The legal bit

Privacy

A game between friends does not need a novel about data. Here is everything we hold, why we hold it, and how to make it go away.

Last updated 25 July 2026

01

Who is responsible

Hot Takes FC is run by Oscar Kemp in Denmark, who is the data controller for everything described here. For anything in this policy, including a request to see or delete your data, email oscartkemp@gmail.com. A person reads it, and we answer within 30 days.

02

What we store, and why

Your email address
To sign you in, and to send the game emails you have not switched off. Sign-in and passwords are handled by Supabase, our authentication provider: your password is stored hashed by them and we never see it.
Your display name
So the people in your leagues know who they are playing against. It is visible to every member of any league you join.
Your game activity
Takes, quotes, stakes, your points ledger, wildcards, trophies and House Call positions. This is the game itself: without it there is nothing to play.
Chat messages
Lobby chat and take threads. Worth being straight about: a message you post anonymously stays anonymous to other players forever, but the database still records that you sent it. The anonymity is a rule of the game, not a claim that the record does not exist.
A record of emails we sent you
Which notification went to whom, and whether it was delivered. It is what stops the same email being sent twice, and what makes unsubscribing work.
A few interface preferences
Small flags like whether you dismissed the welcome panel or the rules prompt, so the game stops nagging you.
Your waitlist email
Only if you left it on the landing page. We use it once, to tell you when the season opens, and then delete it.

We do not store payment details, because there are none. We do not ask for your address, your phone number or your date of birth.

03

Cookies and analytics

Sign-in cookies from Supabase keep you logged in. Those are the only cookies we set, and they are the reason there is no cookie banner in your way: we have nothing else to ask permission for.

We count page views with Vercel Web Analytics, which is cookieless. It does not build a profile of you and does not follow you to other sites. There are no advertising cookies, no tracking pixels and no third-party embeds anywhere on this site.

A little interface state (like snoozing the rules prompt) is kept by your own browser and disappears when you close the tab.

04

Who else sees it

Your league mates see your display name and your game activity, in the way the rules describe: some of it is deliberately hidden from them until a take is revealed.

Three companies process data so the service can run: Supabase (accounts and database), Vercel (hosting and analytics) and Resend (sending the game emails). They act on our instructions under standard data processing terms, and because they operate internationally your data may be processed outside Denmark. Football results come from api-football, and we send them nothing about you.

We do not sell your data, and we never share it for advertising.

05

Deleting your account

Email oscartkemp@gmail.com. We erase the person and keep the game, which in practice means:

Deleted: your login and email address, your password, your display name, every chat message you wrote, your emoji reactions, our log of the emails we sent you, your waitlist entry if you left one, and your name inside any frozen end-of-season table.

Kept, but no longer connected to you: your past takes, quotes, points ledger, tickets, wildcards and House Call stakes. They show up as a nameless former player.

The reason for that split is worth saying plainly. Your quote set the price someone else played at, and your take is where someone else's winnings came from. Deleting those rows would rewrite your friends' results and break the accounting the whole game rests on, so we strip the identity out of them instead. Once your name and login are gone, what is left is not you: it is a column of numbers in somebody else's league history.

06

How long we keep it

For as long as your account exists. Ask us to delete it and it goes. Waitlist emails are deleted once the season has opened and we have written to you.

Note the beta reset: before the first full season, game data from the beta is wiped for everyone, as the terms describe.

07

Your rights

Under the GDPR you can ask for a copy of your data, ask us to correct it, ask us to delete it, or object to how we use it. Email us and we will do it within 30 days; there is no process to navigate and no form to fill in. A copy comes back as a single file containing everything listed above.

If you are ever unhappy with how we handled that, you can complain to Datatilsynet, the Danish Data Protection Agency.

08

Emails

We send four kinds of game notification: a take needs your quote, a decision is due, a take you own settled, and a take was passed back to you. That is all. Every one carries an unsubscribe link, and there is a switch in your settings.

09

Changes

If this page changes in a way that matters, we will update the date at the top of it.