Privacy notice

Who is responsible

One Nil is a private score sheet run for a closed group of friends. It is not a company, it has no customers, and nobody pays to use it. The person who runs it is the data controller for what is described here.

Write to [email protected] about anything on this page.

What we hold

• Your account. The name you play under, your email address, and your password. Passwords are stored as a one-way bcrypt hash, never as text, and nobody can read them back.
• Your picks. The score you predicted for each fixture, and the points it earned once the match finished.
• Your groups. Which tables you belong to, whether you host them, and when you joined.
• Your sign-in records. The IP address, browser and time of each sign-in. These exist to keep an account secure, and they are shown to you in your data download.
• What you write to us. If you use the contact form, we keep the message, the name and the email address you gave us, so that we can reply.

Why we hold it

• To run the game you joined. Your account, your picks and your groups are the game. Without them there is nothing to score. The legal basis is the contract you enter when you create an account.
• To keep accounts and the service secure. Sign-in records and short-lived counters that slow down password guessing. The legal basis is our legitimate interest in protecting the service and everyone using it.

That is the whole list. There is no advertising, no analytics, no profiling, and nothing is sold or shared for marketing. Other players in your group see your name, whether your picks are ready, and (only after kickoff) your picks and points. Nothing here makes an automated decision about you that has a legal effect.

How long we keep it

• Your account, picks and groups are kept until you delete your account.
• A sign-in record goes when you sign out of that session, when you delete your account, or 90 days after you signed in, whichever comes first. The last of those signs you out and asks you to sign in again.
• Counters used to slow down password guessing expire within minutes.
• A message you send through the contact form is kept for 12 months, then deleted.
• An invitation link does not expire yet. That is a gap we intend to close.

Those are the only timers. Nothing else is erased on a schedule, because a score sheet with no history is not the product. Deleting your account is still the way to have everything removed, and encrypted backups are kept on their own schedule, so deleted data can survive in them until they rotate.

Who else is involved

• Our host. The databases sit on a server in Germany.
• Google Fonts. The two typefaces on this page are fetched from Google, and that request discloses your IP address. It is the only request we make to a company outside our host. We would like to serve the fonts ourselves to remove it.
• football-data.org. We receive fixtures and results from them. We send them nothing about you.

What you can do

• Take a copy. Your account page downloads everything listed above as a JSON file, which is also how you move it elsewhere.
• Have it erased. The same page deletes your account and the personal data in it. A group you host stays for its other members and passes to another of them.
• Have it corrected. There is no self-serve profile editing yet, so write to us and we will correct it.
• Complain. You can raise a concern with us first, and you can complain to your national data protection authority at any time.

Read how the site uses cookies and your device's storage in the cookie statement.