Your Information
Privacy Policy.
This Privacy Policy explains how Matchday Survivor collects, uses and protects personal information when you use our website, player account and free-to-play football community.
We aim to collect only the personal information we need to operate Matchday Survivor, keep accounts secure and run the free-to-play survivor competitions. We do not sell your personal information.
Who We Are
Matchday Survivor is the data controller responsible for personal information collected through this website.
Information We Collect
Depending on how you use Matchday Survivor, we may collect the following information.
Account information
- Player/display name.
- Email address.
- WordPress account username and account identifier.
- Password, which is stored in protected hashed form by WordPress rather than being visible to Matchday Survivor administrators.
- Email-verification status.
- Account status, for example verified, pending or blocked.
Competition information
- The competitions you enter.
- Your current survivor status.
- Your confirmed team selections.
- Teams you have previously used within a competition.
- Rounds survived or eliminated.
- Competition results and winner history.
Technical and security information
- Information required by WordPress to maintain your signed-in session.
- Basic request and server-log information provided by our hosting systems.
- Security information used to detect repeated registration or login attempts.
- Hashed or short-lived identifiers used for anti-spam and rate-limiting controls.
Communications
- Messages you send to us.
- Email-verification records.
- Records of essential account emails we attempt to send.
- Your marketing preferences if optional marketing is introduced and you choose to opt in.
How And Why We Use Your Information
| Information / Activity | Purpose | Lawful Basis | Retention Approach |
|---|---|---|---|
| Player account information | Create and maintain your Matchday Survivor account, authenticate you and provide the player dashboard. | Performance of our service agreement with you and our legitimate interests in operating the service securely. | For as long as your account remains active, subject to deletion requirements and any information we need to retain for legitimate legal, security or dispute purposes. |
| Competition entries and picks | Operate survivor competitions, enforce one pick per round, prevent team reuse and calculate survivor status. | Performance of the Matchday Survivor service. | Normally retained as part of your competition history while your account remains active. Completed competition records may be retained in an appropriately limited or anonymised form for historical results. |
| Email verification | Verify that an email address belongs to the person creating the account and reduce fake or automated registrations. | Legitimate interests in maintaining account and competition integrity and providing the requested account service. | Pending unverified accounts are normally deleted automatically after the configured verification period. Our current default is seven days. |
| Security / anti-spam information | Prevent abuse, automated registration, excessive login attempts and attacks against the service. | Legitimate interests in protecting Matchday Survivor, its users and systems. | Rate-limiting information is kept only for the relevant security window and expires when it is no longer required. Security logs may be retained longer where necessary to investigate abuse. |
| Essential emails | Send verification, account, security and important service information. | Providing the requested service and legitimate interests in administering accounts securely. | Mail diagnostic records are retained only as needed for delivery troubleshooting, security and account administration. |
| Optional marketing | Send Matchday Survivor news or promotional communications if we offer this feature and you actively choose to receive them. | Consent where required. | Until you withdraw consent or unsubscribe, subject to keeping a limited suppression record where necessary to respect your opt-out. |
Account And Competition Processing
Some Matchday Survivor game functions are carried out automatically.
For example, once a round is processed, the system compares your confirmed selection with the relevant football result and updates whether your competition entry has survived or been eliminated.
This automation is used to operate the game. It is not intended to make decisions that have legal or similarly significant effects outside Matchday Survivor.
Email Verification And Anti-Spam
New accounts may be required to verify their email address before they become a valid competition entry.
We also use security measures such as rate limiting, honeypot fields and other anti-abuse controls to help prevent fake accounts and automated registrations.
Where Cloudflare Turnstile is enabled, technical information may be processed by Cloudflare to assess whether a request appears to come from a genuine user rather than an automated system.
Cookies And Similar Technologies
Matchday Survivor and WordPress use cookies or similar technologies that are necessary to provide account and security functionality.
These may include cookies used to:
- Keep you signed into your account.
- Authenticate requests.
- Maintain security settings.
- Protect forms and account functions.
If we introduce analytics, advertising or other non-essential cookies, we will provide additional information and obtain any consent required before using them.
Who We Share Information With
We may use trusted service providers that process information on our behalf where necessary to operate Matchday Survivor. These may include:
- Website and database hosting providers.
- WordPress and website technology providers.
- Email and transactional-email providers.
- Security and anti-spam providers.
- Cloudflare, where Turnstile or other Cloudflare security services are enabled.
- Professional advisers where reasonably necessary.
- Authorities or other organisations where disclosure is required by law.
We do not permit service providers to use Matchday Survivor personal information for their own unrelated purposes merely because they process it on our behalf.
International Transfers
Some technology providers may process personal information outside the United Kingdom.
Where an international transfer is subject to UK data protection law, we take appropriate steps to ensure that a lawful transfer mechanism or appropriate safeguard applies, such as an applicable adequacy arrangement or approved contractual safeguards.
How Long We Keep Information
We do not aim to keep personal information indefinitely simply because it was collected.
Retention depends on why the information is needed. We take into account:
- Whether your account remains active.
- Whether information is required to maintain competition history.
- Security and fraud-prevention needs.
- Whether a dispute or complaint is ongoing.
- Legal, accounting or regulatory requirements.
- Our normal backup and deletion cycles.
Where possible, information that is no longer required will be deleted, anonymised or allowed to expire automatically.
Your Data Protection Rights
Depending on the circumstances and the lawful basis being used, UK data protection law may give you rights over your personal information.
Ask for information about the personal data we hold about you and request a copy where applicable.
Ask us to correct personal information that is inaccurate or incomplete.
Ask us to delete personal information in circumstances where the right to erasure applies.
Ask us to restrict certain processing in circumstances where the right applies.
Object to certain uses of personal information, including processing based on legitimate interests where applicable.
Ask for certain information you provided to us in a portable format where the relevant legal conditions are met.
Where processing is based on your consent, you can withdraw that consent at any time.
You can raise concerns with us and you also have the right to complain to the UK Information Commissioner’s Office.
Your Right To Object
Where we rely on legitimate interests to process your personal information, you may have the right to object. Contact us using the privacy contact details above and explain your concern.
Children And Young People
Football communities may be accessed by people of different ages. We aim to minimise the information we collect and use clear privacy information.
Where Matchday Survivor is likely to be accessed by children, we will take account of the additional privacy protections applicable to children’s online services and aim to apply high-privacy settings by default.
If we introduce age-related profile information or additional features for younger users, this Privacy Policy and our privacy controls will be reviewed accordingly.
Marketing Communications
Creating a Matchday Survivor account does not automatically mean that you have agreed to receive optional marketing.
If marketing emails are introduced, any marketing preference will be presented separately from essential account communications.
You will be able to unsubscribe from optional marketing without closing your Matchday Survivor account.
Security
We use appropriate organisational and technical measures designed to protect personal information against accidental loss, misuse, unauthorised access, alteration or disclosure.
These measures include account authentication, access controls, email verification, anti-abuse controls and server-side validation of competition selections.
No internet service can guarantee absolute security, so users should also use a strong password and keep their login information confidential.
Changes To This Policy
We may update this Privacy Policy when Matchday Survivor features, service providers or legal requirements change.
The latest version will be published on this page with an updated revision date.
Where a change materially affects how we use personal information, we will take reasonable steps to bring the change to users’ attention.
Complaints
If you have a privacy concern, please contact Matchday Survivor first so we have an opportunity to investigate it.
You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator.
More information is available from the ICO at: ico.org.uk/make-a-complaint/
Privacy Questions?
Contact us using the privacy email address shown at the top of this policy if you want to exercise a data protection right or ask how your information is being used.