Home  ›  Privacy Policy

Privacy & Data

Privacy Policy

Plain-English summary at the top, full detail below. Last updated 22 October 2026.

Summary

TACTIX collects only the data needed to operate the service. We do not sell personal data. Where we use third-party services (analytics, advertising, payment processing) we use mainstream UK/EU-compliant providers. UK and EU users have the full set of UK GDPR / EU GDPR rights, including the right to access, correct, and delete personal data — see "Your rights" below.

This is the plain-English summary. The full policy below is more detailed and is the legally operative version.

Who We Are

TACTIX is operated by the operating entity named in the terms of service. For UK/EU data-protection purposes the operating entity is the data controller for personal data processed via the site.

Contact for data-protection enquiries: [email protected].

What We Collect, and Why

Account Data

When you create an account we collect: email address, your name (see “Your name in the Fan Zone” below for where it is shown), a password (stored as a hash — we don't see the plaintext), and the country you signed up from (for tax and licensing purposes). Paid tier signups additionally involve our payment processor (Stripe) collecting payment details — these are not stored on our servers.

Your Name in the Fan Zone

When you sign up we ask for your name. If you post or comment in the Fan Zone, that name is shown with your posts and comments, to anyone who can see them.

From 23 October 2026, posting or commenting also means your name is shown with your settled picks in the Fan Zone highlights and on the leaderboards: the Fan Zone leaderboards, the Fan Zone season board, the Beat the Sixfold board and the Beat the Model leaderboard. Only posts and comments made on or after 23 October 2026 count, and ones a moderator has removed do not.

If you have not posted or commented since then, your name is shown in those places only while your Fan Zone record is public; otherwise you appear as “A private player”. A new player’s record is public from their first pick, and we tell you so the first time you view your record. You can make your record private, or public again, at any time on your Fan Zone profile. While your record is public, anyone with the link to your record page can see your name, settled picks and points.

We never show your email address. To change your name, open My Profile and edit “Display name” under “Account settings”. The new name replaces the old one everywhere TACTIX shows it, including your earlier posts and comments, within a few minutes.

To delete your account, email [email protected] from the email address on your account. When your account is deleted, your Fan Zone posts and comments are deleted with it, and your name is no longer shown in the highlights or on any leaderboard.

You can also choose a username, when you sign up or later in My Profile. The username you choose is shown publicly on leaderboards and with your posts and comments, in place of your name, to anyone who can see them. Without a username, where you would otherwise appear as “A private player”, you appear as “Player” followed by a four-digit number; that number is not your account number and is not made from your email address or your name. You can change your username once every 24 hours, or remove it, in My Profile.

Usage Data

To operate the service we log: page views, feature usage (which leagues you view, which predictions you check), session timing, IP address, browser and device type, and referrer URLs. This data is used for product analytics (understanding what users find useful), reliability monitoring (debugging errors, scaling capacity), and security (identifying abuse and fraud).

Communications

If you contact us by email, we keep that correspondence so we can pick up later threads on the same topic. Marketing emails — picks, results, product updates and offers, a few a week at most — are sent only if you tick the box at sign-up or on your dashboard, and can be stopped any time from your dashboard or any email.

Your Fantasy Premier League Team

If you use the FPL team builder we keep, against your account: your team name, whether you chose to show it publicly, your FPL Team ID if you import your team (a public number from the official Fantasy Premier League game — we never ask for your FPL password), and the team you save for each gameweek (players, formation, bench order, captain, vice-captain, chip). At each gameweek's deadline your team is frozen and sealed with a fingerprint (a hash), so neither you nor TACTIX can change it afterwards. The team itself is visible only to you unless you opt in. What is published for every gameweek is the list of fingerprints and one combined fingerprint, with no user id or name in it; a fingerprint is a one-way hash and the team cannot be read back from it. When you import a team, your FPL Team ID is sent to the official game's public API to read that team. This is used to score your team, compare it with the TACTIX model and give you advice about it.

Advertising and Analytics

We use Google Analytics (with anonymised IP) and Google AdSense for advertising. Both run via Google Consent Mode v2 — full data collection only happens after you accept tracking via the cookie banner. Before consent, only privacy-preserving aggregate signals are sent. You can decline tracking entirely; the site still works.

Cookies and Similar Technologies

The site uses cookies for: keeping you logged in (essential), remembering your theme preference (functional), measuring usage (analytics — consent-gated), and personalising ads (advertising — consent-gated). The cookie banner on first visit lets you control non-essential categories independently.

Essential cookies (the login session, security tokens) cannot be opted out of without breaking the service — that's standard. Everything else is optional.

Third Parties We Share Data With

We share data with third parties only as needed to operate the service:

We do not sell personal data to any third party. We do not share data with bookmakers or affiliate networks beyond the click-tracking that an outbound affiliate link inherently involves.

How Long We Keep Data

Account data is kept while the account is active and for up to two years after the account is deleted (for legal, tax, and abuse-prevention purposes). Your FPL team and its sealed gameweek entries are deleted when your account is deleted; only the anonymous fingerprints stay, so the published gameweek fingerprints still check out. Your Fan Zone posts and comments are deleted when your account is deleted. Usage data is aggregated and anonymised after 14 months. Email correspondence is kept for as long as needed to handle ongoing matters and then archived.

Your Rights

Under UK GDPR and EU GDPR you have the following rights regarding your personal data:

To exercise any of these rights, email [email protected] from the email address associated with your account. We respond within the statutory timeframe (30 days for most requests).

International Transfers

Some of our service providers process data outside the UK and EU (Google, Stripe, and other hyperscalers are global businesses). All such transfers rely on either an adequacy decision, Standard Contractual Clauses, or other lawful transfer mechanisms required by UK GDPR / EU GDPR.

Children

TACTIX is not directed at children. Gambling-adjacent content carries 18+ messaging throughout. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, email [email protected] and we will delete it promptly.

Changes to This Policy

We may update this policy from time to time. Material changes will be flagged via the cookie banner or by email to registered users. Continued use of the service after a change indicates acceptance of the updated policy. The version date below indicates when this policy was last revised.

Last updated: 22 October 2026