Privacy Policy

In Short: The details you give us when you sign up and play, and some information the app collects automatically to work properly, send notifications, fix crashes and show adverts.

Information you give us

• •Account details. Your email address and password, or the details we receive when you sign in with Apple, Google or Facebook (see section 8). Passwords are handled by our sign-in provider and are never visible to us.
• •Profile. Your first name, surname, nickname, profile photo, date of birth and gender. We use your date of birth and gender to check eligibility for age- and gender-restricted competitions, and to show your age on your profile.
• •League and team activity. The leagues, divisions and teams you join or run, team crests and photos you upload, your availability settings, the fixtures, results and frame scores you submit or approve, and the statistics, badges and XP that come from them.
• •Purchases. Which subscriptions (Core or Pro) and league, team or player registrations you buy, when, and their status. Payments are taken by Apple, Google or, on our website, Stripe. We never receive your full card details.
• •Reports. If you report a player or team, we store who made the report (your name and player ID), the reason and any details you add, and a copy of the reported name and photo as they were at the time.
• •Messages to us. Anything you send when you contact us for help.

Information the app collects automatically

• •Device and notification identifiers. The app creates a random ID for your device, kept in your device’s secure storage, and, if you allow notifications, a push notification token. Both are stored against your account so notifications reach the right device.
• •Advertising identifier. Google AdMob, our advertising partner, may read your device’s advertising ID (the IDFA on iPhone, or the Advertising ID on Android). On iPhone it can only do so if you allow tracking, and we never ask anyone under 18. See section 5.
• •Advertising and usage data. AdMob collects information about the adverts you see and tap, and performance and diagnostic data about how adverts load. We also record when you tap a league sponsor’s link (once per sponsor per day) so we can tell sponsors how many people clicked in total.
• •Approximate location. AdMob may estimate your approximate location (such as your town or region) from your IP address to choose relevant adverts. The app itself does not access your device’s GPS location.
• •Crash and diagnostic data. If the app crashes or hits an unexpected error, our crash-reporting provider, Sentry, receives a report with technical details such as the error, app version, device model and operating system. Reports are linked to your player ID so we can investigate, but they never include your name, email address or other contact details.
• •Photos. The app only accesses your photo library if you choose to upload a profile photo or team crest, and only the photo you pick is uploaded.

For what our website stores in your browser, see section 6.

We do not collect special category information, such as information about your health, ethnicity, religious beliefs or sexual orientation.

Our use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In Short: To run your account and leagues, take payments, send the notifications you ask for, keep the app reliable and secure, and show adverts to members on the Free and Core plans.

• •To create and manage your account and let you sign in.
• •To run leagues and competitions: fixtures, results, standings, statistics, badges and leaderboards, including checking eligibility for age- and gender-restricted competitions.
• •To show your profile and results to other players in your leagues (see section 4 for what they can see).
• •To send the push notifications you turn on, such as match reminders and result approvals, and emails about your account.
• •To process payments and subscriptions, unlock the features you have paid for and remove adverts for Pro members.
• •To show adverts to Free and Core members, tailored to you only if you’re 18 or over and agree (see section 5).
• •To report total sponsor link clicks to league sponsors, without saying who clicked.
• •To review reports about players and teams, block offensive names, and act against abuse.
• •To find and fix crashes and errors, and to keep the Services secure and prevent fraud and misuse.
• •To respond to your messages and to meet our legal obligations.

In Short: We only process your personal information when UK data protection law gives us a valid reason to.

• •Contract. Most of what we do, such as running your account and leagues, sending the notifications you turn on and processing your payments, is necessary to provide the Services you have signed up for.
• •Consent. We rely on your consent for tailored (personalised) adverts and tracking, for push notifications and for access to your photos. You can withdraw consent at any time (see sections 5 and 13).
• •Legitimate interests. We rely on our legitimate interests to show non-personalised adverts that help keep the app free, to report crashes and errors, to count sponsor clicks, to review reports and filter offensive names, to keep the Services secure and to improve them. We only do so where these interests are not outweighed by your rights, and you can object (see section 13).
• •Legal obligations. We keep some records, such as payment records, because the law requires it, and we may share information where required by law.
• •Vital interests. Rarely, we may process information where it is necessary to protect someone’s life or safety.

In Short: Other players in your leagues see your public profile and results. We share information with the service providers that run the app, and with Google for advertising. We never sell your personal information.

Other users

Break Room is built around leagues, so some of your information is visible to other signed-in users: your name, nickname, profile photo, teams, results, statistics, badges, XP and your age in whole years. Your exact date of birth and gender are only visible to you and to the captains and league admins of the teams and leagues you belong to or ask to join, so they can check eligibility. Your email address is never shown to other users, and people who are not signed in cannot see player profiles.

Service providers

These companies process information on our behalf, under contracts that only allow them to use it to provide their service to us:

• •Supabase — database, sign-in and file storage (servers in London, UK).
• •Expo — delivering push notifications.
• •Sentry — crash and error reporting.
• •RevenueCat — managing subscriptions and purchases.
• •Apple and Google — app distribution and in-app payments through the App Store and Google Play.
• •Resend — emailing report alerts to Break Room staff. An alert includes the report details and the name and player ID of whoever made it, but never their email address.
• •Stripe — payments made on our website.
• •Vercel — website hosting and cookieless website analytics.

Advertising and sign-in partners

Google (AdMob) receives the advertising data described in section 5 and uses it under its own privacy policy. If you sign in with Apple, Google or Facebook, that company handles the sign-in under its own privacy policy (see section 8).

Other situations

• •Reports. Reports are reviewed by Break Room staff. When a player or team is reported, the admins of the leagues they belong to are also alerted, but only with the name reported and the reason. The name and player ID of whoever made a report are visible to Break Room staff only. They are never shared with the person reported, or with league admins.
• •Sponsors. League sponsors are told how many people clicked their link in total, never who clicked.
• •Legal requirements. We may disclose information where required by law, or to protect our rights or the safety of others.
• •Business transfers. We may transfer information as part of a merger, sale of assets, financing or acquisition of all or part of our business. We would tell you before your information became subject to a different privacy notice.

In Short: Free and Core members see adverts from Google AdMob. Under-18s only ever see non-personalised adverts. If you’re 18 or over, we ask for your permission before any adverts load, and adverts are only tailored to you if you agree. Pro members see no adverts.

Members on the Free and Core plans see banner adverts provided by Google AdMob. Pro members see no adverts.

Under 18s

If you’re under 18, you only ever see non-personalised adverts. Before any adverts are requested, the app tells Google that you are under the age of consent, and you’re never shown Apple’s tracking prompt or Google’s consent form. We treat anyone whose age we don’t know yet the same way, for example if you’re not signed in or haven’t added your date of birth. Your age comes from the date of birth on your profile, and on a shared device these rules follow whoever is signed in.

If you’re 18 or over, we ask first

• •On iPhone, Apple’s “Allow Break Room to track your activity across other companies’ apps and websites?” prompt appears first. Our explanation says: “This lets us show you adverts that are more relevant to you. If you choose not to allow it, you will still see adverts but they will not be tailored to you, and the app works exactly the same.”
• •In the UK, EEA and Switzerland, Google’s consent form then asks whether Google and its advertising partners may use your data for personalised adverts and related purposes.

Adverts are only tailored (personalised) to you if you allow tracking on iPhone and, where Google’s form appears, you consent there too. Otherwise you see non-personalised adverts. Google may still use limited data for non-personalised adverts, for example to limit how often you see the same advert, to measure adverts in aggregate and to detect fraud.

What AdMob collects

Depending on your choices, AdMob may collect your device’s advertising ID, information about the adverts you see and tap, your approximate location based on your IP address, and performance and diagnostic data. When you allow tracking, Google may combine this with information from other apps and websites to tailor adverts to you. Apple calls this “tracking”, and our App Store privacy label says so. To learn how Google uses this information, see How Google uses information from sites or apps that use our services.

Changing your choice

• •iPhone: Settings → Privacy & Security → Tracking, then turn off Break Room.
• •In the app: if you’re 18 or over and the law requires it, Settings → Advertising Choices reopens Google’s consent form so you can change your answer.
• •Android: delete or reset your advertising ID, or opt out of personalised adverts, in your device settings (usually Settings → Privacy → Ads, or Settings → Google → Ads).
• •Go ad-free: upgrading to Pro removes adverts entirely.

Crash reports (Sentry) and sponsor click counts are never used for advertising or shared with advertisers.

In Short: Our website only stores what it needs to work and to remember your choices. It has no advertising cookies or cross-site tracking, and its analytics don’t use cookies at all.

Cookies and similar technologies (such as your browser’s local storage) are small pieces of information saved on your device. This section covers our website at break-room.uk. Advertising in the mobile app is covered in section 5. Here is everything the website stores, and why:

• •Signing in. When you log in, our sign-in provider (Supabase) keeps your session in your browser’s local storage so you stay signed in. It is removed when you sign out.
• •Your preferences. Your light or dark theme, your accent colour and, if you’re signed in, the role you last selected are saved in local storage so the site looks and works the way you left it.
• •Offline access. Our service worker saves copies of our pages and files on your device so the site loads quickly and can still show a page when you’re offline. These copies don’t contain personal information.
• •Payments. If you choose to buy a subscription on our website, our payment providers (RevenueCat and Stripe) may set cookies during checkout to process your payment securely and prevent fraud.

Analytics. We use Vercel Web Analytics to understand how many people visit our website and which pages are most useful. It doesn’t use cookies or store anything on your device, and it doesn’t follow you across other websites. It processes limited details about each visit, such as the page viewed, the referring website, your browser and device type, and your country, and reports them to us in aggregate.

Our website has no advertising cookies, social media tracking pixels or cross-site tracking. If you choose to sign in with Google or Facebook, those providers may set their own cookies on their own sites (see section 8). Because everything listed above is either needed for something you’ve asked us to do or remembers a choice you’ve made, we don’t ask for cookie consent. If we ever add anything to the website that needs your consent, we will ask you first and update this notice.

You can clear or block cookies and site data at any time in your browser’s settings, usually under “Privacy” or “Site settings”. If you do, you’ll be signed out and your theme preferences will reset, but the rest of the website will keep working.

In Short: We are not responsible for what happens to information you share with other websites, including sponsors’ and advertisers’ websites.

The Services link to other websites, such as league sponsors’ websites and the websites of advertisers whose adverts you tap. We don’t control these websites and are not responsible for how they handle your information. Please read their privacy notices before giving them any personal information.

In Short: If you sign in with Apple, Google or Facebook, we receive basic profile information from them.

You can sign in with your Apple, Google or Facebook account instead of a password. When you do, we receive basic profile information from that company, usually your name, email address and profile picture. Apple lets you hide your email address, in which case we receive a private relay address instead.

We only use this information as described in this notice. We don’t control how Apple, Google or Facebook use your information, so please read their privacy notices.

In Short: Our main database is in the UK. Some of our providers process information in other countries, with legal safeguards in place.

Our database and file storage are hosted in London, UK. Some of our providers and partners, including Google, Apple, Meta, Sentry, RevenueCat, Expo, Resend, Stripe and Vercel, may process information in the United States or other countries. Where this happens, we rely on the safeguards UK data protection law provides for these transfers, such as UK adequacy regulations (including the UK–US data bridge) or the UK’s International Data Transfer Agreement or Addendum to the EU Standard Contractual Clauses.

In Short: We keep your information while you have an account, and delete or anonymise it when it’s no longer needed, unless the law requires us to keep it.

• •Account and profile information is kept while you have an account. When you delete your account, your personal details are permanently removed.
• •Match results and statistics may be kept in anonymised form after you delete your account, so past league tables and results stay accurate. They no longer identify you.
• •Reports are kept for as long as we need them to deal with the problem and keep users safe. Copies emailed to us stay in our inbox, and our email provider keeps delivery records for a limited period. If you delete your account, your profile is anonymised, so reports you made no longer point to a named profile. Report emails we received earlier may still show your name.
• •Device IDs and push tokens are deleted when you sign out on that device or delete your account.
• •Crash reports are kept by Sentry for a limited period, then deleted automatically.
• •Payment records are kept for as long as UK tax and accounting law requires, normally up to six years.
• •Advertising data collected by Google is kept under Google’s own retention policies.

In Short: We use technical and organisational measures to protect your personal information.

Information is encrypted in transit between the app or website and our servers. Access to the database is restricted so each person can only read what they are allowed to see, and your sign-in session in the app is kept in your device’s secure storage. However, no system is completely secure, so we cannot guarantee that your information will never be accessed without permission. Please keep your password safe and tell us straight away if you think your account has been compromised.

In Short: You must be at least 13 years old to create a Break Room account, and under-18s never see personalised adverts.

The app requires you to be at least 13 years old to sign up, and we don’t knowingly collect personal information from children under 13. If you believe a child under 13 has given us personal information, contact us at drydenjamie@gmail.com and we will delete it.

If you’re aged 13 to 17, you only ever see non-personalised adverts, and you’re never asked for permission to track you or to use your data for personalised adverts (see section 5). Your exact date of birth is only visible to you and to the captains and league admins of your teams and leagues (see section 4).

In Short: Under UK data protection law you have rights over your personal information, and you can complain to the Information Commissioner’s Office (ICO).

You have the right to:

• •Access the personal information we hold about you.
• •Have inaccurate information corrected.
• •Have your information deleted.
• •Restrict how we use your information.
• •Object to processing based on our legitimate interests.
• •Receive your information in a portable format (data portability).
• •Not be subject to decisions based solely on automated processing that significantly affect you. We don’t make any.

Withdrawing consent. Where we rely on your consent, you can withdraw it at any time. For adverts, see section 5. For notifications or photo access, use your device’s settings. Withdrawing consent doesn’t affect processing that happened before.

To exercise any of these rights, email us at drydenjamie@gmail.com. We will respond within one month. If you’re unhappy with how we handle your information, you can complain to the Information Commissioner’s Office at ico.org.uk or by calling 0303 123 1113. We’d appreciate the chance to sort it out first, so please contact us before going to the ICO.

Some web browsers have a “Do Not Track” (DNT) setting. There is no agreed standard for responding to it, so our website does not currently respond to DNT signals. Our website does not track you across other websites anyway (see section 6).

In the app, we follow your iPhone’s tracking setting and the choices you make in Google’s consent form (see section 5).

In Short: Yes, we will update this notice when our practices change or the law requires it.

We update this notice from time to time, and the “Last Updated” date at the top shows when it last changed. If we make significant changes, we will let you know, for example with a notice in the app or on our website.

If you have questions or comments about this notice, email us at drydenjamie@gmail.com or write to us at:

Jamie Dryden (Break Room)
11 Broomylinn Pl, Eastfield Grange
Cramlington, England NE23 2SJ
United Kingdom

• •Review and update: you can view and edit your name, nickname and photo in the app at any time. Changes to your date of birth and gender are limited to keep restricted competitions fair, and the app shows how many changes you have left.
• •Delete your account: in the app, go to Settings → Sign-in & Security → Delete Account. This permanently removes your personal details and cannot be undone. You can also follow the steps on our Delete Account page.
• •Get a copy of your data: email us at drydenjamie@gmail.com.