Last updated 9 June 2026
Privacy Policy
This policy explains what personal data SharpCast collects, why, who processes it, how long we keep it, and the rights you have over it.
1. Who we are
SharpCast ("we", "us", "our") operates the football analysis subscription service at sharpcast.co.uk. We are the data controller for the personal data described in this policy.
We are registered with the UK Information Commissioner's Office (ICO) under the data protection fee, registration reference C1954277. For any privacy question or to exercise a right below, contact support@sharpcast.co.uk.
2. What we collect
We collect only what we need to run the service:
- Account data: your email address and, if you provide it, your name.
- Sign in credentials: a one way password hash if you use email and password sign in. We never store your password in readable form. Sign in is handled by Auth.js, with email magic link and Google sign in as alternatives.
- Preferences and activity: your unit stake setting, your watchlist, and the picks you choose to back or track on the site.
- Subscription data: your Stripe customer and subscription identifiers and subscription status. We do not store your card number, expiry, or security code. Card data is collected and held by Stripe.
- Technical data: session cookies for sign in, and IP address and basic usage information used to keep the service secure and to understand aggregate traffic.
3. How we use your data and our lawful basis
Under the UK GDPR we rely on the following bases:
| Purpose | Lawful basis |
|---|---|
| Provide your account and subscription | Performance of our contract with you |
| Take payment and manage billing | Performance of our contract with you |
| Send transactional email (sign in links, receipts, service notices) | Performance of our contract with you |
| Keep the service secure and prevent abuse | Our legitimate interest in a secure service |
| Understand aggregate, privacy friendly usage | Our legitimate interest in improving the service |
| Send marketing email, where offered | Your consent, which you can withdraw at any time |
4. Who processes your data
We use a small set of carefully chosen processors. Each acts on our instructions under a data processing agreement.
| Processor | What it does |
|---|---|
| Stripe | Payment processing and subscription billing. Holds your card data; we do not. |
| Resend | Sends transactional email such as sign in links and receipts. |
| Sentry | Error monitoring so we can find and fix faults. |
| Plausible | Privacy friendly, cookieless website analytics. It does not track you across sites and sets no cookies. |
| Hetzner | Hosting. Our servers and database are located in Germany, within the EU. |
Your data is hosted and processed within the UK and EU. Where a processor transfers data outside the UK or EU, that transfer is covered by an adequacy decision or by standard contractual clauses.
5. How long we keep it
We keep your account data for as long as your account is open. If you close your account we delete or anonymise your personal data within 90 days, except where we must keep records longer to meet a legal or tax obligation (billing and payment records are retained for up to six years to satisfy UK accounting and tax law). Aggregate, non identifying analytics may be kept indefinitely.
6. Your rights
Under the UK GDPR you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased;
- receive your data in a portable, machine readable form;
- object to, or ask us to restrict, certain processing;
- withdraw consent for marketing at any time.
To exercise any of these, email support@sharpcast.co.uk. We respond within one month. You also have the right to complain to the ICO at ico.org.uk if you are unhappy with how we handle your data.
8. Changes to this policy
We may update this policy from time to time. The date at the top of the page shows when it last changed. Material changes affecting how we use your data will be notified by email or an on site notice.