Privacy policy
Last updated: 1 October 2026
This policy explains what personal data Quanta Sports collects, why we collect it, who we share it with, and what rights you have. We have tried to keep it short and accurate rather than comprehensive and vague.
Who we are
Quanta Sports (“we”, “us”) operates https://quanta-sports.com. We are the data controller for the personal data described here.
Quanta Sports is operated by Ben Campbell as a sole trader, based in the United Kingdom.
You can contact us about anything in this policy at benc5732@gmail.com. If you need a postal address for a formal request, ask and we will provide one.
What we collect, and why
If you create an account
| Data | Where it comes from | Why | Lawful basis |
|---|---|---|---|
| Name and email address | You, or your Google account if you sign in with Google | To create and identify your account, and to send account emails | Performance of a contract |
| Password (stored only as a cryptographic hash — we never see or store your actual password) | You, if you sign up with email and password | To let you sign in | Performance of a contract |
| Email verification status | Generated when you confirm your address | To confirm the address belongs to you and reduce fraudulent signups | Legitimate interests |
| Your Google account identifier | Google, if you sign in with Google | To recognise your Google account when you sign in again | Performance of a contract |
If you sign in with Google, Google tells us your name, email address, whether Google has verified that address, a unique account identifier, and a link to your Google profile picture. We store the first four. We do not store your profile picture. Google also gives us sign-in tokens; we use them once, to complete the sign-in, and do not keep them. We do not receive your Google password or any other Google data.
If you subscribe
| Data | Where it comes from | Why | Lawful basis |
|---|---|---|---|
| Stripe customer and subscription identifiers, plan, status, renewal date, whether you have cancelled, and the date a renewal payment first failed (if one does) | Stripe, when you subscribe and when your subscription changes | To give you access to paid features and manage your subscription | Performance of a contract |
When you subscribe, we give Stripe your name, email address and your Quanta account ID, so it can set up your subscription and link it to your account. Stripe collects your billing address and payment details directly, on its own payment pages.
We never see or store your card details. Payment information is collected directly by Stripe on their own payment pages and never reaches our servers. Stripe sends its own payment receipts. Stripe’s privacy policy is at https://stripe.com/gb/privacy.
When you use the site
| Data | Why | Lawful basis |
|---|---|---|
| Cookies that keep you signed in and protect the sign-in process: a session cookie, and, while you sign in with Google, a cookie that lasts five minutes | So you stay signed in between pages, and so a sign-in cannot be completed by someone else. These are strictly necessary and are not used for tracking or advertising. | Strictly necessary — no consent required |
| For each signed-in session: your IP address, your browser type (user agent) and when the session expires | For security, so that unusual sign-in activity can be spotted and investigated | Legitimate interests |
| Technical error data, if something goes wrong. If the error involves your account or subscription, this includes your Quanta account ID and Stripe customer ID. It does not include your IP address, name or email address. | To find and fix faults | Legitimate interests |
If you are not signed in, we set no cookies at all. We do not currently use analytics or any other non-essential cookies. If that changes, we will update this policy and ask for your consent before setting them.
Your IP address is also used briefly, in memory and without being stored, to limit how quickly requests can be made to parts of the site.
What we do not do
We think it is worth being explicit about these, because many privacy policies claim them by default:
- We do not sell or rent your personal data to anyone.
- We do not share your data with advertisers or use it for targeted advertising.
- We do not show third-party advertising on the site.
- We do not send marketing emails. The only email we send you is the one that confirms your email address. If you subscribe, Stripe sends its own payment receipts.
- We do not use tracking pixels, advertising cookies or social media trackers.
- We do not build behavioural profiles of you.
- We do not use your personal data to train the statistical models that produce our predictions. Those models use publicly available football match data only (see Footballers and others in our match data).
Who we share it with
We use the following service providers (“processors”). Each only receives what it needs to do its job, and none of them may use your data for their own purposes.
| Provider | What they handle | Where |
|---|---|---|
| Vercel Inc. | Hosting and serving the website | United States, with edge locations worldwide |
| Neon Inc. | Database hosting (your account and subscription records) | London, United Kingdom |
| Stripe Payments Europe, Ltd. | Payment processing and subscription billing | Ireland and United States |
| Resend (Plus Five Five, Inc.) | Sending account emails | Ireland |
| Functional Software, Inc. (Sentry) | Error monitoring | United States |
| Google Ireland Limited | Sign-in with Google, if you use it | Ireland and United States |
We may also disclose personal data if we are required to by law, or to establish, exercise or defend legal claims.
International transfers
Some of our providers are based in, or transfer data to, the United States. Where that happens, transfers are made under the UK International Data Transfer Agreement or the UK Extension to the EU-US Data Privacy Framework, together with additional safeguards where required. You can ask us for more detail about the safeguards that apply.
How long we keep it
| Data | Retention |
|---|---|
| Account data (name, email, password hash, Google account identifier) | While your account is open. You cannot yet delete your account yourself on the site: to have it deleted, email us and we will delete it. |
| Session records (IP address, browser type) | Deleted automatically 30 days after the session expires |
| Our record of your subscription (identifiers, plan, status, dates) | Deleted with your account |
| Payment records (payments, invoices, billing details) | Held by Stripe on our behalf, for six years from the end of the relevant accounting period, as UK tax law requires |
| Error monitoring data | 90 days (Sentry's default retention) |
| Email delivery logs | Up to 30 days, held by our email provider |
Footballers and others in our match data
Our forecasts are built from football match data, and that data is about real, identifiable people — mainly players, and also referees. They have not signed up to Quanta and have not agreed to anything, so this section explains what we hold about them. We have no contact details for them and cannot tell them individually, which is why it is published here.
What we hold
- Players: name, date of birth or age, gender, nationality, height, club, position and shirt number; appearances, minutes, goals, assists, shots, cards and other match statistics; an estimated market value; and availability — whether a player is missing or doubtful for a match because of injury, illness, suspension or another reason, with the published description (for example “hamstring injury”) and expected return date. We also show players’ published headshot photos, fetched from our data provider; we do not store them.
- Referees: name, and the cards and fouls awarded in matches they have officiated.
- Golfers: name, country, world ranking and amateur status, from a part of the site that has since closed.
Where it comes from, and why
It comes from a commercial sports data provider, which compiles published match reporting, official competition data and club announcements. We do not collect it from the people concerned, or from any private source. We use it to produce and check statistical forecasts of football matches. Our lawful basis is legitimate interests: the data describes people’s public professional sporting activity, and has already been published.
Injury and illness information
Information about a player’s injury or illness is health data, which is “special category” data under Article 9 of the UK GDPR. We rely on Article 9(2)(e): information that has been manifestly made public. We use it only to know whether a player is available to play. The published descriptions are held because they arrive inside the match data we store; we do not currently use or display them. It is not certain that every club announcement or media report counts as information made public by the player themselves, which is what that condition requires. We are seeking legal advice on this point and will update this section with the outcome.
How long we keep it, and your rights
We keep historical match data, including past availability, because it is the record our forecasts are measured against. We do not currently delete it on a schedule. If you are a player, referee or anyone else in this data, you have the same rights as anyone else under UK data protection law, including the right to object. Contact us at benc5732@gmail.com.
Your rights
Under UK data protection law you have the right to:
- Access the personal data we hold about you
- Correct data that is inaccurate or incomplete
- Delete your data, in certain circumstances
- Restrict how we process your data, in certain circumstances
- Object to processing we carry out on the basis of legitimate interests
- Portability — receive your data in a machine-readable format, or have it sent to another provider
- Withdraw consent at any time, where we rely on consent
To exercise any of these, email us at benc5732@gmail.com. We will respond within one month. We may need to verify your identity first.
If you are unhappy with how we have handled your data, you can complain to the Information Commissioner’s Office at https://ico.org.uk/make-a-complaint/ or on 0303 123 1113. We would rather you came to us first so we can try to put it right.
Security
Your data is transmitted over encrypted connections and stored in access-controlled databases. Passwords are stored as cryptographic hashes and cannot be read by us or recovered. We limit who can access production systems.
No system is perfectly secure, and we cannot guarantee absolute security. If a breach occurs that is likely to affect your rights, we will notify the Information Commissioner’s Office within 72 hours and tell you directly where the law requires it.
Age
Quanta Sports is for adults aged 18 or over. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us their data, contact us and we will delete it.
Regulatory status
We are not currently required to pay a data protection fee to the Information Commissioner’s Office. If that changes, we will register and add our registration number here.
Changes
If we change this policy we will update the date at the top. If the change is significant, we will tell account holders by email.