Privacy and data protection

Who we are

The Home Games is run by Scott Eason as a private, invite only site. For data protection law that makes him the data controller: the person responsible for how the site uses your information. Where this page says we or us, it means the site and him. For anything to do with your data, email admin@thehomegames.co.uk.

What we collect

Account players. Your email address, the display name you choose and your password. The password is stored only as a hash, a one way scramble that lets the site check your password without ever keeping it.

Guest players. Guests exist so people without an email address, often younger family members, can play. We store the first name or nickname the group organiser chooses and a four digit PIN, kept only as a hash. No email address, no date of birth, nothing else.

Everyone. The predictions you save, a record of each save so scoring arguments can be settled, which groups you belong to, and when these things happened.

Security records. When someone tries to sign in, we keep a short lived note of the email address or network address used, so password guessing can be slowed down. These records are cleared after 24 hours.

Hosting logs. Our hosting provider keeps standard technical logs, including IP addresses, for security and to keep the service running.

What we never do

The site takes no payment details because it never collects, holds or transfers money. There is no advertising, no analytics script, no tracking pixel and no fingerprinting. We do not sell your information, we do not share it for marketing, and we do not send marketing emails.

Public leaderboard

Groups are private by default. If a group owner chooses to make their group public, the group's name and its total and average points appear on the public leaderboard, visible to anyone. No player names, guest names, PINs or other personal details are ever shown there: only the group name and its aggregate points. An owner can switch the group back to private at any time, and it comes straight off the leaderboard.

Cookies

The site sets a single cookie, thg_session, which keeps you signed in. It does nothing except identify your session: it is essential for the site to work and is not used to track you. It expires 120 days after you sign in, or immediately when you sign out. There is no cookie banner because there are no advertising or analytics cookies, so there is nothing to consent to.

Why we can use your information

UK data protection law requires a lawful basis for using personal information. Ours are performance of a contract, because we need your details to run the game you have asked to play, and legitimate interests, in keeping the site secure and preventing abuse.

Where your information lives

The site runs on Vercel, which provides the hosting, and Neon, which provides the database. Both store data on servers in the United States, so your information leaves the UK. Both providers operate under data processing agreements that include the safeguards UK law requires for transfers abroad, based on the standard contractual clauses.

How long we keep things

Your account lasts until you ask for it to be removed. Signed in sessions expire after 120 days. Sign in attempt records are cleared after 24 hours. Your picks and their save history belong to the group they were made in: if the organiser removes a player, or deletes the group, that player's picks and history are permanently deleted with them. One exception: once a competition has finished, its final table (display names and points only) is kept as the group's history, so past seasons still make sense after someone leaves. If you want your name taken off past seasons too, email us. There is no self service account deletion yet, so email us and your account and everything attached to it will be deleted within a month, usually much sooner.

Your rights

You can ask for a copy of the information we hold about you, and ask us to correct it, delete it, restrict what we do with it, or provide it in a portable format. You can also object to how we use it. Email admin@thehomegames.co.uk and you will have a response within a month. If you are unhappy with how your information has been handled, you can complain to the Information Commissioner's Office at ico.org.uk, though we would appreciate the chance to put it right first.

Children

The guest system exists so younger players can join without handing over personal details: no email address, no date of birth, just a first name or nickname and a PIN. Accounts need an email address and are for players aged 16 or over. Group organisers add guest players and should do so with the agreement of the player or, for children, a parent or guardian.

Changes to this notice

If the site changes in a way that affects your information, this page will be updated and the date at the top will change. Anything significant will be flagged on the site itself.