This explains what Got Game collects, why, who can see it, how long we keep it, and what you can do about it. It was written from the database, not from a template, and where something is awkward it says so.
1. The short version
- We need your mobile number, because it is how you sign in.
- We need your location, because the whole app is games near you. Only while you are using it — never in the background.
- We ask your date of birth once, to check you are 18 or over. We keep it and never show it to anybody.
- Other players see your name, photo, bio, level and the area you play in — not your address.
- If you enter one of our leagues, your name and points are on its table, and the final table is kept.
- Every photo you add is checked by Google for sexual or violent content before anybody else can see it. Google does not keep it.
- If you pay or get paid in the app, Stripe handles the card and bank details. We never see your full card or bank account number.
- We do not sell your data, we do not run ads, and there is no advertising or tracking SDK in the app.
- You can delete your account from inside the app, and it is a real deletion.
2. Who we are
Got Game is operated by Hype & Swagger Ltd, a company registered in England and Wales, which is the data controller for everything described here.
Hype & Swagger Ltd20 Wenlock Road
London N1 7GU
United Kingdom
For anything about your data — a question, a correction, a copy of what we hold, or a deletion — email support@gotgamenow.com. That address reaches us, and it is the right one for every kind of contact. Paul Caruana is the person responsible for data protection here.
3. What we collect, and why
What you give us
| What | Why | Who can see it |
|---|---|---|
| Mobile number | It is your login. We send a one-time code to it. | You and us. It is never shown on your profile or to another player. |
| Date of birth | To enforce the 18+ minimum. | Nobody. It is kept in a separate restricted table, and only a decade band is ever displayed. |
| Name and short name | So people know who turned up. | Any signed-in player. |
| Email address | Optional. It lets you sign in with an emailed code if you lose your number. | Not shown on your profile. |
| Profile photo | Optional. So people recognise you at the court. | Any signed-in player. |
| Bio, the level you say you are, where it came from | So games and partners suit you. | Any signed-in player. |
| Photos you add to a game | Optional. | Only people who can see that game. |
| Documents you add to a club you run | So the club's members can read its rules and policies. A PDF is kept by us; a link points to the page you chose. | That club's members. |
| A club's photo and contact email, if you run a club and add them | Optional. The photo so players recognise the club; the email so there is a way to reach whoever runs it. | The photo: anyone. The email: the club's admins, and us. |
| Messages you send | To deliver them. | The people in that conversation. Not end-to-end encrypted — see §9. |
| Photos you send in a chat | Optional. So the people in that conversation can see them. | The people in that conversation. Not end-to-end encrypted — see §9. |
What the app records as you use it
| What | Why | Who can see it |
|---|---|---|
| Your location | To show games near you and to place a game you create on the map. | Other players see a place name and a distance. See §5. |
| Games you host, join, save or leave | It is the product. | People who can see those games. |
| Clubs and venues you save | So you can find them again under Favourites. | You and us. Nobody else can tell who saved a club. |
| Clubs and crews you are in | It is the product. | Clubs: any signed-in player can see which clubs you are in, and how many, on your profile; only members see inside a club. Crews: your crew. |
| When you joined | Your profile shows the year, as “Member since 2025”. | Any signed-in player. |
| Payments you make | So you can see what you have paid and get refunds, and so the organiser knows who has paid. We keep the game or event, the price, the booking fee, when you paid, any refund, whether you paid in the app or in cash, and the type and last four digits of your card, which Stripe tells us. | You, the organiser of that game or event, and us. |
| Payouts, if you organise | So we can pay you. We keep whether your payout set-up with Stripe is finished, what you have been paid and when, and your bank’s name with the last two digits of the account, which Stripe tells us. Stripe holds your bank details and its checks on who you are; we do not. | You and us. Players see only the Verified organiser badge. |
| Results, and the level they earn you | So a level means something. | Any signed-in player, unless you turn Public skill ratings off. |
| Got Game leagues you enter | When you tap Enter on one of our leagues, we record that you entered and when. That is your agreement to that league's rules. If we take you off a league's table, we record who did it, when and why. We also record your answer to whether you, or anyone you live with, work for Hype & Swagger Ltd or that league's sponsor, because they can play but cannot win a prize (terms §6). We can correct it, and we mark our own staff once for every league. None of this is ever shown on the table. | You and us. |
| Your place on a Got Game league table | So a league has a table and a winner. It shows your name, picture, points, games and wins in that league. When the league ends, the final table is written down once and kept, so a result cannot change after a prize has been given. To claim a prize you email us. | Any signed-in player who can see that league: everybody, unless it is a local league, which only players who live inside its area can see. |
| A Got Game league's prize | Who the prize was offered to, when their 30 days to claim it end, and whether it was claimed or passed on to the next player on the final table, with who decided and why. So the prize goes to the right person, and we can show it was really awarded (terms §6). | You, for an offer made to you, and us. |
| Attendance | Whether you turned up to games where a register was taken. Counted, not voted on. | Any signed-in player, once you have at least three counted games. |
| "I'm here" at a court | So people can see whether anyone is about. | Friends see your name; everybody else sees only a number. It expires within a couple of hours and no history is kept. |
| When you last opened the app | So we can tell whether people are still using it, and whether an account that has been reported is still active. | Only us. It is never shown on your profile or to another player. It is overwritten each time, so there is no history. |
| Which terms and privacy policy you agreed to, and when | So we can show what you agreed to, and ask you again when either changes. Every time you agree is kept, not only the latest. | Only us. |
| Push notification token | To tell you when something about your game changes, about games near you that need players, about new games at your clubs if you turn Club news and events on, and about our leagues if you turn Leagues and prizes on. | Only us. |
| Which notifications you want | Settings has a switch each for Game reminders, Last-spot alerts near me and Club news and events. We keep whether each is on, and when you turned Club news and events on, so we only send what you asked for. Turning Club news and events off forgets the date. With Game reminders or Last-spot alerts off, those still appear in the app's Alerts. | Only us. |
| Whether Leagues and prizes is on, and when you turned it on | So we only send league and prize notifications to people who asked for them, and can show that you did. Turning it off forgets the date. With it off, new leagues and results still appear in the app's Alerts. | Only us. |
| Whether Open to meeting people is on, and when you turned it on | It puts a small mark by your name. Turning it off forgets the date. | Only players who have also turned it on see the mark. Nobody else, and nobody sees the date. |
| Reports and blocks | Safety. | Only us. A block is visible only to the person who made it. |
| A photo the check refused | Safety. Every photo you add is checked before it is stored — see §7. If one is refused, we note that it happened: when, which kind of photo it was, and the check's ratings. The photo itself is never kept. | Only us. |
| Crash reports | So we can fix what broke. | Us and Sentry — see §7. A crash report carries the error, where in the code it happened, your device model and OS version, and your account id, which is a random identifier and not your name or number. |
What we do not collect. We do not collect your full card or bank account number (Stripe holds those — see §7), advertising identifiers, your IP address, your browsing, or anything from your photo library beyond the individual pictures you choose. There is no advertising SDK, no analytics SDK, no attribution SDK and no session recording in the app. Nothing tracks you across other apps or websites.
There is one third-party SDK and it is Sentry, which reports crashes. It is set up to send as little as possible: automatic personal data off, performance tracing off, session replay off. The only thing in a crash report that points at you is your account id.
Your contacts, when you ask us to look
Got Game can tell you which of your contacts already play. This happens only when you tap Search contacts — never automatically, never at sign-up, never in the background. If you never tap it, your address book is never read.
When you do, the numbers in your address book are turned into fingerprints on your phone before anything leaves it. We compare those against the numbers registered to accounts and show you who matched. We store nothing from this — not the numbers, not the fingerprints, not who matched and not who did not. The comparison happens inside a single query and nothing is written down. The one thing kept is a count of how many times you used the feature that day, which exists to stop it being used to test numbers in bulk, and which contains no contact data.
Something most apps would not tell you: a fingerprint of a phone number is not anonymous. There are only about ten billion possible numbers, so anyone holding a fingerprint could work back to the number by trying them all. What protects your contacts is that we keep none of them — not the fingerprinting. That is why this says "never stored" rather than "never uploaded".
Those numbers belong to other people, who have agreed to nothing. That is why they are compared and then discarded. If you would rather we did not, decline the contacts permission or turn it off later in your phone's settings — everything else works normally, and you can still add people by name.
4. Why we are allowed to (lawful bases)
| What | Basis under UK GDPR |
|---|---|
| Your account, profile, games, messages and photos you send in a chat, clubs and crews, the clubs and venues you save, and what you add to a club you run | Contract — we cannot provide the app without them. |
| Payments, refunds and payouts | Contract — paying and being paid is what you asked the app to do. Keeping payment records afterwards is a legal obligation under UK tax law. |
| Your date of birth | Legal obligation and our legitimate interest in keeping under-18s off a service built for adults meeting strangers. |
| Location | Consent, given through your phone's permission prompt. You can refuse and set your area by hand, and you can withdraw it at any time in your phone's settings. |
| Reading your contacts | Consent, given by tapping the button and the permission prompt. |
| Reports, blocks, bans and moderation records | Legitimate interests — keeping people safe on a service that arranges for strangers to meet. |
| Checking the photos you add, and noting one that is refused | Legitimate interests — keeping sexual and violent images off a service that arranges for strangers to meet. |
| When you last opened the app | Legitimate interests — knowing whether the service is being used, and whether an account that has been reported is still active. |
| Which terms and privacy policy you agreed to, and when | Legitimate interests — being able to show what each person agreed to, and when. |
| Crash reports | Legitimate interests — an app that crashes and never gets fixed serves nobody. |
| Push notifications about your own games | Contract. You can turn them off in the app or at the operating-system level. |
| Entering one of our leagues, and its table | Contract — you enter a league on its rules, and the table is what you entered for. Keeping the final table after the league ends is our legitimate interest in a result that cannot change once a prize has been given. Recording who can win, and who a prize was offered to and what became of it, is part of the same contract (terms §6); keeping that record is our legitimate interest in showing a prize was really awarded. |
| Club news and events notifications | Consent, given by turning Club news and events on in Settings. You can turn it off at any time. |
| League and prize notifications | Consent, given by turning Leagues and prizes on in Settings. You can turn it off at any time. |
| Open to meeting people | Consent, given by turning it on in Settings. Turning it off withdraws it. |
5. Location, in detail
Location gets its own section because it is the most sensitive thing we hold.
- Only while you are using the app. There is no background location, no location tracking and no movement history. The app asks for "while using" permission and nothing more.
- Roughly, not exactly. The app asks the phone for a balanced-accuracy fix — about a hundred metres, not a doorstep.
- You can refuse. The app still works: you set your area by hand and drop pins yourself.
- We store a point for your home area and for each game's venue. Your profile shows other players a place name and a distance, such as Bishopton, Scotland — not an address.
- The place name comes from your own phone. Turning the coordinates into a town name is done by the operating system, not by an outside service.
- "I'm here" at a court is one row that expires within a couple of hours and is overwritten each time, so there is no record of where you have been. Friends see your name on it; everyone else sees a count.
You can hide from the map and from search entirely, at any time, in Settings.
6. What the app decides automatically
Two numbers on your profile are worked out by the system rather than typed in by a person.
Your level moves when a result is recorded — on who won, not by how much. Where the number came from is always shown next to it, so a figure you set yourself reads as exactly that, next to somebody else's brought over from another platform. A level never stops you joining a game. A game can suggest a band, and you can ignore it. What a level does affect is search: if you have Public skill ratings on, somebody filtering by level can find you, and if you turn it off, they cannot.
Attendance counts finished games where a register was taken and you were on the roster. It is counted, not voted on, and it shows nothing at all until you have at least three such games. It does not stop you joining anything.
Neither of these is a decision with a legal or similarly significant effect on you, and neither is used to profile you for advertising, because we do not advertise. If you think a number is wrong, email us and a person will look at it.
7. Who we share it with
We do not sell your personal data and we do not share it for advertising.
Your mobile number and text messages. We do not sell or share your mobile number, your SMS opt-in data or your consent to receive texts with any third party or affiliate for marketing or promotional purposes. Twilio, below, receives your number only to deliver your sign-in code.
We use these processors to run the service:
| Who | What they handle | Where |
|---|---|---|
| Supabase | Database, sign-in, file storage. This is where your data lives. | EU / UK |
| Twilio | Delivers your sign-in code by SMS. Receives your phone number. | United States |
| Resend | Sends the emails the app sends you, such as a sign-in code. Receives your email address and the message. | United States |
| Stripe | Takes card and Apple Pay payments, makes refunds and pays organisers. Receives your card details from you directly, and from us the amount and your account id. For an organiser, it checks who they are and holds their bank details. Stripe also uses some of this for its own legal duties, such as preventing fraud, under its own privacy policy. | United States |
| Google (Places API) | Venue search. Receives what you type and your approximate coordinates, so results near you come first. | United States |
| Google (Cloud Vision) | Checks every photo you add for sexual or violent content before it is stored. Receives the photo and nothing that says whose it is. Google says it processes the photo in memory, does not store it, and does not use it to train its models. | United States |
| Expo | App delivery and push routing. Receives your push token and the text of the notification. | United States |
| Apple and Google | App distribution and push delivery. | United States |
| Sentry | Crash reporting. Receives the error, the code location, your device model and OS version, and your account id. | United States |
Transfers outside the UK. Several of those are in the United States. Where personal data leaves the UK we rely on the UK Addendum to the European Commission's standard contractual clauses, or on the UK–US data bridge where the provider is certified under it. If you would like to know which applies to a particular provider, ask us.
We will also disclose data where the law requires it, or where it is necessary to protect somebody's safety.
8. How long we keep it
We would rather be plain than reassuring here.
- While your account exists, we keep it. There is no automatic expiry on your profile, your games, your messages or your photos. They are there until you delete your account or ask us to remove something.
- When you delete your account —
Settings → Account settings → Delete account— your profile disappears from the app immediately and the account is erased after 30 days. The delay is so you can undo an accidental deletion and so any open safety report can be dealt with. Undoing it is the Keep my account button on that same screen; signing back in does not cancel it on its own. - What survives, and why. Anything you shared with other people stays, with your name taken off it: messages and photos you sent in a chat, photos you added to a game or a club, documents you added to a club, votes you cast, games you hosted, your line on the final table of a league that has ended, and the record of a league's prize offered to you. Deleting those would rewrite other people's record of games they actually played. Everything that is only yours goes.
- Payment records — who paid what, to whom and when, and any refund — are kept for six years after the payment, even if you delete your account, because UK tax law requires a business to keep them.
- A record that a deletion happened and when. That is how we can show we did it.
- Any abuse report naming you, because an account that can erase the reports against it is not a safety system.
And one fingerprint, if you were banned. If we ban an account for abuse we keep a one-way fingerprint of the number it used, so that deleting the account does not clear the ban. Plainly: we erase you, and we keep one thing that cannot be read back, so that a ban cannot be escaped by asking to be erased.
It is used for that single check and nothing else — never to identify you, contact you, match you against contacts, or link you to another account. It is produced with a secret key that never leaves our server, without which the value is useless even to somebody who obtained the whole list. If the ban is lifted it is destroyed. If you have not been banned, we keep nothing about your number after deletion.
If you want something removed sooner than any of this, email support@gotgamenow.com and say so.
9. Security, honestly
- Data is encrypted in transit and at rest by our hosting provider.
- Access rules are enforced by the database, not just by the app, so a rule cannot be bypassed by anything other than the app.
- Messages, and photos sent in a chat, are not end-to-end encrypted. We can technically read and see them, and we will if a safety report requires it. Do not use Got Game for anything you need to be private from us.
- A club's quick-join code is a shared word an organiser reads out, like a wifi password. It is not a credential and it is not your account password. Do not reuse a real password there.
- No system is perfect. If you find something wrong with ours, email us and we will take it seriously.
10. Your rights
Under UK GDPR you have the right to be told what we hold about you, to get a copy of it, to have it corrected, to have it erased, to object to or restrict how we use it, and to have it given to you in a portable form.
Several of these you can exercise yourself, immediately:
- See and correct your profile —
Settings → Edit profile. - Hide your level, and come out of level search — the Public skill ratings switch.
- Hide yourself from the map and from search — in
Settings. - Turn off notifications, one kind at a time or all of them, including Leagues and prizes — in
Settings, or at the operating-system level. - Withdraw location or contacts permission — in your phone's settings.
- Delete your account —
Settings → Account settings → Delete account.
For the rest — a copy of your data, a correction we cannot make ourselves, an objection, or a restriction — email support@gotgamenow.com. There is no download-my-data button in the app yet, so a copy is something we put together by hand when you ask. We will respond within one month.
If you are not happy with how we have handled it, you can complain to the Information Commissioner's Office at ico.org.uk, or on 0303 123 1113. We would rather you told us first so we can put it right.
11. Children
Got Game is for adults. The minimum age is 18, your date of birth is checked at sign-up, and the check is enforced by the database rather than only by the sign-up screen. We do not knowingly collect anything from anybody under 18. If you believe somebody under 18 has an account, email us and we will deal with it.
12. This website
gotgamenow.com is a plain set of pages. It sets no cookies, has no analytics, and runs no tracking of any kind — there is nothing here to opt out of.
The one thing it collects is the email address you type into the early-access form, which is stored so we can tell you when the app opens where you play. We use it for that and nothing else, we do not pass it on, and you can have it removed at any time by emailing support@gotgamenow.com. The lawful basis is your consent, given by submitting the form.
The page loads its typefaces from Google Fonts, which means your browser makes a request to Google and Google sees your IP address in the course of serving them. Nothing else on the page talks to anybody but us.
13. Changes
If we change this in a way that materially affects you, we will tell you in the app before it takes effect. The date at the top is always the current version.
14. Contact
Email support@gotgamenow.com for anything at all — questions, corrections, a copy of your data, a complaint.
Hype & Swagger Ltd20 Wenlock Road
London N1 7GU
United Kingdom