Privacy policy
What The Gaffer stores about you, why, and how to see or delete it.
Last updated 19 October 2026
The short version
- We keep only what the game needs: your email, your manager name and the teams you pick.
- No adverts, no tracking, no analytics, and we never sell or share your details.
- You can download everything we hold, or delete your account, at any time from My Account.
Who we are
The Gaffer is an independent fantasy football game run from the UK. It isn't connected with the Premier League, any club or any other fantasy game.
For anything about your data, email [contact address to be added].
What we store and why
| What | Why |
|---|---|
| Your email address | To sign you in and to tell your account apart from everyone else's. |
| Your username (if you choose one) | So you can sign in with it instead of your email. We keep it with your email so a username sign-in reaches the right account. We never see or store your password: Google Firebase handles passwords. |
| Admin password resets | If an administrator resets your password: when, and which administrator did it. Kept so resets can be checked. |
| Your manager name | Shown next to your team in the draw, so your rival knows who they're playing. |
| Your sign-in ID | A random code from our sign-in provider that links you to your account. |
| Your teams | The XI, formation, captain, team name and kit colour you lock each gameweek, and when you locked it, so the game can be played and the deadline enforced. |
| Your draws | Who you were drawn against each gameweek, so results can be worked out and shown. |
| Dates and activity | When you joined, when you last had the game open, and which days you played (one entry per day, nothing about what you clicked). Used to keep the game running smoothly and to count how many people are playing. |
We hold this because it's needed to provide the game you've signed up to play (the legal basis is "contract" under UK GDPR). We don't collect your address, phone number, date of birth or payment details.
Who else handles it
- Google Firebase runs sign-in (Google accounts, and email-and-password accounts). It holds your email address, your sign-in ID and — if you set one — your password (stored securely by Google, never by us), and it sends password-reset emails.
- Cloudflare hosts the site and the database where your name and teams are kept. Like any web host, it briefly processes your IP address to deliver the site and protect it from abuse.
- Google Fonts supplies the lettering on the site, which means your browser asks Google for it.
These companies act on our behalf and may process data outside the UK under the standard legal safeguards. Nobody else gets your data.
What other players see
Other managers see your manager name, your team name and your XI once the draw has been made. They never see your email address.
Cookies and storage
We don't use advertising or tracking cookies. Your browser stores a sign-in token so you stay signed in, and, while you're signing in by email, the email address you typed. Both are needed for the site to work, so there's nothing to opt in to.
How long we keep it
For as long as you have an account. When you delete your account, your profile and every team you've picked are deleted straight away and your sign-in is removed. Past draws are kept so other players' records still add up, but your name and team name in them are replaced with "Former manager".
Your rights
- See your data: My Account → Download my data.
- Correct it: change your manager name in My Account, and your team on the My Team page before the deadline.
- Delete it: My Account → Delete account.
- Object or complain: email us first. You can also complain to the Information Commissioner's Office at ico.org.uk.
Age
You need to be 13 or over to create an account.
Changes
If this policy changes in a way that matters, we'll say so in the game before the change takes effect.