you sign in with (or, if you sign in with Apple, Google or X, the identifier they return), and the display name, avatar colour and favourite team you choose.
  • Your gameplay: the predictions you make, your scores, badges, streaks and league memberships.
  • Technical & usage data: basic analytics about how the app is used (pages viewed, actions taken, approximate device/browser), collected through our analytics provider to help us improve the game.
  • Payment details: if you buy a paid tier, our payment processor handles your card details (we never see or store the full card number) and we keep a record of your subscription status.
  • Sign-in records: a log of the sign-in emails we send you, kept to secure your account and diagnose delivery problems.
  • Notifications: if you turn on push alerts, the device token needed to send them.
  • Waitlist: if you joined the pre-launch waitlist, the email address you gave.

You can play as an anonymous guest first; a guest profile holds only a device-linked identifier and whatever name you set, until you choose to link a permanent sign-in.

Why we use it, and our legal basis

  • To run your account and the game (leaderboards, scoring, leagues), this is necessary to perform our contract with you.
  • To keep the game safe and fair, including moderating display names shown publicly, our legitimate interests.
  • To understand and improve how the app is used, our legitimate interests, or your consent where required for non-essential analytics cookies.

Who we share it with

We do not sell your data. We share it only with the service providers that run the game for us, as our processors:

  • Supabase: hosting, database and authentication.
  • Stripe: payment processing, if you buy a paid tier.
  • Resend: sending your sign-in and notification emails.
  • PostHog: product analytics.
  • Netlify: application hosting and delivery.

Some providers may process data outside the UK; where they do, appropriate safeguards (such as UK/EU standard contractual clauses) apply.

Public information

Your display name, avatar colour, favourite team and scores appear publicly on leaderboards, rival cards, results and shareable images. Please don’t use a display name that reveals anything you want to keep private, you can change it any time in your profile.

How long we keep it

We keep your account data for as long as your account exists. When you delete your account (Profile → Delete account), your profile and the data tied to it are permanently removed. Some anonymised or aggregated analytics may remain, as it can no longer identify you.

Your rights

Under UK data protection law you have the right to access, correct, delete, restrict or object to our use of your data, and to data portability. You can:

  • edit your name, colour and favourite team in your profile;
  • delete your account and data yourself at Profile → Delete account;
  • contact us at hello@mikelitman.me for anything else.

You also have the right to complain to the Information Commissioner’s Office (ico.org.uk).

Cookies

We use cookies that are strictly necessary to sign you in and keep you signed in; these are always on. We also use analytics cookies to understand how the game is used, but only if you accept them. When you first visit we ask, and we set no analytics cookies (and run no analytics) until you agree. You can change your choice any time with “Cookie settings” in the footer, or through your browser.

Children

Beat the Gaffer is not directed at children under 13, and we do not knowingly collect their data.

Changes

We may update this policy; we’ll change the “last updated” date above when we do.

Terms of Use