Last updated 9 June 2026
Privacy Policy
This policy explains what personal data SharpCast collects, why, who processes it, how long we keep it, and the rights you have over it.
1. Who we are
SharpCast ("we", "us", "our") operates the football analysis subscription service at sharpcast.co.uk. We are the data controller for the personal data described in this policy.
We are registered with the UK Information Commissioner's Office (ICO) under the data protection fee, registration reference C1954277. For any privacy question or to exercise a right below, contact support@sharpcast.co.uk.
2. What we collect
We collect only what we need to run the service:
- Account data: your email address and, if you provide it, your name.
- Sign in credentials: you can sign in with a one time code sent to your email address, through a sign in provider such as Google where the app offers it, or with a password if you choose to set one. A password is optional and you never have to set one. If you do, we store only a salted, memory hard hash of it, never the password itself, so we cannot read it and neither could anyone who obtained a copy of our database. Resetting a forgotten password still goes through your email address.
- Preferences and activity: your unit stake setting, your watchlist, and the picks you choose to back or track on the site.
- A screenshot you choose to upload (SharpXI app only): the SharpXI fantasy planner can read your squad from a screenshot of your Fantasy Premier League team, so you do not have to enter fifteen players by hand. If you use it, the single image you pick is sent to our server, where a reader identifies the players in it and matches them to the real player list. We use it only to build the squad you then confirm, and we do not store the image: it is held for the length of that one request and discarded. The feature is optional, you choose the image yourself, and you can build your squad by hand instead.
- Subscription data: your Stripe customer and subscription identifiers and subscription status. We do not store your card number, expiry, or security code. Card data is collected and held by Stripe.
- Technical data: session cookies for sign in, and IP address and basic usage information used to keep the service secure and to understand aggregate traffic.
3. How we use your data and our lawful basis
Under the UK GDPR we rely on the following bases:
| Purpose | Lawful basis |
|---|---|
| Provide your account and subscription | Performance of our contract with you |
| Take payment and manage billing | Performance of our contract with you |
| Send transactional email (sign in links, receipts, service notices) | Performance of our contract with you |
| Keep the service secure and prevent abuse | Our legitimate interest in a secure service |
| Understand aggregate, privacy friendly usage | Our legitimate interest in improving the service |
| Send marketing email, where offered | Your consent, which you can withdraw at any time |
4. Who processes your data
We use a small set of carefully chosen processors. Each acts on our instructions under a data processing agreement.
| Processor | What it does |
|---|---|
| Stripe | Payment processing and subscription billing. Holds your card data; we do not. |
| Resend | Sends transactional email such as sign in links and receipts. |
| Sentry | Error monitoring so we can find and fix faults. |
| Plausible | Privacy friendly, cookieless website analytics. It does not track you across sites and sets no cookies. |
| Dynatrace | Application performance monitoring: page load times, browser errors and server health, so we can find and fix faults. It stores a session identifier in your browser. It does not run on our legal pages, does not follow you to other sites and is not used for advertising. |
| Anthropic | Reads a screenshot you choose to upload in the SharpXI app, on our instructions, so we can identify the players in it. It receives that image and nothing else about you. |
| OVHcloud | Hosting. Our servers and database are located in London, in the United Kingdom. |
Your data is hosted and processed within the UK and EU. Where a processor transfers data outside the UK or EU, that transfer is covered by an adequacy decision or by standard contractual clauses.
5. How long we keep it
We keep your account data for as long as your account is open. If you close your account we delete or anonymise your personal data within 90 days, except where we must keep records longer to meet a legal or tax obligation (billing and payment records are retained for up to six years to satisfy UK accounting and tax law). Aggregate, non identifying analytics may be kept indefinitely.
A screenshot you upload to the SharpXI planner is an exception in your favour: we do not keep it at all. It is read during the request that carries it and then discarded. Only the squad you confirm afterwards is saved to your account, and you can clear that at any time by unlinking your squad.
6. Your rights
Under the UK GDPR you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased;
- receive your data in a portable, machine readable form;
- object to, or ask us to restrict, certain processing;
- withdraw consent for marketing at any time.
To exercise any of these, email support@sharpcast.co.uk. We respond within one month. You also have the right to complain to the ICO at ico.org.uk if you are unhappy with how we handle your data.
8. Changes to this policy
We may update this policy from time to time. The date at the top of the page shows when it last changed. Material changes affecting how we use your data will be notified by email or an on site notice.