Privacy Notice

Fantasy Signal is operated by Joshua Hedley, who is the data controller for the personal data described in this notice. This means we decide how and why your data is processed.

• Account data — name, email address and login credentials, used to create and secure your account (legal basis: contract performance).
• Fantasy data — the league IDs and usernames you connect, your favourite team, settings and saved research, used to provide the service (contract performance).
• Usage data — pages visited, features used, device identifiers and IP address, used for security, fraud prevention and product improvement (legitimate interests).
• Support messages — anything you send us, used to help you (contract performance, legitimate interests).

Payment details are collected and processed by Paddle (our Merchant of Record), not by us.

• Service providers and subprocessors who host and operate the service (cloud hosting, analytics, support tooling);
• Paddle, our Merchant of Record, for the sale of subscriptions, payment processing, tax compliance and invoicing;
• Professional advisers (legal, accounting) where needed;
• Authorities, where required by law.

We never sell your personal data.

Some of our service providers process data outside the UK/EEA. Where this happens, we rely on appropriate safeguards such as adequacy decisions or standard contractual clauses.

We keep your data only as long as needed to provide the service and meet legal obligations. When it is no longer needed, it is deleted or anonymised. You can delete your account at any time from Settings.

Under UK GDPR you have the right to access, rectify, erase, restrict or port your data, to object to processing, and to withdraw consent where processing is based on consent. You also have the right to complain to the Information Commissioner's Office (ICO). We respond to requests within one month. To exercise any right, contact us through the app.

We use appropriate technical and organisational measures, including encryption in transit and access controls, to protect your data.

We use essential cookies to keep you signed in and run the service. We do not use marketing cookies. You can control cookies through your browser settings, though disabling essential cookies will prevent sign-in.