Privacy Policy
This Privacy Policy explains how LiveSlates ("we", "us", "LiveSlates", operating liveslates.com) collects, uses and protects your personal data, and your rights under the UK GDPR and the Data Protection Act 2018. We are the data controller.
1. Who we are & how to contact us
Data controller: LiveSlates. For any privacy question or to exercise your rights, contact us at support@liveslates.com.
2. What we collect
- Account data — your email address (used for magic-link / Google sign-in).
- Content you create — your fantasy lineups, projections, dashboard layouts and settings.
- Data you upload/import — lineup and player-pool information from DFS platforms (DraftKings, FanDuel, FanTeam) that you choose to bring in.
- Technical data — IP address, browser type, and a session cookie, needed to keep you securely logged in. We infer an approximate region (UK/US) from your browser's language setting to show relevant platforms.
- Waitlist — if you join our pre-launch list, your email address.
- Communications — any messages or feedback you send us.
We do not collect payment card details directly; if/when paid plans launch, payments are handled by a PCI-compliant payment processor.
3. Why we use it & our lawful basis
- To provide the service (run your account, store and score your lineups) — lawful basis: performance of a contract.
- To keep the service secure and working (sessions, fraud/abuse prevention, debugging) — lawful basis: legitimate interests.
- To contact you about the service and, for the waitlist, to tell you when we launch — lawful basis: consent (which you can withdraw any time).
4. Cookies
We use only essential cookies required to log you in and keep
your session secure (e.g. sb-access-token, ls-session-token).
These are exempt from consent requirements because the service can't function
without them. We do not use advertising or third-party tracking cookies.
5. Who we share it with
We never sell your data. We share it only with the providers that run the service for us (our "processors"), under data-processing agreements:
- Supabase — database & authentication.
- Render — application hosting.
- IONOS — transactional email.
We may also disclose data if required by law. Sports-data API providers we use to power live scores receive no personal data about you.
6. International transfers
Some providers may process data outside the UK/EEA. Where they do, we rely on appropriate safeguards (such as UK/EU Standard Contractual Clauses or an adequacy decision) to protect your data.
7. How long we keep it
We keep your account and content for as long as your account is active. If you delete your account, we delete or anonymise your personal data within a reasonable period, except where we must retain certain records to comply with the law. Waitlist emails are kept until launch or until you ask us to remove them.
8. Your rights
Under UK GDPR you have the right to: access your data; correct it; delete it ("right to erasure"); restrict or object to processing; data portability; and withdraw consent. To exercise any of these, email support@liveslates.com. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.
9. How we protect your data
Data is encrypted in transit (HTTPS) and protected at the database layer with row-level security so users can only access their own records. We follow sensible security practices, though no system can be guaranteed 100% secure.
10. Age
LiveSlates is intended for users aged 18 and over (in line with daily fantasy sports eligibility). We do not knowingly collect data from anyone under 18.
11. Changes to this policy
We may update this policy from time to time. We'll change the "last updated" date above and, for material changes, notify you.