Privacy policy

Last updated: 8 September 2026.

Who we are

Predictions League (predictions-league.co.uk) is a hobby project run by one person in the UK, Richard Kiy, not a company - there is more on the about page. For UK GDPR purposes he is the controller of the personal data described on this page. Questions or requests: richard.kiy@hotmail.co.uk.

What we collect

• Account info - email, username, an optional first / last name and an optional display name. Email is used only to sign you in and to send password-reset + optional deadline-reminder emails.
• Predictions, picks, sweepstake entries - the actual game-play data you create.
• Push subscriptions - only stored if you enable notifications on a device.
• Server logs - standard request logs (IP, user agent, path) kept for 30 days for debugging + abuse prevention. Not linked to your account beyond the session you're signed into.
• Crash reports - if a page errors, the stack trace, page address and browser type are sent to Sentry so we can fix it. No IP address is stored and nothing is used for profiling.

What we don't collect

• No marketing trackers or pixels inside the app. Signed-in pages are ad-free. Site traffic is measured with Cloudflare Web Analytics, which is cookieless and doesn't profile you.
• No payment or financial info - the app is free.
• No real-name verification or KYC.

Advertising

Our public pages (the homepage, the Football 501 game, the written guides, the gameweek reviews and the competition landing pages you can reach without signing in) show a small number of ads from Google AdSense to cover hosting costs. Signed-in members never see ads.

• If you're in the UK or EEA, Google shows a consent message before any advertising cookies are used. Choose "manage options" or decline and you'll get non-personalised ads (or none) instead.
• Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites. Google's use of advertising cookies enables it and its partners to serve ads based on your visits to this and other sites. How Google uses this data is described at policies.google.com/technologies/partner-sites.
• You can opt out of personalised advertising from Google at adssettings.google.com, and from other vendors at aboutads.info/choices or youronlinechoices.com. Change your consent choice for this site any time via the "Ad consent" link in the page footer.
• We don't hand Google your account data - the ads run only on pages where you aren't signed in.

Who sees what

• Your display name (or username if you haven't set one) is visible to the other members of any league, pool or sweepstake you join.
• Your predictions only become visible to other league members after the relevant fixture's kickoff - never before.
• Your LMS picks are visible to other pool members from the moment that round's first match kicks off.
• Site admins can see all data for debugging + moderation; they don't share it.

Where it lives

Application + database hosted on Fly.io (London region) and Neon (EU region), with Cloudflare in front of the site as its network and security layer. Transactional email goes via Brevo. Push notifications go via the FCM / Apple Push Notification Service for the platform you enabled them on. Crash reports go to Sentry (EU region). The heading font is served by Google Fonts, which receives your IP address in order to deliver the font file.

Your rights (UK GDPR)

We process account and game data to provide the service you signed up for, logs and crash reports in our legitimate interest of keeping the site working and secure, and advertising cookies only with your consent. Account data is kept until you delete your account.

• See your data - open Profile (signed in). Standings, predictions, leagues, pools and sweepstakes you're in are all listed there.
• Edit your data - Profile → Account details.
• Delete your data - email richard.kiy@hotmail.co.uk and we'll remove your account + everything tied to it within 30 days. (A self-serve button is on the roadmap.)
• Complain - you can also raise a concern with the Information Commissioner's Office at ico.org.uk.

Cookies

Two first-party HTTP-only cookies: pl_session holds your sign-in session (30-day lifetime), and a short-lived state cookie is used only while you sign in with Google. The app itself sets no tracking cookies. On the public ad-supported pages, Google may set advertising cookies as described in the Advertising section above - in the UK/EEA only after you've made a choice in the consent message.

Children

The site isn't aimed at children under 13 and we don't knowingly collect their data. Official prize competitions are open to UK residents aged 18 or over only. If you think a child has created an account, email us and we'll delete it.

Contact

Questions or requests: richard.kiy@hotmail.co.uk.