Skip to content
The MinisBack to home

Privacy Policy

Last updated: 28 July 2026

1. What Data We Collect

When you use The Minis, we collect:

  • Email address and password hash — stored securely by Supabase Auth. Your password is hashed; we never see the plaintext version.
  • Display name — what appears to other players in leagues and leaderboards.
  • Google profile information — if you sign in with Google OAuth (email, name, profile picture). This is handled by Supabase Auth.
  • League and contest activity — the leagues you join, contests you enter, teams you pick, and your scores.

2. Why We Collect It

We collect this data to:

  • • Authenticate you and keep your account secure.
  • • Run contests, track your picks, and calculate your scores.
  • • Let you interact with other players through leagues and leaderboards.
  • • Send you essential service notifications (e.g., score updates, contest status changes).

We do not use your data for advertising, profiling, or sell it to third parties.

3. Where Data Is Stored

Your data is stored in Supabase (a PostgreSQL database service) and served via Vercel (our hosting platform). Both are based in the United States. By using The Minis, you consent to your data being processed and stored in the US.

4. Third-Party Services

Supabase — hosts our database and handles authentication. See Supabase privacy policy.

Google OAuth — if you sign in with Google. See Google privacy policy.

Unofficial Fantasy Premier League API — we fetch read-only fixture, player, and team data from this public API. We do not send your personal data to it; it only sees aggregate API requests for public data.

5. Cookies

We use cookies only for authentication and session management. These are essential to keep you logged in. We do not use tracking cookies, analytics cookies, or cookies for advertising.

6. Data Retention

We retain your account data as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where required to keep it by law (e.g., for tax or fraud prevention).

7. Your Rights

Under the UK Data Protection Act 2018 and UK GDPR (if applicable), you have the right to:

  • Access — request a copy of your personal data.
  • Rectification — correct inaccurate data.
  • Erasure — delete your data (subject to legal retention obligations).
  • Export — receive your data in a structured, portable format.
  • Opt-out — stop non-essential processing (we only use essential processing, so this is limited).

To exercise these rights, email yhamid1982@gmail.com with your request (replace with real support contact before launch).

8. Security

We use industry-standard encryption and security practices to protect your data. All communication with The Minis is encrypted via HTTPS. However, no system is 100% secure, and we cannot guarantee absolute protection.

9. Changes to This Policy

We may update this Privacy Policy at any time. We will notify you of material changes via email or by posting a notice on our service.

10. Contact

For privacy questions or data subject requests, contact yhamid1982@gmail.com (replace with real support contact before launch).