← Back to home

Privacy Policy

Last updated: June 2026

Plain English summary: We collect your email address if you sign up for launch notifications, and we will collect account and prediction data when the game goes live. We do not sell your data. You can ask us to delete it at any time.

1. Who we are

The Super 7 (“we”, “us”, “our”) operates the website at thesuper7.com. We are the data controller for personal data collected through this website.

Our registered legal entity name will be confirmed before launch. Until then, you can contact us about data privacy matters at: [CONTACT EMAIL — to be confirmed before launch]

We are registered with the Information Commissioner’s Office (ICO). Registration number: [ICO REGISTRATION NUMBER — to be confirmed].

2. Data we collect

2a. Data you give us directly

  • Email address — if you submit the “Notify me” form, we store your email to contact you at launch. We will not use it for any other purpose without your consent.
  • Account details — when the game launches, creating a free account requires your display name, email address and a password. Passwords are stored as a secure hash and never in plain text.
  • Prediction data — your weekly score predictions and first goalscorer picks, once accounts are live.

2b. Data collected automatically

  • Browser storage — we use your browser’s localStorage to save your prediction slip, notification preference and cookie consent choice on this preview site. This data stays on your device and is not transmitted to our servers.
  • Server logs — our hosting provider (Vercel) may log your IP address, browser type and the pages you visit for security and performance purposes. We do not use this data to identify you personally.
  • Analytics — we do not currently use any third-party analytics tools. If we add analytics in future, we will update this policy and request your consent before doing so.

3. Cookies

A cookie is a small text file stored in your browser. We use the following:

  • Essential — your cookie consent preference, stored in localStorage. No session cookies are set on this preview site. When the game launches, a session cookie will be used to keep you logged in securely.
  • Analytics — none currently in use. If added, we will request your consent first via the cookie banner.

You can manage your cookie preference at any time by clicking “Cookie settings” in the footer, or by clearing your browser’s localStorage in your browser settings.

4. How we use your data

  • To send you a launch notification email if you opted in. Legal basis: consent. You can withdraw consent at any time by contacting us.
  • To provide and operate the Super 7 game — storing your predictions, calculating your score and displaying your standing on the leaderboard. Legal basis: contract (necessary to deliver the service you registered for).
  • To detect and prevent fraud or misuse of the platform. Legal basis: legitimate interests.
  • To comply with legal obligations where required. Legal basis: legal obligation.

5. Who we share your data with

We do not sell or rent your personal data to any third party. We may share it with the following service providers who process it on our behalf:

  • Vercel (vercel.com) — our hosting and serverless infrastructure provider.
  • Supabase (supabase.com) — our database and authentication provider, used when the game launches.
  • TheSportsDB (thesportsdb.com) — we query this third-party API to retrieve football fixture data. No personal data is sent to TheSportsDB.
  • Legal and regulatory bodies — where we are required to disclose data by law or court order.

Where service providers are based outside the UK, data transfers are covered by UK adequacy decisions or Standard Contractual Clauses as appropriate.

6. How long we keep your data

  • Launch notification emails — deleted within 30 days of the launch notification email being sent, or sooner if you ask us to remove you.
  • Account data — retained for as long as your account is active. On account deletion, personal data is removed within 30 days, except where retention is required by law.
  • Prediction history — retained to power all-time leaderboards. Anonymised or deleted within 30 days of account closure.
  • Server logs — retained by Vercel in accordance with their data retention policy (typically up to 30 days).

7. Your rights under UK GDPR

You have the right to:

  • Access — request a copy of the personal data we hold about you.
  • Rectification — ask us to correct inaccurate or incomplete data.
  • Erasure — ask us to delete your personal data (“right to be forgotten”).
  • Restriction — ask us to pause processing your data in certain circumstances.
  • Portability — receive your data in a structured, machine-readable format.
  • Object — object to processing based on legitimate interests.
  • Withdraw consent — where processing is based on your consent, you can withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at: [CONTACT EMAIL — to be confirmed]. We will respond within one calendar month.

If you are not satisfied with our response, you have the right to complain to the Information Commissioner’s Office (ICO):

  • Website: ico.org.uk
  • Phone: 0303 123 1113
  • Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

8. Changes to this policy

We may update this privacy policy from time to time. The “last updated” date at the top of this page reflects the most recent version. We will notify registered users of material changes by email before they take effect.

9. Contact

For any data privacy questions, email us at: [CONTACT EMAIL — to be confirmed], or reach us via X (@_TheSuper7_).