Privacy Policy

When you create an account or use Triday, we may collect:

• Account data: your email address and encrypted password
• Profile data: display name, age group, gender (for Age Group League participants)
• Race submissions: race results you voluntarily enter into the Age Group League
• Usage data: team selections, league activity, and general platform interactions
• Technical data: IP address, browser type, and device information collected automatically via our hosting infrastructure

We do not collect payment information. Triday is currently free to use.

We use your data solely to operate and improve Triday:

• To create and manage your account
• To run the Pro Fantasy League and Age Group League features
• To calculate scores and display leaderboards
• To send essential service emails (e.g. password reset)
• To improve the platform based on usage patterns

We do not use your data for advertising. We do not sell your data to third parties. We do not share your personal data with anyone outside of the services required to run this platform.

We process your personal data on the basis of contractual necessity — it is required to provide the Triday service you have signed up for.

• Your account data is stored securely via Supabase, a trusted database platform with encryption at rest and in transit
• Passwords are never stored in plain text — they are hashed using bcrypt via Supabase Auth
• The platform is served over HTTPS via Vercel, meaning all data between your browser and our servers is encrypted
• Row Level Security (RLS) policies ensure that your data is only accessible by you — other users cannot see your personal information

Supabase and Vercel may process data outside the UK or EEA. Both services operate under appropriate safeguards including Standard Contractual Clauses, ensuring your data remains protected to UK GDPR standards.

Triday uses the following third-party services to operate:

Each of these services operates under their own privacy policies and appropriate data processing agreements.

We retain your personal data for as long as you maintain an active account. If you request deletion of your account, we will remove your personal data within 30 days, except where we are required to retain it for legal reasons.

As a UK-based service, you have the following rights regarding your personal data:

• Access: request a copy of the data we hold about you
• Rectification: ask us to correct inaccurate data
• Erasure: ask us to delete your data ("right to be forgotten")
• Restriction: ask us to limit how we process your data
• Portability: request your data in a machine-readable format
• Objection: object to how we process your data

To exercise any of these rights, contact us at playtriday@gmail.com. We will respond within 30 days.

Triday uses minimal cookies required for authentication (session tokens) and basic platform functionality. We do not use tracking or advertising cookies. You can manage cookies through your browser settings, but disabling session cookies will prevent you from logging in.

Triday is not directed at children under the age of 13. We do not knowingly collect data from anyone under 13. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

We may update this policy from time to time. If we make material changes, we will notify users via email or a notice on the platform. The date at the top of this page reflects when the policy was last updated.

For any privacy-related questions or requests, contact us at: playtriday@gmail.com