Privacy policy

Last updated: 23 October 2026 · Version for the BETA

RugbyGainline ("we", "us") runs Gainline, a free fantasy rugby game currently in BETA. RugbyGainline is run by an individual based in the UK, who is the data controller for the personal data described here under UK GDPR and the Data Protection Act 2018. Contact: support@rugbygainline.com.

What we collect

Account details: your email address, a password (stored only as a secure hash, never in readable form), your team name and, if you choose one, your favourite club.
Game data: your squads, captain picks, transfers, predictions, leagues you create or join, and your points.
Email preferences: whether you want deadline reminder emails, and records of verification and password-reset emails we sent you.
Technical data: a session cookie to keep you logged in, and short-lived server logs (such as IP address and pages requested) used to keep the service secure and working.

Why we use it (lawful basis)

To run your account and the game you signed up for (contract).
To send account emails such as email verification and password resets (contract).
To send deadline reminders, only if you switch them on; you can switch them off at any time on your Account page or with the unsubscribe link in each email (consent).
To keep the service secure, prevent abuse and fix problems (legitimate interests).

We do not sell your data, we do not use it for advertising, and we do not use third-party tracking or analytics.

Who processes it for us

Render hosts the website and database, in Frankfurt, Germany (EU).
Resend sends our emails, from the EU (Ireland).
Stripe would handle payments. Payments are not switched on during the BETA (test mode only), so no card details are collected.
Sportradar and other rugby data sources supply fixtures and player data. We do not send them your personal data.

Where a provider may handle data outside the UK, we rely on UK adequacy regulations or the UK International Data Transfer Addendum/Agreement.

How long we keep it

Account and game data: while your account is open. If you delete your account, it is removed straight away.
Unverified accounts, expired sessions and reset links are removed when they expire or are no longer needed.
Server logs: kept for up to 30 days.
Backups: may hold deleted data for up to 30 days before being overwritten.

Your rights

You can ask to access, correct, delete or export your data, or object to or restrict how we use it. You can delete your account yourself on your Account page, or email support@rugbygainline.com from your registered address and we will act within one month. If you are unhappy, you can complain to the Information Commissioner's Office (ico.org.uk).

Cookies

We use one strictly necessary cookie, sid, to keep you logged in. It is HttpOnly, sent only over secure (HTTPS) connections on the live site, and expires after 30 days or when you log out. We use no advertising or analytics cookies, so we don't ask for cookie consent.

Children

Gainline is for people aged 18 and over.

Changes

If we change this policy we will update the date above and, for significant changes, tell members by email or in the patch notes.