Fantasy Festival · Fantasy Frag

Privacy Policy

Last updated 22 August 2026

The short version

1. Who we are

This policy is issued by Lyve Wyre Group Limited (company number 13966596), registered in England and Wales at 17 Ringshall, Berkhamsted, Hertfordshire, HP4 1ND, England. We are the data controller for the personal data described below.

You can reach us about anything in this policy at info@fantasyfestival.com, which covers both games. Mail sent to info@fantasyfrag.com reaches the same team.

2. What this policy covers

This policy covers both of our fantasy games and their websites:

The two games share one account system and one backend, so one account works across both and this one policy applies to both. Where this policy says “the games”, it means both apps, including TestFlight and beta versions.

3. What we collect and why

Account details

WhatWhy we need it
Email addressTo create and secure your account, sign you in, and reset your password
PasswordTo sign you in. It is stored only as a salted hash — we never see or store your actual password
Manager name and avatarTo identify you to other players on leaderboards and in leagues. Choose a name you are happy for other players to see

Gameplay data

To run the game and save your progress we store the things you do in it: your line-ups and rosters, your trades and transactions, your scores and rankings, the leagues you are in, and your saved game state so you can pick up on another device.

Technical data

Our servers record ordinary technical information when your app connects — IP address, device type, operating system version, app version and timestamps — so we can deliver the service, diagnose faults, and detect abuse such as cheating or automated account creation.

What we do not collect

We do not collect your precise location, contacts, photos, calendar, health data, or advertising identifiers. We do not track you across other companies’ apps or websites, and the games contain no third-party advertising.

4. Lawful bases for using your data

What we doLawful basis under UK GDPR
Run your account, save your progress, operate leagues and leaderboardsPerformance of a contract — the terms you accept when you sign up
Keep the service secure, prevent cheating and abuse, fix faultsOur legitimate interests in running a working, fair game
Send you service emails (password resets, important account or service notices)Performance of a contract
Send you optional launch or product emailsYour consent, which you can withdraw at any time

5. Real-world data in the games

Player and title values in the games are calculated from publicly available real-world activity data about artists, titles and companies — not from data about you or other players. Our valuation engine processes information about those works and entities. Nothing you do in the game changes anyone’s real-world value, and your gameplay is not used to profile you commercially.

6. Who processes data on our behalf

ProviderPurpose
SupabaseAccount authentication, database and cloud save. This is where your account and gameplay data live.
Expo (EAS)Building and delivering app updates
AppleDistribution via the App Store and TestFlight. Apple’s handling of your data is covered by Apple’s privacy policy.

Each acts as our processor under contract and may only use your data to provide their service to us. We do not sell personal data and we do not share it with advertisers or data brokers.

We will disclose data if we are legally required to, or where it is necessary to protect our rights, our players or the public.

7. What other players can see

Your manager name and avatar, your line-ups once a matchweek has locked, and your position on leaderboards are visible to other players in your leagues. Your email address is never shown to other players.

8. Keeping and deleting your data

We keep your account and gameplay data for as long as your account is open.

You can delete your account from inside the app — open your account settings and choose to delete your account. This permanently removes your account, your profile and your saved game data. Deletion is irreversible: your progress cannot be recovered afterwards.

You can also email info@fantasyfestival.com and ask us to do it. After deletion we remove your data from our live systems immediately and from routine backups within 30 days. We may retain a minimal record where we are legally required to, and anonymous, aggregated statistics that cannot identify you.

If an account is inactive for 24 months we may delete it, after warning you at the email address on the account.

9. International transfers

Some of our providers store data outside the UK. Where that happens, the transfer is covered by UK adequacy regulations or by the International Data Transfer Addendum to the EU Standard Contractual Clauses, so your information keeps an equivalent level of protection.

10. Age and younger players

You must be at least 13 years old to create an account. The games are not directed at children under 13 and we do not knowingly collect data from them.

If you are under 18, please think before you choose a manager name — pick something that is not your real full name, and do not put personal details in it. If you believe a child under 13 has created an account, email info@fantasyfestival.com and we will delete it.

11. Registering your interest on our websites

If you enter your email address into the sign-up form on fantasyfestival.com or fantasyfrag.com before launch, we store that address, which product you signed up from, and the date, so that we can email you when the game opens up. Our lawful basis is your consent. You can withdraw it at any time by emailing us or using the unsubscribe link in any email. We keep those addresses until you unsubscribe or until 24 months after launch, whichever comes first.

12. Security

Data is encrypted in transit. Passwords are stored as salted hashes. Access to our database is restricted by row-level security so that, in normal operation, an account can only reach its own records. No system is perfectly secure, but if a breach affects your rights we will notify you and the Information Commissioner’s Office as the law requires.

13. Your rights

Under UK GDPR you can ask us for a copy of the personal data we hold about you, to correct it, to delete it, to restrict or object to how we use it, and to receive it in a portable format. Where we rely on consent, you can withdraw it at any time.

Email info@fantasyfestival.com and we will respond within one month.

If you are unhappy with how we have handled your data you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. We would appreciate the chance to put it right first.

14. Changes to this policy

If we change this policy we will update the date at the top of this page. If a change materially affects how we handle your data, we will tell you in the app or by email before it takes effect.

15. Contact

Lyve Wyre Group Limited
17 Ringshall
Berkhamsted
Hertfordshire HP4 1ND
England
info@fantasyfestival.com — for Fantasy Festival and Fantasy Frag