PRIVACY POLICY

Last Man Standing Planner is run by:

This policy explains:

• what data we collect
• why we collect it
• how we use it
• how long we keep it
• your rights

We use your data to:

• run the platform and games
• manage your account
• enforce game rules
• send essential emails and notifications (game updates, results, account activity)
• improve the product
• monitor performance and fix issues

We rely on:

• contract: to provide the service you signed up for
• legitimate interests: to run, secure and improve the platform
• consent: for optional product analytics and non-essential cookies

We send emails related to your account and games, such as:

• game updates
• pick confirmations
• results and outcomes

We may send these by:

• email
• in-app notifications
• mobile app push notifications

We use cookies and similar technologies to:

• keep you signed in
• ensure the app works correctly
• understand usage (analytics)

You will be asked to accept or reject non-essential cookies before they are used.

Optional product analytics is separate from accepting our Terms and Privacy Policy. On supported native app versions, it is off until you choose to allow it after completing your profile and acknowledging the current policies. You can decline and continue using LMS Planner. We remember your choice for your account on that device; reinstalling the app or using another device may require a new choice. You can change it under Settings, Privacy, Product analytics. On the web, optional analytics follows your analytics cookie preference, which you can change using the cookie preferences control.

Web acquisition measurement also uses Google Analytics through Google Tag Manager. Cookie preferences control analytics storage; consent-mode measurement may occur without cookies where configured. Denying cookie storage does not by itself mean that no technical information is transmitted. Optional PostHog and Vercel analytics are consent-gated.

Where you allow it, PostHog receives a pseudonymous account identifier and selected usage events, such as product opens, game creation, invitation and joining actions, pick interactions, and round or completed-game views. Events may include a game identifier, season and gameweek, bounded action or failure categories, platform, environment and app version/build. Web analytics may also include sanitised page and acquisition-source information. We do not send your name, email, game name, invite code or full invite link, authentication tokens, notes or other free text, or payment identifiers to PostHog. This data is not anonymous: the account identifier can link your interactions over time.

We use optional product analytics to understand usage and where people encounter difficulties, so we can improve LMS Planner. We do not use it for advertising. Our PostHog project uses its EU hosting region. Operational crash and error diagnostics are separate from optional product analytics.

Turning analytics off stops future optional collection and clears pending native analytics requests and queues. It does not erase events already received by providers. Accepting policies does not enable analytics, and withdrawing analytics permission does not prevent normal app use. You can request deletion through Support.

We use trusted third-party providers:

• Stripe, Apple and Google (retained historical transaction handling for legacy test, review or in-flight purchases)
• Supabase (database and authentication)
• Vercel (hosting and web analytics where you consent)
• Resend (email delivery)
• Sentry (crash reporting and diagnostics)
• Consent and tag-management tools to manage cookie preferences and analytics
• Google Analytics and Google Tag Manager (web acquisition measurement and consent-mode analytics)
• Apple and Google sign-in providers if you choose those sign-in options
• Expo Push Service (mobile push notification delivery)
• PostHog (optional product analytics on supported web and native app versions, only where you consent)

These providers process data on our behalf.

We retain only the minimum transaction handling needed for historical, test, review or in-flight store records, and we do not store card details.

LMS Planner is free to use. The platform does not hold or move player funds. Players settle any entry fees with organisers directly and off-platform.

We do not sell your personal data.

Some of our service providers operate outside the UK or EU.

Where this happens, we ensure appropriate safeguards are in place to protect your data.

• accounts: kept while active
• inactive accounts: deleted after 24 months of inactivity (with notice before deletion)
• completed games: kept for up to 24 months
• logs and technical data: typically kept for up to 90 days
• account deletion requests: personal data is deleted or anonymised where applicable; limited records may be retained under the criteria in section 11 and the periods above, or where the law requires them to be kept

PostHog stores individual usage events, not just aggregate reports. Their retention follows the retention policy applicable to our PostHog service plan; it is separate from the technical-log period above. Contact Support for the applicable period or to request deletion of analytics associated with your account. Deletion requests require separate provider handling; turning off analytics or deleting account access does not by itself confirm that previously collected provider data has been erased.

You have the right to:

• access your data
• correct your data
• request deletion of your personal data
• object to certain processing
• complain to the ICO (UK data regulator)

You can submit an account deletion request at any time through our account deletion page or by emailing [email protected]. We may ask for reasonable information to verify that you own the account.

We review and handle each verified request manually, without undue delay and normally within one calendar month. Account access and personal data are deleted or anonymised where applicable. Limited records may need to remain to protect game integrity and other players' history, meet legal obligations, support fraud or security controls, or remain in backups until they are replaced under the applicable backup schedule.

A request can be made while you own or belong to an active game. Protected records may require separate review before completion. We will not delete another player's account, picks or game history, and we will explain what was deleted, anonymised or retained when the request is complete.

To request anything, contact:

[email protected]

If you have a data protection complaint:

• complain by emailing [email protected]
• we will acknowledge your complaint within 30 days
• we will investigate and keep you informed
• we will tell you the outcome

We may update this policy.

We will update the date at the top when we do.