PRIVACY POLICY

SCOPE OF THIS POLICY

This policy applies to:

• The FanCast Arena iOS app (the "App")
• The marketing website at fancastarena.com (the "Website")

Where data handling differs between the App and the Website, we say so explicitly below.

WHO WE ARE

FanCast Arena ("we", "us", "our") is a fantasy draft game for reality TV fans. Our app is available on iOS. Questions? Contact us at fancastarena@gmail.com.

WHAT DATA WE COLLECT

In the App — we collect only what we need to run the game:

• Account identifier — provided by Apple or Google when you sign in. Used to identify your account and sync data across devices.
• Display name — the name you choose to show in leagues and on the leaderboard. You set this yourself.
• Email address — provided by your Apple or Google account at sign-in (Apple may give you the option to hide it). Used to identify your account; never used for marketing.
• Game data — your squad picks, scores, league memberships, and in-app activity.
• Device token — for push notifications, only if you grant permission.
• Sign-in data — if you use Sign in with Apple, we receive your Apple-generated user identifier and, if you choose to share it, your email address. This is used only to link your account across devices.
• Purchase data — if you purchase a Budget Pack (consumable in-app purchase), the transaction is processed by Apple. We receive a purchase receipt from RevenueCat confirming the purchase; we never see or store your payment card details.

On the Website — we collect only what's needed to notify you of launch:

• Waitlist email address — only if you submit it via the "Notify me" form. Used solely to email you when the App goes live on the App Store.
• Attribution data — alongside your email submission, we record the page source, referrer, and any UTM parameters in the URL (e.g. from a social ad). This helps us understand which channels brought you to us. No browsing history is collected.
• Hashed IP address — a one-way SHA-256 hash of your IP combined with a daily-rotating salt, used only to rate-limit form abuse. The raw IP is never stored.
• User-agent string — your browser identifier, stored alongside the signup for diagnostic purposes only.

You can unsubscribe from waitlist emails at any time via the link in any email we send, or by emailing us at fancastarena@gmail.com.

HOW WE USE YOUR DATA

• To run the fantasy draft game and calculate scores
• To display your results in leagues and on leaderboards
• To send push notifications about episode locks and results (if permitted)
• To improve the app through anonymised usage analytics
• To process in-app Budget Pack purchases via RevenueCat and apply the purchased VC to your account

WHO WE SHARE DATA WITH

We use the following third-party services, each with their own privacy policies:

• Supabase — database and authentication infrastructure (EU-based servers). Also stores waitlist signups from the Website.
• RevenueCat — processes in-app Budget Pack purchases and delivers purchase receipts to our server
• OneSignal — push notifications
• Anthropic — AI-powered drama scoring (anonymised contestant data only, no user data)
• Vercel — hosts the Website and provides cookieless, aggregated page analytics
• Resend / Apple / Google — used only at App Store launch to deliver the one-off waitlist announcement email (if you signed up)

We do not sell your data. We do not share your data with advertisers. We do not run ad-tracking pixels on the Website.

YOUR RIGHTS (GDPR)

If you are based in the UK or EU, you have the right to:

• Access the data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and all associated data
• Object to or restrict processing of your data
• Data portability

To exercise any of these rights, email us at fancastarena@gmail.com or use the Delete Account option in the app (Settings → Account → Delete Account).

IN-APP PURCHASES & APPLE

FanCast Arena offers optional consumable in-app purchases ("Budget Packs") via the Apple App Store. All payment processing is handled by Apple — we never receive or store your card details. We receive a purchase receipt from RevenueCat confirming that a transaction was completed; this receipt is used solely to credit VC to your account.

Budget Packs are consumable items with no real-world cash value. Refund requests must be made directly to Apple via reportaproblem.apple.com. Apple's privacy policy governs any data collected by Apple in connection with App Store transactions.

If you use Sign in with Apple, Apple may provide us with your Apple-generated user identifier and, at your choice, your email address. We use this solely to link your account across devices. We do not share this data with any third party for marketing purposes.

ACCOUNT DELETION

You can delete your account at any time from within the app (Settings → Account → Delete Account). This permanently removes your profile, squad history, scores, and league memberships. Deletion is processed within 30 days. Any unused virtual currency (VC) is forfeited on account deletion and cannot be refunded.

CHILDREN'S PRIVACY

FanCast Arena is not intended for users under the age of 17. We do not knowingly collect data from children. The app includes an age verification screen. If you believe a child has created an account, contact us and we will delete it.

DATA RETENTION

We retain your data for as long as your account is active. If you delete your account, we remove your personal data within 30 days, except where we are legally required to retain it.

COOKIES & TRACKING

Neither the FanCast Arena app nor the marketing website uses cookies. Our website analytics provider (Vercel) is cookieless and aggregates all visitor data before storing. There is no cross-site tracking, no advertising pixels, and no third-party social-media trackers anywhere on our properties.

CHANGES TO THIS POLICY

We may update this policy as the app evolves. We'll notify you of significant changes via push notification or an in-app banner. Continued use of the app after changes constitutes acceptance.

CONTACT

Email: fancastarena@gmail.com

For GDPR enquiries, use the same address with subject line "GDPR Request".