Privacy

Last updated: 12 November 2026.

Who we are

Last Stand Manager (LSM) is run by Britzensys Limited, a company registered in England and Wales (company number 07634824), with its registered office at Office 11, Romney Marsh Business Hub, Mountfield Road, New Romney, Kent TN28 8LH, United Kingdom. We decide how the data in LSM is used, so we are its controller, for managers' and players' data alike. Questions or requests: sportsmanager@zohomail.eu.

Who it's for

LSM is for people aged 13 and over. A manager runs a game; players take part with a link from their manager, in the app or on the web page, without signing up.

What we keep, and why

Managers. Your email address (to sign you in with a code), the name you give yourself, your settings, your games and your player list, your plan, and when you last used the app. We need these to run your account, so the reason is our contract with you.

Players. The name your manager gave you, the games you're in, your entries and results, and whether you have left a game. Your manager types these in; you don't sign up. We keep them because running the game for your manager and the other players needs them, and a name and a football pick are a small thing to hold (our "legitimate interests"). We've written down why that's fair and you can ask us for it.

Notifications. Only if you allow them on your phone: a code for the phone from Apple or Google (a "push token"), the phone's language and time zone (so a closing time shows in your own words and clock), and which games you've muted. The reason is your permission; turn it off on the phone or in the app at any time.

The web page. Your browser keeps an entry you're halfway through and, if your game has one, its PIN. They stay in that browser; we don't receive them until you send your entry.

Ads. The app shows ads, except to a manager on a paid plan; the web page has none. They are never personalised: every request tells Google the user may be under the age of consent, and asks for content suitable for teens. Google still receives what any ad needs: your IP address, device details and a rough location from the IP address. The reason is our legitimate interests (ads pay for the free plan).

Keeping it working. Our server's own logs record which part of the service each request used, with any player link hidden, and how much work it took. They hold no names, email addresses or IP addresses. To stop anyone flooding the service, we count sign-in codes per email address for a day, and requests per connection for a minute.

On your phone. The camera is used only to scan a manager's QR code, and nothing from it is kept. The local network is used only while a manager has a laptop open on the player list editor, on the same Wi-Fi. The app keeps a copy of your games on the phone so it works without a signal.

Who else handles it

• Cloudflare: runs our servers. Accounts and games are stored in the EU.
• Resend: sends sign-in codes, and co-manager invites (the invitee's email, the inviter's name and the game's name).
• Expo, Apple and Google: deliver notifications. A notification carries the game's name and any note the manager wrote.
• RevenueCat, Apple and Google: sell and check subscriptions. RevenueCat holds your account's id and purchase history, never your email.
• Google AdMob: ads, as above.
• Zoho: our email. A bug report from the app comes from your own email, with the app version, phone details and a recent diagnostic log (no names or links).

Football results come from football-data.org and hold nothing about you.

Cloudflare, Resend, Expo, RevenueCat, Google and Apple are United States companies, so your data may go to the US. Each transfer is protected: Cloudflare, Resend and Expo are certified under the UK–US data bridge (the UK Extension to the EU–US Data Privacy Framework), and Cloudflare and Resend also sign the standard contract clauses with the UK Addendum; RevenueCat and Google use the standard contract clauses with the UK Addendum; Apple uses standard contract clauses, under its own privacy policy. Zoho holds our email in its EU data centre.

How long we keep it

Running games are deleted 120 days after they were last changed, and finished games 60 days after they finish. Your account and player list are deleted 500 days after you last used the app. We don't send reminders; export anything you want to keep.

When a manager deletes a game, it disappears for everyone at once and is erased 7 days later; until then we can bring it back if it was deleted by mistake. A game removed by the time limits above waits the same 7 days. When a manager deletes their account, their games are erased at once.

Our database backups keep deleted data for up to 30 more days, and are then gone. We use them only to recover from a fault.

Players. "Remove all my data" in the app makes your phone forget your links and games, and takes your phone's notification code off our servers. Your name and entries in a game stay with that game, as they're part of its results; ask your manager to take you out, or ask us.

Deleting your account doesn't remove your purchase history from RevenueCat, Apple or Google, which keep it for their own records.

Your rights

You can ask to see the data we hold about you, to have it corrected or deleted, to take a copy, or to object to how we use it. Email us; we answer within a month. If you're a player, tell us the game's name and your manager's name so we can find you. You can also ask your manager, who can change or remove your name.

If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint. We'd like the chance to put it right first.

Changes

If we change this page, the date at the top changes too.