Privacy Policy

Your game progress (today's guesses and results, your Rise best score and a few display preferences) is kept in your browser's local storage. Clearing this site's data in your browser removes it.

• Guesses. When you pick a player, the site sends the player and your earlier guesses for that day to the server so it can mark your answer. The server checks them. Signed-in players' progress and results are saved to their account so they can continue on another device. Submitted daily scores are stored for the day's score comparison; guest submissions use a browser-generated identifier.
• Player searches. What you type into the player search is sent to our server. To find players who aren't in our own list, the server passes the search text on to Wikidata and TheSportsDB. It sends only the search text, nothing that identifies you. Search results are cached so repeat searches are faster.
• Your profile. If you sign in, we save a profile with your display name. We also keep your saved results, streaks, best scores and Extra Time access.

Signing in is optional. If you sign in with Google or X, we receive and store your name, profile picture and account ID from that provider. With Google we also store your email address. X doesn't share your email, so we store a placeholder in its place. We also store the sign-in tokens the provider issues. We only use these to keep you signed in and never post anything on your behalf. With X we ask only for permission to read your basic profile.

When you're signed in, we record your session's IP address and browser type to keep the session secure. They're stored with the session record, which is removed when you sign out or ask us to delete your account.

We use essential sign-in and security cookies, including HttpOnly session cookies that keep you logged in. If you play without signing in, an essential HttpOnly guest cookie holds a random identifier (lasting up to 30 days) so your progress and result for the day are kept on our server. If you then sign in on the same device, that day's guest progress moves to your account and the guest cookie is removed. The browser also keeps a local copy of your progress to display it quickly; it is cleared when you sign out. Stripe may use cookies and similar technologies on its checkout to process payments and prevent fraud. Advertising or analytics technologies, if introduced, will have separate controls and will require your consent where the law requires it.

We use Vercel Web Analytics to count page views and see which pages are popular. It uses no cookies and does not identify you: it records the page, referrer, country, and browser and device type, and identifies a visit only by a hash that resets every day. See Vercel's analytics privacy policy.

Kickoff Daily does not currently load Google Analytics. If we introduce it, we will update this policy and provide the required consent controls before enabling it. Google sign-in is separate from Google advertising and analytics.

We may introduce advertising through Mediavine (including Journey by Mediavine) and/or Google advertising services such as AdSense or Ad Manager. These are potential providers; naming them here does not mean their advertising is currently enabled.

If enabled, these providers and their advertising partners may process IP addresses, cookie or device identifiers, browser and device details, approximate location, pages viewed and interactions with ads. This can support ad delivery, measurement, fraud prevention and, where permitted, personalised advertising. They may use cookies, pixels and similar technologies and combine information across sites or devices.

Before launch, we will identify the active providers, add their required disclosures and provide consent and privacy controls. Where consent is required, optional advertising technologies will stay off until you choose to allow them. You will be able to revisit those choices through a privacy-settings link. Extra Time removes ads while you are signed in to the account that purchased it.

Read Mediavine's privacy information and Google's advertising policies, and you can manage ad personalisation in Google's ad settings.

Stripe is our payment provider for the £5.99 one-off Extra Time purchase. When checkout is available and you choose to buy, you enter payment details on Stripe's hosted checkout. Stripe processes payment and billing details and device information to complete the transaction and help prevent fraud. We do not receive or store your full card number or security code.

We send Stripe your internal account identifier and purchase details so the payment can unlock the correct account. We keep payment references, the amount and currency, purchase time and access status. Stripe handles receipts, refunds and disputes. Its processing is explained in the Stripe Privacy Policy.

We use account, game and purchase information to provide the service you request and fulfil purchases. Security and abuse prevention support our legitimate interest in protecting the site. We keep records where needed for legal and accounting obligations. Where required, optional advertising and analytics rely on your consent, which you can withdraw without affecting earlier lawful processing.

To stop spam and abuse, the server briefly counts requests per IP address. If someone goes over the limit, that event (including the IP address) is written to our hosting provider's server logs, which are kept for a limited time.

Kickoff Daily runs on Vercel (hosting) and a managed PostgreSQL database provider. Sign-in is handled by Google or X, depending on which you choose. Player searches reach Wikidata and TheSportsDB as described above. Stripe handles payments. If advertising is enabled, Mediavine, Google and their partners may also receive the information described above. Providers may process data outside the UK or your country, using applicable transfer safeguards. We do not sell account or payment records. Future advertising-related sharing may qualify as a sale or sharing under some US privacy laws; the applicable opt-out controls and disclosures will be provided before launch.

Account data is kept for as long as you have an account. Sign-in sessions expire automatically. If you ask us to delete your account, we remove your account, sessions, profile and any results saved to it, subject to records we must retain. We may retain limited purchase records for accounting, legal obligations and resolving refunds or disputes for as long as needed for those purposes. Stripe has its own retention rules.

You can clear the data on your device yourself at any time. To access, correct, export or delete the data linked to your account, email kickoffdaily.support@gmail.com from the email address on your account, or tell us which Google or X account you used. We may ask you to confirm it's you before we make changes. Depending on where you live, you may also have rights to object to or restrict processing, withdraw consent, and opt out of targeted advertising or sale/sharing where applicable. If you're in the UK or EU, you can complain to your data protection authority, including the UK's Information Commissioner's Office.

Kickoff Daily isn't aimed at children under 13 and doesn't knowingly collect their personal data. If you think a child has created an account, email us and we'll delete it.

If this policy changes, we'll post the new version here with a new effective date. If the changes are significant, we'll also put a notice on the site.

Questions about privacy: kickoffdaily.support@gmail.com. See also our Terms of Service.