Privacy notice

Ashley Duffy, trading as Past the Post, is the data controller for the information on this page. For anything here (a question, a correction, a copy of your data, an objection or a complaint) email pastthepostapp@gmail.com. We reply within a month, and tell you within 30 days that we've got a complaint.

• Your email address. To sign you in, and to send sign-in links and password resets. If you sign in with Google, Google tells us your email address; we never see your Google password.
• Your display name and silk. Shown next to your picks.
• What you play: your picks and predictions, what they scored, your place on each table, the clubs and games you're in, which join code let you in and when (the club's runners see it), and any join request (with the note you wrote). This is the app.
• Player Plus, if you have it: your banner colour, rivals you've said yes to, and head-to-head challenges and their calls. If you tap “tell me when”, we note that you want to hear when Plus goes on sale.
• Notifications, if you turn them on: the address your browser gives us for your device, the keys to send to it, which browser it is, and what each notification said.
• If you run a club: what you change as an admin (results, picks entered for someone, who joined), logged with your name so a correction can be traced.
• Security records: your sign-in sessions (including the IP address Supabase records with each), and short-lived counters that stop someone guessing passwords, stored as scrambled keys, not your email or IP.

If your name came from the original league spreadsheet. Before the app existed, the league ran on a spreadsheet. Players from those seasons were added from it with their name and results, so the league's history still adds up. If that's you and you want it changed or removed, email pastthepostapp@gmail.com.

No analytics, no tracking, no advertising and no profiling. We don't sell or share your data for marketing, because we don't do any marketing. The only cookies are the ones that keep you signed in (see below).

• People in your clubs see your display name, silk, picks once they've locked, results and your profile. Nobody sees another person's email address, club admins included.
• A club's admins also see join requests and their notes, who entered each pick, and the club's admin log. If you let a friend or an admin pick for you, they can make and see your picks in that club.
• Screen mode. If a club's admin turns on screen mode, the club's tables (names and points) can be shown on a TV through a private link. Anyone holding the link can see that table; the admin can change the link at any time.
• Rivals and head-to-heads. A rival you've said yes to sees your name, your first club and your monthly points. In a head-to-head, your opponent sees each of your calls once its match kicks off.
• The site admin (Ash) can see everything, including email addresses, to run the site and help when something goes wrong.

Shared picture cards carry no one's data. These companies run parts of the app for us:

When you choose a new password, we check it against known breached passwords by sending the first five characters of a scrambled version of it to Have I Been Pwned. Nothing that identifies you or your password leaves the app.

Some of these companies are in the US, or have a US parent that may be able to reach the data. Where that happens, the transfer relies on the safeguards in that company's data processing terms: the UK Addendum to the EU standard contractual clauses, or the UK Extension to the EU–US Data Privacy Framework for companies certified under it. Email pastthepostapp@gmail.com for a copy of the relevant safeguard.

When you delete your account, your name, email, sign-in, notifications, settings, Plus, rivals, head-to-heads and Fun Room history go straight away, and backups holding them are gone within 30 days. Your past results stay on the tables as Former player, no longer connected to you, because removing them would change other people's finishing positions in rounds settled long ago. If you'd rather those rows went too, email and we'll talk it through.

The sign-in cookies are needed for signing in, so they don't need your permission. The rest never leave your device.

Two you can do yourself, now, from your settings:

• Get a copy of your data. Settings has a Download button: everything we hold about you, as a file.
• Delete your account. Also in settings. See above for what goes.

For the rest, email pastthepostapp@gmail.com. You can ask us to correct anything wrong (you can change your display name yourself), to restrict how we use your data while a question is sorted out, or object to anything we do on the basis of legitimate interests. You can withdraw consent to notifications at any time.

Complaints. Tell us first at pastthepostapp@gmail.com and we'll put it right if we can. You can also complain to the Information Commissioner's Office at ico.org.uk.

If this changes in a way that matters, we'll say so in the app rather than quietly editing the page. The date at the top is always the current version.