Legal

Privacy Policy

Last updated: May 2026 · Grandstand Games

The short version: We collect your name and email address when you register. We only use it to run your games and let you know about new games and features. We never sell your data. You can delete your account at any time.

1. Who We Are

Grandstand Games operates the website grandstandgames.co.uk ("the Platform"), a free-to-use online sweepstake and prediction game service. When this policy refers to "we", "us" or "our", it means Grandstand Games.

For any privacy-related queries, contact us at: hello@grandstandgames.co.uk

2. What Information We Collect

Information you provide to us

Account registration: Your name, email address, and a password (stored securely as a one-way hash — we cannot see your password).
Game participation: Any player names you add to sweepstakes you host. These are names you enter and may be pseudonyms.

Information collected automatically

Session cookies: Used to keep you logged in between pages. These are essential to the service and cannot be turned off. They expire when you close your browser or after 7 days.
Basic usage data: We may log errors and basic server activity (such as which pages were accessed) for technical troubleshooting only. This is not used for marketing or analytics.

We do not use Google Analytics, Facebook Pixel, or any third-party advertising or tracking tools.

3. How We Use Your Information

We use your information for the following purposes:

To create and manage your account
To allow you to host and participate in games on the Platform
To send you occasional emails about new games launching on Grandstand Games
To send you reminders about upcoming events relevant to games you've played (e.g. a results update after an event)
To respond to any queries you send us

We will never send you marketing emails from third parties. We will never sell, rent or share your personal data with any external organisations.

4. Our Legal Basis for Processing (UK GDPR)

Under UK GDPR, we rely on Legitimate Interests as our legal basis for sending you game-related updates. We believe it is reasonable to contact users who have registered on a games platform about new games and relevant updates on that same platform. This is always directly relevant to why you signed up.

You can opt out of these communications at any time by emailing us or by clicking unsubscribe in any email we send you. Opting out does not affect your account.

For processing necessary to provide the service itself (account management, game operation), our legal basis is Contract — processing is necessary to deliver the service you signed up for.

5. How Long We Keep Your Data

Account data: Kept for as long as your account is active. If you delete your account, your personal data is deleted within 30 days.
Game data: Game results and leaderboards may be retained for historical reference even after you leave a game, but without your personal information attached.
Server logs: Kept for a maximum of 30 days for technical troubleshooting, then deleted automatically.

6. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

Right to access: You can request a copy of the personal data we hold about you.
Right to rectification: You can update your name and email address directly in your account settings.
Right to erasure: You can request deletion of your account and all associated personal data.
Right to object: You can opt out of game-related email communications at any time.
Right to data portability: You can request your data in a machine-readable format.

To exercise any of these rights, contact us at hello@grandstandgames.co.uk. We will respond within 30 days.

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

7. Data Security

We take reasonable technical measures to protect your data, including:

All passwords are hashed using bcrypt — we cannot access or recover your password
All connections to the Platform are encrypted via HTTPS/SSL
Database access is restricted to the application server only

No system is 100% secure, but we take your data security seriously and will notify you promptly in the event of any breach that affects your personal data.

8. Cookies

We use essential session cookies only. For full details, see our Cookie Policy.

9. Children

Grandstand Games is intended for users aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a child has registered on the Platform, please contact us and we will delete the account.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Significant changes will be communicated to registered users by email.

11. Contact

For any privacy-related questions or to exercise your rights:
Email: hello@grandstandgames.co.uk
Website: grandstandgames.co.uk