Privacy Policy

DRAFT TEMPLATE — not legal advice. This document is a starting point only and must be reviewed and approved by a qualified solicitor before launch.

1. Who we are

footyqs is a free football quiz website operated from the United Kingdom. For the purposes of UK data protection law — the UK GDPR and the Data Protection Act 2018 — we are the “controller” of personal data processed through the Service. You can contact us at neilblyth@waivesanalytics.co.uk.

2. What data we collect and why

We aim to collect as little personal data as possible. Depending on how you use the Service we may process:

• Technical and server log data— including your IP address, browser type, device information and pages requested. This is processed automatically when you visit, to deliver the site securely, prevent abuse and keep the Service running.
• Analytics data— anonymous or pseudonymous usage data (such as which games are played and general traffic patterns), collected via Google Analytics 4 only where you consent to analytics cookies.
• Account email(planned) — if and when we introduce optional accounts/login, we will process your email address to create and secure your account.
• Payment information(planned) — if we introduce a paid “premium” tier, card payments will be handled by our payment processor (Stripe). footyqs does not see or store your full card details; we only receive confirmation of payment status.

3. Legal bases for processing

Under the UK GDPR we rely on the following legal bases:

• Consent— for analytics and any non-essential cookies. You can withdraw consent at any time.
• Legitimate interests— for essential server logs and security, to operate and protect the Service. We balance this against your rights and freedoms.
• Contract— where you create an account or buy a premium subscription, to provide the service you have requested.
• Legal obligation— where we must retain certain records (for example, transaction records for tax purposes).

4. Cookies and analytics

Essential cookies needed to run the site may be set without consent. Analytics cookies (Google Analytics 4) are consent-gated— they are only set after you agree, and you can change your choice at any time. For full details of the cookies we use and how to manage them, see our Cookie Policy.

5. Processors and international transfers

We use the following third-party service providers (processors) to run the Service:

• Supabase— database and (planned) authentication services.
• Vercel— website hosting and content delivery (CDN).
• Google Analytics 4— consent-based website analytics.
• Stripe(planned) — payment processing for any premium tier.

Some of these providers may process data outside the United Kingdom, including in the European Union and the United States. Where data is transferred outside the UK, we rely on appropriate safeguards (such as UK International Data Transfer Agreements, the UK Addendum to the EU Standard Contractual Clauses, or transfers to countries the UK recognises as providing adequate protection).

The factual quiz data used in our games comes from open data sources, primarily Wikidata, and does not relate to you personally.

6. How long we keep data

We keep personal data only for as long as necessary for the purposes described above. Server logs are kept for a limited period for security and troubleshooting. Analytics data is retained according to our Google Analytics retention settings. Account and transaction data, where applicable, is kept for the life of the account and for any period we are legally required to retain it afterwards.

7. Your rights

Under UK GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected (rectification);
• have your data erased in certain circumstances;
• restrict or object to certain processing;
• object to processing based on legitimate interests, and to direct marketing;
• data portability, where applicable; and
• withdraw consent at any time where we rely on consent.

To exercise any of these rights, contact us at neilblyth@waivesanalytics.co.uk. You also have the right to complain to the UK’s supervisory authority, the Information Commissioner’s Office (ICO), at ico.org.uk.

8. Children

The Service is intended for a general audience and is not directed at young children. We do not knowingly collect more personal data than necessary from any user.

9. Changes to this policy

We may update this Privacy Policy from time to time. The current version will always be posted here with the “Last updated” date shown above.

10. Contact

For any privacy questions or requests, email neilblyth@waivesanalytics.co.uk.

See also our Terms & Conditions and Cookie Policy.