Privacy

Super 6 Prediction League is a private application. This notice explains what personal data is used, why it is needed, who can see it, and the controls available to players.

Who is responsible

The platform owner operates Super 6 and is responsible for its use of personal data. A personal contact email is not published on this website. Signed-in users can use the profile and personal data controls, or contact the platform owner through their competition administrator or existing private contact channel.

Data the application uses

• Account data: email address, display name, password hash, sign-in security settings, and optional supported team.
• Competition data: memberships, roles, payment-status marker, selected teams, predictions, results, points, rankings, analytics, and Monday Updates.
• Administration and security data: audit events, one-time credential metadata, lockout state, and bounded operational diagnostics.
• Football data: imported teams, fixtures, results, source records, and provenance. This is not player personal data.

Why this data is used

Account and competition data is used to authenticate players, operate private competitions, calculate scores and standings, prevent unauthorized access, investigate failures, and maintain an audit trail of important administration and security actions. It is not sold or used for advertising.

Email addresses

Email addresses are required for local sign-in and account administration. They are not shown to other players or competition administrators, and they are excluded from Monday Update model input, application telemetry, audit descriptions, and normal logs. The platform owner can access account or assigned-administrator addresses where necessary for account support, password reset, or competition administration.

Super 6 does not currently send application email. Before verification, reminders, updates, or self-service email recovery are enabled, this notice will be updated to explain the provider, choices, delivery records, suppression handling, and retention.

What other members can see

Competition members can see display names, predictions when competition rules permit them to be revealed, results, standings, analytics, and published Monday Updates for competitions they have joined. Competition authorization is enforced on the server. Email addresses, credentials, access words, and authentication details are not competition-visible data.

The Monday Update and AI

Monday Update generation receives calculated competition statistics, opaque player aliases, final results, upcoming fixtures, and locked predictions. It does not receive email addresses, credentials, access words, authentication tokens, profile text, hidden reasoning, or unrestricted user prompts. Generated content is schema-checked, fact-checked against supplied references, and safety-validated before publication.

Hosting and service providers

The application is hosted in Microsoft Azure, primarily in Sweden Central. Azure services provide web hosting, scheduled jobs, SQL storage, protected key storage, operational monitoring, and AI generation. Microsoft processes data under its service and contractual terms. No online payment processor is used; the £10 status is only an internal competition marker.

Security

Passwords, reset credentials, and setup words are stored as hashes rather than plaintext. Connections use TLS, Azure SQL provides encryption at rest, application access uses managed identities and least-privilege roles, secrets are held in Key Vault, and Data Protection keys are persisted in protected Azure storage. Security controls reduce risk but no internet service can guarantee absolute security.

Cookies and diagnostics

Essential cookies maintain sign-in, security, and antiforgery protection. There are no advertising cookies. Application Insights and Azure Monitor collect bounded technical diagnostics used to operate and secure the service. Telemetry is designed to exclude names, email addresses, credentials, access words, complete prompts, and prediction content.

Retention and deletion

There is no automated inactivity deletion at present. Account and competition records are kept while the account or competition remains in use, unless deletion is requested. Competition deletion permanently removes its memberships, predictions, scores, fixture links, settings, and Monday Updates while retaining shared football source data. Security and administration audit records may be retained where needed to protect the service and explain prior actions.

Your choices and rights

Signed-in users can correct profile information and use the Personal Data page to access account controls. You may ask for access, correction, deletion, restriction, or objection where applicable. Some competition history may need to be reconciled before account deletion so that other players’ records remain accurate. You may also complain to the UK Information Commissioner’s Office.

Changes to this notice

This notice will be revised when data use changes, including before outbound email features are enabled. Material changes should be shown in the application rather than silently expanding how personal data is used.