Privacy Notice

Section 1 — Who controls your information

Daily Ball is the name used to operate this service.

Daily Ball determines how and why personal information collected through dailyball.net is used and is therefore the data controller for that information.

For privacy enquiries or requests, contact privacy@dailyball.net.

Section 2 — Information we collect

Depending on how you use Daily Ball, we may process the following information.

Gameplay information

• your Daily Ball attempts and scores
• questions reached and answered
• use of gameplay features such as VAR Review
• completed Matchdays and previous challenge attempts
• streak, rank and progression information

Guest information

Daily Ball may create an automatically generated guest identifier used to recognise your Daily Ball session and preserve your official attempt.

Associated gameplay and acquisition information may be linked to that guest identifier.

The guest identifier is random and is not generated from your name, device fingerprint or email address.

Account information

If you create or use a Daily Ball account, we may process:

• your email address
• your username
• your authentication/account identifier
• your account-linked gameplay history
• league memberships
• progression and rank information
• whether you have turned the optional daily reminder email on or off, and when, together with a limited record of reminders sent to you

League and social information

This may include:

• leagues you create or join
• league names and invite activity
• your public username within relevant league or competition features
• Challenge a Mate participation
• score comparisons

Acquisition and usage information

We may record information about how you first discovered or returned to Daily Ball, such as whether you arrived through:

• a venue or community link
• a creator campaign
• a league invitation
• a shared result
• a direct challenge
• a social platform
• another referral source

We may also record product usage events such as:

• starting or completing a challenge
• viewing results
• using VAR Review
• using a sharing feature
• opening or completing a direct challenge

Daily Ball’s product analytics are designed to avoid storing information such as email addresses, usernames or IP addresses inside analytics event properties.

Prize and campaign information

If you participate in a Daily Ball campaign involving a prize, we may process:

• campaign participation and Matchday scores
• eligibility and qualification information
• winner information
• prize claim status
• prize redemption history
• transactional communications required to issue or administer the prize

Venue staff validating a Daily Ball prize may be shown information necessary to validate the claim, such as a winner’s username, prize and claim status.

They are not intended to receive the winner’s email address through the claim validation interface.

Section 3 — How we use your information

We use information where necessary to:

• provide Daily Ball and its gameplay
• maintain one official attempt per player where applicable
• authenticate accounts and maintain login sessions
• save scores, rankings, streaks and progression
• operate leagues and social challenges
• prevent abuse, manipulation and duplicate attempts
• administer campaigns and prizes
• understand how Daily Ball is being used
• improve the product
• measure acquisition and campaign performance
• diagnose technical problems
• protect the service
• respond to privacy, support or legal enquiries

We do not currently use Daily Ball account email addresses for general marketing simply because somebody has created an account.

Creating an account does not sign you up to any emails. If you choose to turn on the optional daily reminder in Profile, we use your account email address only to send you one short email when each new Daily Ball is live. It is off unless you turn it on, and you can turn it off at any time in Profile or by using the unsubscribe link in any reminder email. Reminder emails do not contain other promotional content.

If Daily Ball introduces promotional email marketing in future, applicable consent and electronic-marketing requirements will be considered separately.

Section 4 — Our lawful bases

Depending on the activity, Daily Ball generally relies on the following lawful bases.

Contract or steps at your request

Where processing is necessary to provide functionality you choose to use, such as creating an account, joining a league or participating in an eligible campaign.

Legitimate interests

Where processing is necessary for the reasonable operation of Daily Ball, such as:

• maintaining secure and reliable gameplay
• preventing abuse and duplicate attempts
• understanding product performance
• measuring acquisition
• improving the product

Where Daily Ball relies on legitimate interests, we consider whether those interests are compatible with users’ rights and reasonable expectations.

Legal obligations

Where information must be processed or retained to comply with applicable law.

Consent

Where the law specifically requires consent, including any future non-essential tracking or marketing activity that requires it.

The optional daily reminder email is sent only if you have chosen to turn it on. You can withdraw that choice at any time in Profile or through the unsubscribe link in any reminder email.

Section 5 — Cookies and similar technologies

Daily Ball uses first-party browser technologies to make the service work.

These may include:

• a guest identifier used to maintain your Daily Ball identity and official gameplay
• authentication/session cookies used when you sign in
• temporary information used to preserve a valid Challenge a Mate journey
• local browser storage used for product-experience purposes, such as remembering that you have already seen certain presentation states

Daily Ball does not currently operate a third-party advertising-tracking system.

Some technologies are necessary for functionality or security.

Where Daily Ball later introduces non-essential technologies that require consent, they will not be activated for users who have not provided the required consent.

Section 6 — Service providers

Daily Ball uses third-party service providers to operate the service.

These may include:

Supabase

Used for database hosting and account authentication.

Vercel

Used for website hosting and server-side application delivery.

Resend

Used for transactional prize email delivery where configured, and to deliver the optional daily reminder email to players who have turned it on.

Other suppliers may be introduced where reasonably necessary to operate Daily Ball.

These providers process information to provide services to Daily Ball.

Daily Ball does not sell personal information to advertisers.

Section 7 — International transfers

Some service providers used by Daily Ball may process information outside the United Kingdom.

Where UK data-protection law requires safeguards for international transfers, Daily Ball relies on appropriate mechanisms made available by those providers, such as recognised adequacy arrangements or contractual safeguards.

Section 8 — How long we keep information

Daily Ball keeps personal information only for as long as reasonably necessary for the purpose for which it was collected.

This may include purposes such as:

• operating the game
• maintaining accounts
• preserving historical results and progression
• administering leagues
• administering prizes
• resolving disputes
• preventing abuse
• meeting legal obligations

Different records may require different retention periods.

Daily Ball's own records of individual daily reminder emails sent are kept for up to 180 days and then deleted from Daily Ball's application database. Your current reminder on/off choice is kept for as long as your account exists.

Daily Ball is continuing to formalise its detailed retention schedule as the service develops.

We do not claim an arbitrary fixed deletion period where the service does not currently operate one.

Section 9 — Security

Daily Ball uses technical and organisational safeguards intended to protect information.

These include:

• server-side account verification
• access controls
• restricted administrative access
• database access controls
• server-side gameplay validation
• protected service credentials
• separation between public and privileged application access

No internet service can guarantee absolute security.

Section 10 — Your rights

Depending on the circumstances, UK data-protection law may give you rights including:

• access to your personal information
• correction of inaccurate information
• deletion in certain circumstances
• restriction of processing
• objection to certain processing
• data portability in applicable circumstances
• withdrawal of consent where processing is based on consent

You can make a request by emailing:

privacy@dailyball.net

You also have the right to raise concerns with the UK Information Commissioner’s Office.

Section 11 — Children

Daily Ball is a general football knowledge game and may be accessed by younger football fans.

Daily Ball does not currently intentionally collect dates of birth.

Daily Ball does not currently operate behavioural advertising targeted at children.

We will keep our age-related approach under review as the product and account features develop.

Section 12 — Changes to this notice

We may update this Privacy Notice when Daily Ball’s features, suppliers or data practices change.

Where a new use of personal information materially affects users, we will update this notice appropriately.