Privacy notice
Last updated: 12 September 2026
Who we are
Fulltime Frenzy is operated by HIYO BV (VAT BE1024.610.703), a company registered in Belgium. HIYO BV is the data controller for everything described here.
The quickest way to reach us about your data — access, correction, deletion, or anything else — is the form at the bottom of this page.
What we collect, why, and for how long
| What | Why | Legal basis | Kept for |
|---|---|---|---|
| Email address and password (or Google sign-in) | Creating and securing your account | Performance of a contract | Until you delete your account |
| Display name, crest or photo, favourite club, country, tagline | Your player identity and the leaderboard | Performance of a contract | Until you delete your account |
| Predictions, line-ups and points | Running and scoring the game | Performance of a contract | Until you delete your account |
| Notification settings, in-app notifications, push subscriptions | Sending the alerts you asked for | Consent (you can switch each one off) | Until you turn them off or delete your account |
| Contact messages and feedback (with the page you were on and your browser type) | Answering you and fixing bugs | Legitimate interest in supporting players | 24 months after the message is handled |
| Email delivery log (recipient, template, status) | Proving an email was sent and debugging delivery | Legitimate interest in a reliable service | 12 months |
| Share-button clicks (network, page, account if signed in) | Seeing which pages get shared | Legitimate interest in improving the app | 12 months |
| IP address and browser string at the moment of a form submission | Blocking spam and abuse | Legitimate interest in security | Held in memory only, minutes |
Fixture and result data comes from public football data sources and is not personal data.
What we never do
- We do not sell or rent your data.
- We do not run advertising or third-party tracking scripts.
- We do not profile you or make automated decisions with legal effects.
- We only use browser storage for the app to work — your guest picks, tutorial progress, dismissed banners and your sign-in session. No advertising cookies, so no cookie banner.
Who processes data for us
- Our hosting, database and authentication provider, which stores the app data.
- Our email provider, which delivers account and game emails.
- Google, if you choose to sign in with a Google account.
- Your browser's push service (Apple, Google or Mozilla), if you switch on push notifications.
Data is hosted in the European Union. Where a provider processes data outside the EU, it does so under the European Commission's standard contractual clauses.
Visibility to other players
Your display name, crest, country and total score appear on the public leaderboard and on your player card. Individual predictions become visible to other players only after a matchday has locked or been scored. Your email address is never shown to anyone else.
Your rights
You can access, correct, delete, restrict or object to the processing of your data, and receive a portable copy of it. Two of these are built into the app:
- Download my data — a complete machine-readable file of everything tied to your account.
- Delete my account — removes your profile, predictions, points, notifications and leaderboard entry immediately. Support messages and delivery logs are stripped of your identity and expire on the schedule above.
Where processing is based on consent, you can withdraw it at any time without affecting what happened before. For anything else, use the form below; we reply within 30 days.
You also have the right to lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données), Drukpersstraat 35, 1000 Brussels.
Security
Access to player data is enforced at the database level: your predictions, profile details and notifications can only be read by you (and, for support purposes, by an administrator). Traffic is encrypted, and the site sends browser hardening headers that block embedding and third-party scripts.
Children
Fulltime Frenzy is not intended for children under 16. If you believe a child has created an account, contact us and we will remove it.
Changes
If we change this notice materially, we will announce it in the app. The date at the top always reflects the current version.
Contact us
Questions about your data, or a request you want us to act on? Send it here.