Privacy Policy

Topflight Fantasy Football

Last updated: 21 July 2026

1. Who we are

Topflight Fantasy Football (“Topflight”, “we”, “us”, “our”) is operated by Master of None Ltd, a company registered in England and Wales (company number 16192559), with its registered office at 29a High Street, West Wickham, England, BR4 0LP.

For the purposes of UK data protection law, Master of None Ltd is the data controller for the personal data described in this policy.

If you have any questions about this policy or how we handle your personal data, contact us at hello@topflightff.com.

2. What this policy covers

This policy explains what personal data we collect when you use our marketing website at topflightff.com and our game at play.topflightff.com (together, the “Service”), why we collect it, who we share it with, and the rights you have.

3. The personal data we collect

We keep data collection to the minimum needed to run the game. We collect:

Information you give us

• Account details: your email address, your name or chosen display name, and the name(s) you give your team(s).
• Your password, which is stored only in a securely hashed form — we never see or store it in plain text.
• Any messages you send us, for example emails to hello@topflightff.com.

Information we collect automatically

• A device token used to deliver push notifications, if you turn notifications on.
• Basic technical and usage data, such as your device type, app version, and how you interact with the Service, used to keep it working and improve it.
• Cookies and similar technologies on our website (see section 7).

Information we do not collect

• We do not sell your personal data to anyone, ever.
• We do not run third-party advertising or behavioural ad tracking.
• We do not ask for payment details, because Topflight is free to play with no in-app purchases.

4. How we use your data, and our lawful basis

We only use your personal data where the law allows. The main ways we use it, and our lawful basis for each under UK GDPR, are:

• To provide the game (performance of a contract): creating and managing your account, and running leagues, auctions and scoring.
• To operate your account (performance of a contract): sending you service emails such as account confirmations, password resets and league invites.
• To deliver features you opt into (consent): sending push notifications you have enabled, and setting analytics cookies on our website if you accept them.
• To keep the Service secure and improve it (legitimate interests): preventing abuse, understanding how the Service is used so we can develop it, and responding to your messages and support requests.

Where we rely on legitimate interests, we have considered your rights and only proceed where our interests do not override them. You can object to this processing at any time (see section 10).

5. Team names, leagues and other users

Topflight is a social game played in small, closed groups. The name you give your team, and your activity within a league (bids, squad, points), are visible to the other members of the leagues you join. Please choose team names that you are comfortable sharing with your league and that follow our acceptable-use rules.

6. Who we share your data with

We use a small number of trusted service providers (“processors”) to run the Service. They act only on our instructions and are bound by contracts requiring them to protect your data:

• Supabase — hosts our database and manages accounts and authentication. Hosted in the United Kingdom (London).
• Resend — sends our transactional emails. Based in the United States.
• Google (Firebase Cloud Messaging) — delivers push notifications. Based in the United States.
• Vercel — hosts our marketing website, topflightff.com. Based in the United States.
• Google (Google Analytics) — measures how our marketing website is used, only where you have accepted analytics cookies. Based in the United States.
• Microsoft (Microsoft Forms) — collects the email addresses submitted through our waitlist form. Based in the United States.

We may also disclose personal data where we are legally required to (for example, to comply with a court order), or to protect the rights, safety or property of Topflight, our users or others.

Note: our AI-generated scouting reports are produced from publicly available football data about players, not from your personal data, so the AI provider does not process information about you.

7. Cookies

Our marketing website uses essential cookies, which are needed for the site to function, and analytics cookies, which are only set if you accept them through our cookie banner. You can change your choice at any time using the “Cookie settings” link in the footer. The game at play.topflightff.com uses only what is necessary to keep you signed in and the app working.

8. International transfers

Some of our providers (Resend, Google, Vercel and Microsoft) are based in the United States, which means your data may be transferred outside the UK. Where this happens, we make sure appropriate safeguards are in place — such as certification under the UK Extension to the EU-U.S. Data Privacy Framework, the UK International Data Transfer Agreement, or the EU Standard Contractual Clauses with the UK Addendum — so that your data receives an equivalent level of protection.

9. How long we keep your data

We keep your personal data for as long as your account is active. If you delete your account, we delete or anonymise your personal data within a reasonable period afterwards, except where we need to keep certain information to comply with a legal obligation, resolve disputes, or enforce our terms. Records of historical league results may be retained in anonymised or team-name-only form as part of the game’s history.

10. Your rights

Under UK data protection law you have the right to:

• access the personal data we hold about you;
• ask us to correct inaccurate data;
• ask us to delete your data;
• restrict or object to how we use it;
• request portability of data you provided to us;
• withdraw consent at any time, where we rely on it (for example, push notifications or analytics cookies).

To exercise any of these, email hello@topflightff.com. We will respond within one month.

If you are unhappy with how we have handled your data, you can complain to the UK’s regulator, the Information Commissioner’s Office (ICO) at ico.org.uk. We would appreciate the chance to resolve it with you first.

11. Children

Topflight is not intended for children under 16. You must be at least 16 years old to create an account. We do not knowingly collect personal data from anyone under 16. If you believe someone under 16 has created an account, please contact us at hello@topflightff.com and we will remove it.

We recognise that some of our users are aged 16 or 17. We keep collection minimal, apply privacy-protective defaults, and do not sell data, profile users for advertising, or use nudge techniques.

12. Changes to this policy

We may update this policy from time to time. If we make significant changes, we will let you know through the Service or by email. The “last updated” date at the top shows when it was last revised.

13. Contact us

Master of None Ltd 29a High Street, West Wickham, England, BR4 0LP Email: hello@topflightff.com