Privacy Policy

TurfTipster is a horse-racing tipster competition with no prizes. This notice explains what personal data we hold, why, and the rights you have over it. We ask for as little as possible.

What we collect

• Your email address — to sign you in (a passwordless 6-digit code emailed to you) and to make sure one person enters once.
• Your display name — a full name (with a surname used only to sort the leaderboard) or a username, whichever you choose.
• Your mobile number — optional, and only if you choose competition alerts. It is used solely to tell you about competitions and is never shown to other players.
• Your picks and banker selections, and the scores derived from them.
• A record that you confirmed you are 18 or over and accepted these terms, with the date — and, if you opt in to competition alerts, a record of that consent.
• If a competition charges an entry fee, a record of your payment (amount and payment reference). Your card details go directly to our payment provider, Stripe — we never see or store them.

We do not use advertising or third-party tracking cookies. Sign-in uses a single essential cookie to keep you logged in.

Why we use it (lawful basis)

We process your email and name to run the competition you asked to join (performance of that arrangement) and on the basis of the consent you give at sign-up. Your picks are processed to score the competition. Once a race day locks, everyone's selections and scores become visible on the public leaderboard — that visibility is an inherent part of the game and is explained before you enter.

Competition alerts — an email, or a message from the organiser to your mobile, when a new competition opens — are sent only with your consent, which is off by default. You can withdraw it at any time from your account page or the unsubscribe link in every alert email.

Who can see it

• Your email is never shown to other players or published anywhere.
• Your mobile number is never shown to other players and is never shared beyond the competition organiser.
• Your display name, picks and scores appear on the leaderboard once a day locks.
• We use Supabase (EU region) to host the database and authentication, a transactional email provider (Resend) to send sign-in codes and alerts, and Stripe to process entry-fee payments. They process data on our behalf, not for their own purposes.

How long we keep it

We keep your account and competition history while your account exists so past meetings stay viewable. You can export or delete your data at any time from your account page. On deletion we anonymise your past entries (they remain as “Deleted player” for leaderboard integrity) and erase your email, name, mobile number and consent records.

Your rights

You can access, export, correct or delete your data. Export and self-serve deletion are available on your account page once you're signed in. You may also contact the organiser to exercise any right, and you can complain to the UK Information Commissioner's Office (ICO) if you believe your data has been mishandled.

Contact

For any privacy question or request, contact the competition organiser who invited you. See also our Terms.