Privacy policy

The data controller is Sideline Analytics Ltd, trading as Sideline Quant, a company registered in England and Wales under company number 17367597, registered office 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.

For any privacy question, or to exercise the rights in section 8, contact support@sidelinequant.com. We are not required to appoint a Data Protection Officer and have not done so; privacy queries are handled directly by the company’s director.

If you just browse the site, we do not ask you for anything. You can use the public parts of Sideline Quant — predictions, fixtures, the optimiser, Scout posts — without an account and without telling us who you are.

The table below covers everything we process, and the lawful basis for each.

We do not collect special category data, we do not buy personal data from third parties, and we never ask for your Fantasy Premier League password — the Team ID is a public identifier and is all we need.

We run privacy-preserving product analytics, and we set no tracking or advertising cookies. There is no cookie banner because our analytics store nothing on your device and there is nothing to consent to.

We use PostHog, configured to keep data in the European Union and to run without cookies or local storage. It records which pages are viewed and a small set of product events — for example that a paid feature was offered, or that a plan was purchased — together with your approximate country, which is determined from your IP address. We use this to understand which parts of the product are useful and, specifically, whether there is enough demand in a region to start selling there. We do not use it to build advertising profiles, and we do not sell or share it for advertising.

Because nothing is stored on your device, your activity is not linked across visits unless you are signed in. If you have an account, these events are associated with your account identifier so we can understand how the product is actually used by the people paying for it. Our lawful basis is our legitimate interest in operating and improving the service; you can object at any time by emailing us, or by enabling “Do Not Track” in your browser.

The site stores a small amount of information in your browser’s local storage — your saved drafts, your rivals list, and display preferences such as table settings. This is strictly necessary to deliver features you have actively asked for, it stays on your device, and it is not used to track you. You can clear it at any time through your browser settings.

If you sign in or pay, our sign-in and payment providers set cookies that are strictly necessary for authentication and fraud prevention.

We also set one small cookie, sq-country, holding only a two-letter country code from your connection. It lasts until you close your browser and exists so we can tell you up front whether subscriptions are available where you are, rather than letting you reach a payment page that would decline. It contains nothing about you personally and is not used for tracking.

If we ever adopt an analytics configuration that stores data on your device, we will update this policy and add a consent banner before switching it on.

We do not sell your data, and we do not share it for anyone else’s marketing. We use a small number of service providers who process data on our instructions:

We may also disclose data where the law requires it, to establish or defend legal claims, or to a buyer if the business is sold — in which case this policy continues to apply to data transferred.

Payment card details never reach us. Stripe collects and processes them directly as its own controller; we only receive identifiers and status.

Some of our providers are based outside the UK, principally in the United States. Where personal data is transferred outside the UK, we rely on UK adequacy regulations where they apply, or otherwise on the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, together with the provider’s technical safeguards.

You can ask us for details of the safeguards applying to any specific transfer.

• Account data, drafts and preferences — while your account is open, and deleted within 30 days of you deleting your account.
• Anonymous rate-limit counters — under 24 hours.
• Billing and transaction records — six years from the end of the relevant financial year, because UK company and tax law requires us to keep them. This applies even after you delete your account.
• Support correspondence — up to two years after the matter is closed.
• Server logs — short-lived operational logs kept by our hosting providers, typically days rather than months.

The service runs over HTTPS throughout. Passwords are handled entirely by our sign-in provider and are never seen or stored by us. Card details are handled entirely by Stripe. Access to production systems is limited to the company’s director and protected by two-factor authentication.

No system is perfectly secure. If a breach occurs that is likely to risk your rights and freedoms, we will report it to the Information Commissioner’s Office within 72 hours and tell you without undue delay where required.

Under UK GDPR you have the right to:

• Access — get a copy of the personal data we hold about you.
• Rectification — have inaccurate data corrected.
• Erasure — have your data deleted, subject to records we must keep by law.
• Restriction — ask us to pause processing while a concern is resolved.
• Portability — receive data you gave us in a machine-readable format.
• Object — object to processing based on our legitimate interests.
• Withdraw consent — for the marketing digest, at any time, using the unsubscribe link or by emailing us. Withdrawing consent does not affect processing already carried out.

You can delete your account and its synced data yourself from your account page. For anything else, email support@sidelinequant.com. We will respond within one month and will not charge you.

We do not carry out automated decision-making that produces legal or similarly significant effects on you. Our models rank footballers, not people.

The service is not directed at children under 16, and accounts require you to be 16 or over. If you believe a child has given us personal data, contact us and we will delete it.

If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the UK supervisory authority:

Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF — 0303 123 1113 — ico.org.uk

We update this policy when our processing changes — for example when accounts, payments or analytics are switched on. The “last updated” date at the top shows the current version, and we will notify account holders by email of any change that materially affects their rights.

Sideline Quant is not affiliated with, endorsed by, or connected to the Premier League or Fantasy Premier League.