Who we are
Rate My Club is run by Flavr Web Dev Ltd (company number 14994358, registered in England and Wales), 161 Cicero Crescent, Milton Keynes, Buckinghamshire, MK11 4DR. We are the controller of your personal data. Contact: support@flavrapps.com or the contact form.
What we collect and why
| Data | Why | Lawful basis |
|---|---|---|
| Your email address, or an Apple or Google account ID (and the email they share, if any) | To sign you in and, if you ask, to send full-time reminders | Contract; consent for reminders |
| Your club, your ratings, verdicts and season reports, with dates | To run the service and calculate club averages | Contract |
| A keyed hash of your network address, stored with each rating and in short-lived rate-limit counters (our database doesn’t store the address itself), and when your account was created | Rate limits, spotting brigading and spam, security | Legitimate interests |
| Standard web server logs: your network address, browser type and the pages you request | Security and fixing faults | Legitimate interests |
| A session cookie or app token | To keep you signed in | Contract |
| A push token (app only, if you allow notifications) | To send “Rate today’s game” notifications | Consent (you can turn them off in the app or your phone’s settings) |
| Messages you send us | To reply and to deal with reports | Legitimate interests |
| Share counts (which card format you shared, not where to) | To understand what fans share | Legitimate interests |
We don’t ask for your name, age, location or phone number. Which club you support isn’t special category data. We don’t use your data for advertising and we don’t sell or rent it.
What other people can see
Only club-level numbers: averages, counts and the share of each verdict. Nobody else can see your individual ratings, your email or your club. A share card you create shows your own ratings, but only if you choose to share it.
Who processes data for us
- Hetzner Online (hosting, Germany).
- Amazon Web Services: Simple Email Service sends our emails (London region).
- Cloudflare: DNS and, if switched on, the Turnstile bot check on the website.
- Apple and Google, only if you choose to sign in with them.
- Expo (650 Industries, USA) delivers app push notifications, if you allow them. Transfers to the US rely on the UK International Data Transfer Addendum or the UK Extension to the EU–US Data Privacy Framework.
How long we keep it
- Your account, club and ratings: until you delete your account. Deleting removes your ratings from every average.
- Guest accounts with no activity for 13 months are deleted automatically.
- Sign-in codes and links: deleted after 7 days. Network hashes used for rate limits: 2 days. The network hash stored with a rating is kept with that rating and goes when the rating does.
- Web server logs: 14 days.
- Messages to us: up to 2 years, then deleted.
- Backups: up to 7 days.
Your rights
You can download your data and delete your account from your account (or in the app under Settings). You can also ask us to correct your data, object to processing based on legitimate interests or restrict it. Write to us and we’ll reply within a month. If you’re unhappy, you can complain to the Information Commissioner’s Office (ico.org.uk).
Children
Rate My Club is for people aged 13 and over. We don’t knowingly collect data from younger children; if you think a child under 13 has an account, tell us and we’ll delete it.
Cookies
We only use cookies that are strictly necessary. See the cookie notice.
Changes
If we change this policy in a way that matters, we’ll say so on the site and, if you’ve given us an email, by email.