Last updated: 31 August 2026
UCL Fantasy is the controller of personal data processed through uclfantasy.com. Contact us at hello@uclfantasy.com. We operate from the United Kingdom.
We may process account details (email, username, display name and profile image), authentication and security records, subscription and entitlement status, Stripe customer/subscription references, saved watchlists and preferences, article interactions, referral codes and affiliate attribution, support messages, consent choices, and technical information such as IP address, device/browser details, timestamps and diagnostic logs. We do not store full payment-card details.
Strictly necessary cookies or storage keep you signed in, protect the service, remember the private-preview gate and retain essential settings. Optional first-party product analytics are activated only after you choose “Allow analytics”; declining them does not restrict the service. We do not use advertising cookies. You can withdraw analytics consent by clearing the site’s local storage or contacting us. Browser controls can also remove cookies, although deleting essential cookies may sign you out.
We use service providers acting on our instructions, including Supabase for database and authentication, Stripe for payments and billing, Netlify for hosting and delivery, and email/analytics providers where configured. These providers may process limited data needed to perform their services. We may also disclose information where required by law, to protect users or the service, or in connection with a business sale or reorganisation.
Some providers may process data outside the UK. Where required, transfers rely on an adequacy decision or approved contractual safeguards. We use access controls, row-level database security, encrypted transport, restricted administrative access, backups and monitoring; however, no internet service can promise absolute security.
Account and subscription records are normally kept while your account is active. If you request deletion, we delete or anonymise data that is no longer required, while retaining limited billing, fraud, dispute and legal records for as long as necessary—typically up to six years where UK accounting or contractual records require it. Security logs and analytics are kept only for proportionate operational periods. Affiliate attribution and payment records may be retained for accounting, fraud prevention and dispute handling.
Depending on the circumstances, you may ask for access, correction, deletion, restriction, portability or objection, and may withdraw consent at any time. Email hello@uclfantasy.com. We may need to verify your identity. You may also complain to the UK Information Commissioner’s Office at ico.org.uk.
The service is not directed at children under 13 and we do not knowingly collect their data. External links and third-party services have their own privacy terms. We review this notice when our processing changes and will post material updates here.