Gameweek Lab

Privacy Policy

Last updated 18/10/2026

This policy explains what personal data Gameweek Lab collects, why, and what rights you have. We keep data to a minimum: we do not sell your data, show ads or use advertising trackers.

Who is responsible

The data controller is [Your name or business name], [Postal address], Norway. Contact: support@gameweeklab.com.

What we collect and why

  • Account data: your email address, an encrypted (hashed) password if you set one, and your name and profile picture if you sign in with Google. We also keep technical sign-in records (such as time, IP address and browser) for security. Purpose: to give you an account and keep it secure. Legal basis: contract and legitimate interest (security).
  • Subscription data: your plan, subscription status, trial and renewal dates, and a Stripe customer reference. Card details are handled by Stripe and never reach us. Purpose: to provide Premium and handle billing. Legal basis: contract and legal obligation (accounting).
  • Your FPL team: the public FPL Team ID you enter, your squad, saved plans and settings. These are stored in your browser on your device, not on our servers. To fetch your team we request your public FPL data from the official FPL service.
  • Emails: we send emails needed for your account, such as sign-in links, confirmation and password reset. If you email support@gameweeklab.com, we keep the conversation to help you. Legal basis: contract and legitimate interest.
  • Server logs: our hosting provider keeps short-lived technical logs (such as IP address and pages requested) to run and protect the service. Legal basis: legitimate interest.

Who we share data with

We use these providers to run Gameweek Lab. They process data only on our instructions:

  • Supabase — accounts and database
  • Stripe — payments and subscriptions
  • Vercel — website hosting
  • Resend — sending account emails
  • ImprovMX — forwarding emails sent to support@gameweeklab.com
  • Google — only if you choose to sign in with Google

Some of these providers may process data outside the EU/EEA, for example in the United States. Where that happens, transfers are protected by the EU Standard Contractual Clauses or the EU–US Data Privacy Framework. We never sell or rent your personal data.

How long we keep data

  • Account and subscription data: for as long as you have an account. When you delete your account, we delete this data within 30 days.
  • Billing records: 5 years, as required by Norwegian accounting law (bokføringsloven).
  • Support emails: up to 2 years after the conversation ends.
  • Data stored in your browser stays on your device until you clear it or reset the app.

Cookies and browser storage

We use only essential cookies to keep you signed in, and browser storage to save your squad and settings on your device. We do not use analytics or advertising cookies, so we do not ask for cookie consent.

Your rights

You can ask to see, correct, export or delete your personal data, object to or restrict how we use it, and withdraw consent where we rely on it. Email support@gameweeklab.com and we will reply within 30 days. If you think we handle your data wrongly, you can complain to the Norwegian Data Protection Authority (Datatilsynet, datatilsynet.no).

Children

Gameweek Lab is not intended for children under 13, and we do not knowingly create accounts for them.

Changes

We may update this policy. If we make significant changes, we will tell you by email or in the app. The date at the top shows when it was last updated.