DEMO – test data. Not the real Table Topper.
TABLE TOPPER

Privacy notice

Last updated: 21 October 2026.

Table Topper is a free, non-commercial game run by an individual in the UK, who is the data controller. This notice explains what we collect and why, under UK GDPR.

What we hold

  • Your email address — to sign you in and, if you choose, to send reminders and weekly results.
  • Your display name — shown to other players in your leagues.
  • Your predictions, scores and league memberships — that's the game.
  • Security records: hashed sign-in tokens, hashed session IDs, the browser type of each session, a salted hash of your IP address when you ask for a sign-in email (to stop abuse), and a log of emails sent to you. We never store raw passwords (there aren't any) or raw IP addresses.

Why (lawful basis)

  • Running the game you signed up for: contract.
  • Preventing abuse and keeping the service secure: legitimate interests.
  • Weekly results emails: consent — off unless you turn them on, and you can turn them off at any time on My account.

We don't sell your data, show adverts or send marketing.

Who processes it for us

  • Cloudflare — hosting, database and bot protection (Turnstile).
  • Resend — sending emails.

Their servers may be outside the UK; they use the safeguards required by UK law (such as the International Data Transfer Addendum).

Cookies

We use one essential cookie to keep you signed in (and a short-lived one while you're signing in). No analytics or advertising cookies, so there's no cookie banner. Turnstile may set its own essential security cookie on the sign-in page.

How long we keep it

Until you delete your account. Sign-in tokens expire after 15 minutes; sessions after 60 days of inactivity.

Your rights

  • Access: download your data any time from My account.
  • Erasure: delete your account from My account. Your email and name are removed immediately. Past scores remain in league tables as "Former player" so other players' totals still add up.
  • Correction, objection and restriction: contact us.
  • You can complain to the Information Commissioner's Office (ico.org.uk).

Contact

Email mikegagg40@gmail.com.