Your information
Privacy Policy
Effective and last updated: 14 August 2026
This policy explains what personal information Full Time Forecast collects, why we use it, who receives it and the choices and rights you have. We have written it to be useful to players of all ages. If anything is unclear, please contact us.
1. Who is responsible for your information?
The data controller is Inclusion Project Management Limited (company number 10879394), trading as Full Time Forecast, of 12 West Street, Ware, Hertfordshire, United Kingdom, SG12 9EE.
Email privacy@full-time-forecast.com with questions or to exercise your privacy rights.
2. Information we collect
Account and profile information
Your name, email address, account identifiers, verification status and account dates; your public username, favourite team, profile visibility, communication preference and badges. Firebase Authentication handles your password and sign-in credentials; we do not see your password.
Game and league information
Your score predictions, points, rankings, prediction history, league memberships and requests, leagues you create, league roles and settings, and records needed to apply the correct scoring rules. If you choose to create a sharing link, we also process the predictions, projected table and display name needed to create the shared image.
Communications
Your marketing choice and records of authentication, service and marketing emails, including recipient address, campaign, delivery status and provider message ID. We also process information you send when you contact us.
Technical and security information
Our hosting and security providers may process standard technical logs such as IP address, browser, device and request information. For authentication-email abuse prevention, we store a one-way hash derived from the email address and IP address for a short rate-limit window rather than storing those values in the rate-limit record itself.
3. Why we use it and our lawful bases
| Purpose | Lawful basis |
|---|---|
| Creating and securing your account; saving predictions; scoring; profiles; leagues; badges; sharing features; and account deletion. | Performance of our contract with you. |
| Operating, troubleshooting and protecting the service; preventing abuse; and correcting results or scores. | Our legitimate interests in providing a reliable, secure and useful service. We balance those interests against your rights. |
| Sending prediction reminders, product news and other marketing you choose to receive. | Your consent. You can withdraw it at any time. |
| Sending verification, sign-in, password reset, security and important service messages. | Performance of our contract and our legitimate interests in account security and service administration. |
| Responding to legal requests, protecting legal rights and keeping records the law requires. | Legal obligation or our legitimate interests in establishing, exercising or defending legal claims. |
Where we need information to provide an account feature, not supplying it may mean that feature cannot work. Marketing is optional and is never required to use the game.
4. What other people can see
Leaderboards and league tables show rankings and points as needed for the game. Your chosen username is shown with them only when you turn on “Make my profile public”; otherwise the service uses a generic private-player label. Your username, favourite team, badges and leaderboard positions appear on a public profile only when that setting is on. It is off by default. Your email address is not shown to other users.
A sharing link can reveal the display name, predictions or projected table included in the image to anyone who has the link or sees the image. Do not share a link if you do not want that information shared more widely. Prediction-image links expire after 30 days; some other generated sharing records remain until you delete your account or we no longer need them to provide the feature.
5. Browser storage
The service uses browser storage and similar technology for authentication and core app features. We do not use analytics or behavioural advertising trackers.
| Technology | Purpose and duration |
|---|---|
| Firebase Authentication storage | Keeps you securely signed in and maintains your requested account session. It lasts until you sign out, clear browser data or it expires. |
| Firestore local cache | Caches app data on your device to improve reliability and performance. Your browser controls how long it remains, and you can remove it by clearing site data. |
emailForSignIn | Temporarily remembers the address that requested a magic sign-in link. We remove it after successful sign-in; you can also clear it through browser settings. |
You can clear or block browser storage in your browser settings, although blocking storage used for authentication or core app data may stop parts of the service from working correctly.
6. Who receives information?
We share information only where needed with:
- Google Firebase and Google Cloud, for authentication, database, hosting, server functions and infrastructure. See Google’s Firebase privacy information.
- Resend (Plus Five Five, Inc.), which delivers authentication, service and opted-in marketing email. See Resend’s privacy policy.
- Professional advisers, insurers, auditors or prospective purchasers where reasonably necessary and subject to appropriate confidentiality.
- Courts, regulators, law enforcement or other parties where the law requires it or where necessary to protect rights, safety and security.
We do not sell personal information. We do not share it with third parties for their own behavioural advertising.
7. International transfers
Some providers process information outside the United Kingdom. In particular, Firebase Authentication operates from the United States, and Resend is based in the United States. Depending on the service, Google may also process information in other countries where it or its subprocessors operate.
Where required, these transfers are protected by an adequacy regulation, the UK Extension to the EU–US Data Privacy Framework, the UK International Data Transfer Addendum to approved standard contractual clauses, or another safeguard permitted by UK data protection law. Contact us if you would like more information about the relevant safeguards.
8. How long we keep information
- Account and game data: while your account is active, then deleted when you delete the account, unless limited retention is required by law or needed for legal claims.
- Sharing records: for the life of the sharing link or until account deletion. Prediction-image links are set to expire after 30 days.
- Authentication rate-limit records: for the short rate-limit window, currently 15 minutes.
- Email and consent records: for as long as needed to deliver messages, respect your preferences, demonstrate compliance and handle complaints.
- Technical and security logs: only for as long as reasonably needed to operate and secure the service, after which they are deleted or anonymised.
Provider backups and security logs may remain for a limited period after deletion before being overwritten. We may keep anonymised statistics that can no longer identify you.
9. Your choices and rights
You can:
- edit your username, favourite team and profile visibility from your profile;
- turn marketing reminders and updates off from your profile at any time;
- delete your account from your profile; and
- clear stored site data using your browser controls.
Under UK data protection law, you may also have rights to access, correct, erase or restrict your information, object to processing, receive certain information in a portable form, and withdraw consent. These rights are not absolute and sometimes an exemption applies. Email privacy@full-time-forecast.com to make a request. We may need to verify your identity and normally respond within one month.
You may complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint. We would appreciate the opportunity to address your concern first.
10. Children’s privacy
Full Time Forecast is a general-audience football game and does not impose a separate age restriction. We use privacy-protective defaults: public profiles and marketing are off unless the user actively turns them on, we do not use precise location, and we do not use personal information for behavioural advertising.
Younger users should ask a parent or guardian to help them understand this policy and their choices. A parent or guardian who is concerned about a child’s information can contact us at privacy@full-time-forecast.com.
11. Security
We use appropriate technical and organisational measures intended to protect personal information, including authentication, access controls, encrypted connections and restricted administrative access. No online service can guarantee absolute security, so please use a strong, unique password and contact us if you suspect misuse.
12. Changes to this policy
We may update this policy when the service, our providers or the law changes. We will update the date at the top and give reasonable notice of material changes where appropriate.
13. Contact us
Email privacy@full-time-forecast.com or write to Inclusion Project Management Limited, 12 West Street, Ware, Hertfordshire, United Kingdom, SG12 9EE.
For the contractual rules governing the service, read our Terms of Service.