Privacy Policy

Last updated: 25 October 2026

The iOS app. This policy also covers the Gaffa XI app for iPhone. The app asks for your consent before any personalised advertising and uses privacy-friendly product analytics and crash reports, described below. What the app collects is described under 'The iOS app' below.

The website

This website uses no analytics, no tracking and no advertising cookies.

The iOS app

Anonymous account. The app does not ask you to sign up. The first time it needs to save a result it creates an anonymous account with our backend provider, Supabase, identified only by a random account id. We do not collect your name, email address, phone number or contacts.

What we store against that id: the display name you choose; your country, taken from your device's region settings or the country you pick in Settings; your device language; and your game results (Daily XI scores, duel results, season outcomes, rank and badges). This is what powers the Daily XI board, duels and your profile. We process it on the basis of performing the service to you.

Leaderboards and social media. Your display name, country flag and score appear on the in-app leaderboards. We may also feature a leaderboard result in Gaffa XI's own posts on social media (for example a weekly 'Gaffer of the week'), showing your display name, country and score, never your account id or anything else about you. If you'd rather not be featured, email hello@gaffaxi.com and we will leave you out of future posts.

Deleting your data. Open Settings in the app and tap 'Delete my data'. This permanently removes your profile, display name and results from our server and clears the game's local data on your device. You can also email legal@gaffaxi.com.

Adverts. The free version of the app shows adverts from Google AdMob: optional rewarded videos (watch one for an extra reroll or an extra draft) and a short full-screen advert after some seasons. Gaffa Pro removes all adverts. The first time you open the app you may see Google's consent form (in the EEA, the UK and Switzerland) and Apple's App Tracking Transparency prompt. If you agree, Google and its partners may use your device's advertising identifier and similar data to show personalised adverts and measure them. If you decline, you still get the full game and adverts are non-personalised, chosen by context rather than a profile of you. You can change your choice at any time in iPhone Settings > Privacy & Security > Tracking, and in Settings > Privacy & Security > Apple Advertising. Advert content is limited to a PG rating, and gambling, alcohol and dating adverts are blocked. Google may process technical information such as IP address, device type and approximate location (country or region) to serve adverts and prevent fraud. See Google's advertising policies.

Analytics. We use PostHog to count anonymous product events (for example that a draft was started or finished) so we can see what works. Events are tied to a random id, not to your name, email or advertising identifier, and are not used for advertising.

Crash reports. If the app crashes, a crash report (device model, iOS version, app version and the error) is sent to Sentry so we can fix it. Crash reports do not contain your name or email.

In-app purchases. Gaffa Pro and reroll packs are sold through Apple's in-app purchase system. Apple handles payment; we never see your card details. Our purchase provider, RevenueCat, receives an anonymous app user id and the purchase receipt so we can unlock what you bought and restore it on a new device.

On your device. Settings, your best XI, reroll balance, badges and sound preferences are stored locally in the app and are not sent to us.

Hosting, security and content delivery

The site is hosted on our cloud hosting provider and routed through industry-standard content delivery and security services that protect against malicious traffic and denial-of-service attacks. These providers may process standard technical information such as IP addresses, browser information and request logs for security, performance and reliability purposes.

International transfers

Some of our service providers — including hosting, analytics, security and advertising providers — may process information outside the UK or European Economic Area. Where this occurs, appropriate safeguards are used in line with applicable data protection laws.

If you contact us

If you contact us by email, we'll receive the information you choose to share. We use it only to respond to your enquiry, investigate issues and improve the game. Correspondence is retained only for as long as reasonably necessary.

Your rights

If you are in the UK or EEA, data protection law gives you certain rights in relation to your personal data, including:

• Access to personal data we hold about you
• Correction of inaccurate information
• Deletion of personal data in certain circumstances
• Restriction of processing in certain circumstances
• Objection to certain processing activities
• Withdrawal of consent where processing is based on consent
• Data portability where applicable

To exercise any of these rights, please contact us using the details below.

Our lawful basis for processing depends on the activity:

• Account features (sign-in, your XIs, leaderboard, friends, leagues) are processed on the basis of performing our service to you.
• Analytics and advertising cookies are processed on the basis of your consent.
• Hosting, security, performance monitoring and fraud prevention are processed on the basis of our legitimate interests in operating a secure and reliable site.
• Correspondence is processed for the purpose of responding to your enquiry.

Changes to this policy

We may update this policy from time to time to reflect changes to the game, technology, legal requirements or the services we use. The date at the top of this page indicates when the policy was last updated.

Age

The app is rated 13+ on the App Store and is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has used the app, contact us and we will delete the data linked to that account. You can also delete your data yourself in the app under Settings > Delete my data.

Contact

Privacy and data requests: legal@gaffaxi.com. General questions: hello@gaffaxi.com.