Privacy & Cookies Policy
Last updated: 9 June 2026
Gaffa XI is a free football draft game. We collect and process as little personal data as we reasonably can, and we do not sell your personal data.
If you create a Gaffa XI account, we store the information needed to keep your XIs and your standing on the leaderboard. If you don't sign in, your draft progress is stored locally on your device so you can pick up where you left off.
Non-essential cookies — analytics and any advertising — are only used where you choose to accept them through our cookie banner. You can change your preferences at any time through .
Accounts
When you sign in (with Google or email) we store your account identifier, your chosen username, and the XIs you build. This is what powers your dashboard, the leaderboard, friends and leagues. You can delete your account and your data at any time by contacting us.
Game progress on your device
While you're drafting, your formation, picks and settings may be saved in your browser's local storage so you can continue an unfinished XI. This information stays on your device and is not transmitted to us. You can clear it at any time by starting a new draft or clearing your browser's site data.
Analytics
With your consent, we may use analytics tools to understand how gaffers use the site. Analytics may collect information such as:
- Pages viewed
- Device and browser information
- Approximate location information
- Traffic sources
- Interactions with site features
Analytics are disabled by default and only load after you've accepted analytics cookies through our banner. You can withdraw your consent at any time through Cookie Settings.
Advertising
We may display advertisements from third-party advertising partners. Depending on the services used and your choices in the cookie banner, advertising partners may use cookies and similar technologies to display ads, measure performance, prevent fraud, limit repetition, and serve more relevant advertising. Advertising technologies that require consent are only used where you have provided it.
Hosting, security and content delivery
The site is hosted on our cloud hosting provider and routed through industry-standard content delivery and security services that protect against malicious traffic and denial-of-service attacks. These providers may process standard technical information such as IP addresses, browser information and request logs for security, performance and reliability purposes.
International transfers
Some of our service providers — including hosting, analytics, security and advertising providers — may process information outside the UK or European Economic Area. Where this occurs, appropriate safeguards are used in line with applicable data protection laws.
If you contact us
If you contact us by email, we'll receive the information you choose to share. We use it only to respond to your enquiry, investigate issues and improve the game. Correspondence is retained only for as long as reasonably necessary.
Your rights
If you are in the UK or EEA, data protection law gives you certain rights in relation to your personal data, including:
- Access to personal data we hold about you
- Correction of inaccurate information
- Deletion of personal data in certain circumstances
- Restriction of processing in certain circumstances
- Objection to certain processing activities
- Withdrawal of consent where processing is based on consent
- Data portability where applicable
To exercise any of these rights, please contact us using the details below.
Our lawful basis for processing depends on the activity:
- Account features (sign-in, your XIs, leaderboard, friends, leagues) are processed on the basis of performing our service to you.
- Analytics and advertising cookies are processed on the basis of your consent.
- Hosting, security, performance monitoring and fraud prevention are processed on the basis of our legitimate interests in operating a secure and reliable site.
- Correspondence is processed for the purpose of responding to your enquiry.
Children
Gaffa XI is intended for a general audience and we do not knowingly collect personal information from children.
Changes to this policy
We may update this policy from time to time to reflect changes to the game, technology, legal requirements or the services we use. The date at the top of this page indicates when the policy was last updated.
Contact
If you have any questions about this policy or how we process information, please contact us at hello@gaffa-xi.app.
If you are in the UK, you also have the right to complain to the Information Commissioner's Office (ICO).