Your data. No surprises.

1. Who we are

StoppageTime is operated by Rory Murphy in a personal capacity under the name StoppageTime (“we”, “us” or “our”). For the account, platform, security, support and marketing information described below, we are the data controller.

Questions or requests can be sent to support@stoppagetime.co.uk.

2. Information we collect

Information you give us

• Account details: your name, email address, account ID and team role. Our authentication provider stores your password securely; we cannot see it.
• Messaging information: your email address and records showing whether you have unsubscribed or objected to marketing.
• Football information: team and player names, squad number, playing position, fixtures, venues, results, appearances, minutes, goals, assists, cards, awards, captaincy picks, fantasy points, match reports and club or league membership.
• Support information: messages and other information you send when you contact us.

Information added by someone else

A team administrator may add a player’s name and football information before that player creates an account. If this happens, the information comes from that administrator or team. The administrator must tell the player and have a lawful reason to add it.

Technical information

When you use the website or app, our hosting, security and authentication providers may process an IP address, browser or device type, request time, security events and similar diagnostic information. Cloudflare Turnstile also checks limited device and network signals to distinguish people from bots.

We do not ask for health information, biometric data or other special-category information. Please do not put that information in match reports or support messages.

3. Why we use it

Fantasy points and rankings are calculated automatically from match information and scoring rules. They are for sport and entertainment only and do not make decisions with legal or similarly significant effects.

4. Who can see it

Your account email is not shown in public leaderboards. Team members can see information for their team. Where a team joins a club or league, relevant player names, match statistics and fantasy points can be shown to members of that club or league.

The app lets users generate social graphics. Creating a graphic happens at the user’s request, and the user chooses whether and where to share it. Once information is shared outside StoppageTime, the recipient or social platform controls what happens to that copy.

Marketing and partner offers

Marketing emails may include news about StoppageTime, feature updates and offers from partners selected by us. These messages are sent by StoppageTime. We do not give partners your email address for their own marketing unless we ask for separate permission.

You can unsubscribe using the link in any marketing email or by contacting support. Unsubscribing does not stop essential messages such as email confirmation, password resets, security notices or important service updates.

5. Service providers

We use a small number of suppliers to run StoppageTime:

• Supabase for the database, authentication and account emails infrastructure. The primary project is hosted in Ireland.
• Cloudflare for website and app delivery, security and Turnstile bot protection.
• Resend to deliver sign-up, password-reset and marketing emails and manage unsubscribes.
• Zoho Mail to receive and answer support emails.

They may process information only to provide their services to us, subject to their contracts and legal obligations. We may also disclose information if required by law, to protect someone’s safety or rights, or as part of a business transfer. We do not sell personal information.

6. International transfers

Some suppliers may process information outside the United Kingdom. Where UK data protection law treats that as a restricted transfer, we use an approved adequacy route or contractual safeguards such as the UK International Data Transfer Agreement or UK Addendum, as applicable.

7. How long we keep it

• Account information is kept while your account is active. You can delete your account in Account settings.
• Match and team records are kept while they remain useful to the team, club or league. When an account is deleted, the login and direct profile links are removed, the linked player name is changed to “Deleted player”, and historical match facts and totals remain so other users’ records still make sense.
• Support messages are reviewed and deleted when no longer needed, normally within 24 months after the issue is closed.
• Marketing records are kept while you receive marketing. If you unsubscribe or object, we keep the minimum information needed on a suppression list so we do not contact you again by mistake.
• Security and technical logs are kept for the period needed to protect and troubleshoot the service, according to our settings and providers’ retention schedules.

Deletion from encrypted backups may take longer until those backups are safely overwritten.

8. Information stored on your device

The marketing website does not currently use advertising or analytics cookies. The app uses essential browser storage, including IndexedDB, to keep you signed in, remember your selected team, cache app information for up to seven days and hold offline match drafts or queued submissions. This is needed for the service you request and is cleared or replaced as it expires, when you sign out, or when you delete your account, depending on the item.

Turnstile may use strictly necessary cookies or similar technology for security. Because we do not currently use non-essential cookies, there is no cookie banner. We will ask for consent before adding non-essential analytics or advertising technology.

If you choose a club logo for a social graphic, the app reads that file from your device to create the image; it is not uploaded to our database. Exported images are saved or shared only when you choose to do so.

9. Your rights

Depending on the circumstances, UK data protection law gives you rights to access, correct, erase, restrict or receive a copy of your information, and to object to processing based on legitimate interests. Where we rely on consent, you may withdraw it.

You have an absolute right to object to direct marketing. Use the unsubscribe link in a marketing email or contact us, and we will stop sending marketing messages.

You can delete your account in the app. For any other request, email support@stoppagetime.co.uk. We may need to confirm your identity and normally respond within one month. These rights are not absolute; if an exception applies, we will explain it.

You can also complain to the Information Commissioner’s Office. We would appreciate the chance to resolve your concern first.

10. Adults only

StoppageTime is intended for adults aged 18 and over. Do not create an account or add a player record for anyone under 18. If you believe a child’s information has been added, contact us and we will investigate and remove it where appropriate.

11. Changes to this notice

We may update this notice when the service or law changes. We will post the new version here and change the date above. We will give additional notice in the app if a change materially affects how we use personal information.