Privacy Policy

Data Controller

One a Day Fantasy is operated by SP Consulting Ltd, a company registered in Greece.

Registered address: Geometrou 42, 11743, Athens, Greece

Contact: privacy@one-a-day-fantasy.com

SP Consulting Ltd acts as the data controller for personal data processed through this service. Where we use third-party services (see below), those providers act as data processors on our behalf.

Introduction

We operate the One a Day web application at one-a-day-fantasy.com ("we," "us," or "our"). This Privacy Policy explains how we collect, use, and protect your personal information when you use our service.

One a Day is a free fantasy sports game for the NBA Playoffs where you pick one player per day, earn points based on real-life performance, and compete on a leaderboard.

Information We Collect

Account Information

When you create an account, we collect:

• Email address (used for authentication and service communications such as pick reminders)
• Display name (chosen by you, visible to other users on the public leaderboard)
• Profile photo URL (if you sign in with Google)

Game Data

As you use the app, we store:

• Your daily player picks and associated scores
• Your total score and pick count (displayed on the public leaderboard alongside your display name)

Analytics Data (with your consent)

If you accept analytics cookies, we collect usage data such as pages visited, click events, and session recordings to improve the app. Analytics data is associated with a pseudonymous identifier, not your account identity. See the Cookies & Tracking section below for details.

Legal Basis for Processing

We process your personal data under the following legal bases as defined by the GDPR:

• Performance of a contract: to provide the service — creating your account, processing picks, calculating scores, and displaying the leaderboard
• Consent: for analytics cookies and session recordings (opt-in via the cookie consent banner)
• Legitimate interests: to maintain, secure, and improve the service, and to prevent abuse

How We Use Your Information

• App functionality: authenticate your account, process your picks, calculate scores, and display the leaderboard
• Public leaderboard: your display name and score are visible to other users
• Service communications: send you emails related to the service, such as pick reminders and account notifications
• Analytics (opt-in): understand how the app is used so we can improve it

We do not sell your personal information. We do not use your data for advertising. We do not use automated decision-making or profiling.

Cookies & Tracking

Strictly Necessary (always active)

• Firebase Authentication cookies: session cookies that maintain your login state. These are essential for the app to function and cannot be disabled. Duration: persistent until sign-out.

Analytics (requires your consent)

• PostHog cookies: persistent cookies that collect usage data including page views, click events, and session recordings. Data is associated with a pseudonymous identifier. Session recordings are configured to mask sensitive input fields (passwords, emails) and are used only in aggregate to improve usability. Duration: up to 1 year.

Analytics cookies are not set until you explicitly accept them via the cookie consent banner. You can change your preference at any time using the "Cookie Preferences" link in the page footer or your profile page.

Third-Party Services & International Data Transfers

• Firebase (Google Cloud): acts as a data processor for authentication, database, and hosting. Data is processed in the United States. See Firebase Privacy Policy.
• PostHog: acts as a data processor for analytics and session replay (opt-in only). Data is processed in the European Union (eu.i.posthog.com). See PostHog Privacy Policy.

Where data is transferred outside the European Economic Area (e.g., to the United States via Google Firebase), we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) approved by the European Commission to ensure your data is protected.

NBA player statistics are fetched server-side from a sports data API. No user data is shared with this service.

Data Security

We implement appropriate technical and organizational measures to protect your personal data, including secure authentication via Firebase, encryption of data in transit (HTTPS/TLS), and access controls on our database. While no system is 100% secure, we take reasonable steps to safeguard your information.

Data Retention

Your account and game data are retained for up to 3 years to allow for multi-season history and leaderboard records. Analytics data collected by PostHog is subject to PostHog's own retention policies. We may retain aggregated, non-identifiable data for longer periods. You can request deletion of your account and associated data at any time by contacting us.

Your Rights

Under the GDPR and applicable privacy laws, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate personal data
• Delete your personal data (request via email)
• Withdraw consent for analytics tracking at any time via the "Cookie Preferences" link
• Data portability — request a copy of your data in a structured format
• Lodge a complaint with your local data protection authority. In Greece, this is the Hellenic Data Protection Authority (HDPA)

To exercise any of these rights, please contact us at privacy@one-a-day-fantasy.com.

Children's Privacy

One a Day is not directed at children under 16 (or the applicable minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Your continued use of the app after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or want to exercise your data rights, contact us at: privacy@one-a-day-fantasy.com

SP Consulting Ltd
Geometrou 42, 11743, Athens, Greece