Privacy Policy

The Service is operated from the United Kingdom. For any privacy questions or requests you can reach us at support@one1.gg. For the purposes of UK GDPR, ONE1 is the data controller for the personal data described below.

We keep data collection to what the platform needs to function. We collect the following:

• Account information. When you create an account we store your email address, a username, and a display name. Your password is handled by our authentication provider and is stored in hashed form. We never see or store your password in plain text.
• Profile information. Information you choose to add to your profile, such as a profile picture, bio, favourite team, position, and region. This is optional and shown publicly on the platform.
• Discord information. If you link your Discord account, we store your Discord user ID so we can connect your Discord identity to your ONE1 profile. This is what lets our bot show your profile and stats inside Discord. We do not read your private messages or access message content.
• Gameplay and league data. Match results, statistics, team and league membership, transfers, and related competitive records generated through your participation in leagues on the platform.
• Payment information. If you subscribe to ONE1 Pro or gift it to someone, our payment provider Stripe collects and processes your payment details. We never receive or store your full card number. We keep a customer reference from Stripe, the plan you chose, your renewal date, and a record of the transaction, so we can give you what you paid for and keep proper accounts.
• Sign-in and security data. Records needed to keep accounts safe, such as sign-in activity, one-time sign-in codes, QR sign-in sessions, and, if you turn it on, your two-factor authentication setup. We also run a simple verification check on some forms to block automated abuse.
• Verification material you send us. If you submit a screenshot or similar evidence to support a claim or a support request, we store it so it can be reviewed. This material is kept in private storage and is only accessible to the staff reviewing it, not to other users or through a public link.
• Messages and community content. Comments, tickets and other messages you post or send through the Service, including automated checks we run on public comments to detect abusive content.
• Preferences and notifications. Your settings, notification preferences, and, if you turn on browser notifications, the subscription your browser gives us so we can deliver them.
• AI assistant questions. If you use the ONE1 AI assistant, the question you ask and the page context it relates to are sent to our AI provider so an answer can be generated. Common questions and their answers may be cached for a short period so the same question does not need to be sent again.
• Technical information. Basic technical data such as your IP address and device or browser information, used to keep the Service secure and working correctly.

We show sponsor placements that we sell ourselves. To report to a sponsor how a placement performed, we record when a placement was actually seen and when it was clicked. If you are signed in, that record is linked to your account so the same view is not counted twice; if you are not, we use your IP address and browser details for the same purpose. Sponsors receive counts and totals, never your identity or your personal data.

We do not use third party advertising networks, we do not place advertising or tracking cookies for other companies, and we do not build advertising profiles about you.

• To create and maintain your account and profile.
• To operate league features such as fixtures, results, standings, statistics, and transfers.
• To connect your Discord account to your ONE1 profile and power the ONE1 Discord bot.
• To send you essential account emails such as sign-in confirmations, password resets, and security notifications.
• To take payment for ONE1 Pro, manage renewals and cancellations, deal with refunds and payment disputes, and keep the accounting records we are required to keep.
• To run Crowns, quests, the shop, giveaways and other rewards, and to check that they are not being abused.
• To review claims and support requests you send us, including any evidence you attach.
• To answer your questions through the ONE1 AI assistant.
• To send notifications you have asked for, including browser notifications if you enable them.
• To measure how sponsor placements perform, as described above.
• To keep the Service secure, prevent abuse, and fix technical problems.
• To understand how the Service is used so we can improve it.

We do not sell your personal data, and we do not use it for third party advertising.

Where you are protected by UK or EU data protection law, we rely on the following legal bases: performance of a contract (to provide the Service you signed up for, including taking payment for and delivering ONE1 Pro), your consent (for optional profile information you choose to share and for browser notifications, which you can withdraw at any time), our legitimate interests (to keep the Service secure, prevent abuse, measure how our own sponsor placements perform, and improve the Service), and compliance with legal obligations, including keeping records of payments for tax and accounting purposes.

We use a small number of trusted third parties to run the Service. They only process data on our behalf and under our instructions:

• Supabase provides our database, authentication, and file storage.
• Vercel provides our hosting.
• Railway hosts our Discord bot.
• Stripe processes payments for ONE1 Pro. Stripe handles your card details directly as its own controller, under its own privacy policy.
• OpenRouter routes questions sent to the ONE1 AI assistant to the underlying model that generates the answer.
• Resend delivers our transactional emails.
• Discord provides the platform our bot operates on.

Each of these providers has its own privacy and security practices.

ONE1 is a public platform. Your username, display name, profile details, and competitive records (such as stats, teams, and results) are visible to other users and may appear on public league and profile pages. Please only add information to your profile that you are comfortable showing publicly.

We keep your personal data for as long as your account is active or as long as needed to provide the Service. If you delete your account, we remove your personal data, though some records may be retained where we are legally required to keep them or to resolve disputes. Aggregated or anonymised league records that no longer identify you may be retained.

Some categories have their own retention:

• Payment records. Records of payments, refunds and the invoices behind them are kept for six years after the relevant financial year, because UK tax law requires it. This applies even if you delete your account.
• Verification material. Screenshots and similar evidence attached to a claim or support request are kept in private storage with the record they support, so that a decision can be reviewed or a dispute resolved later. If you would like a screenshot you submitted removed, contact support@one1.gg and we will delete it where we no longer need it.
• Sponsor measurement. Records of placement views and clicks are kept in identifiable form only long enough to prevent double counting, and are otherwise held as totals.

If you are covered by UK or EU data protection law, you have the right to access the data we hold about you, to correct it, to delete it, to object to or restrict how we process it, and to request a copy in a portable format. You can exercise most of these directly in your account settings, or by contacting us at support@one1.gg. You also have the right to complain to the UK Information Commissioner's Office (ICO) if you believe we have mishandled your data.

We do not use advertising or third party tracking cookies. We store your sign-in session in your browser's local storage so you stay signed in, and we use a small number of cookies that are necessary for the Service to work, such as keeping a session consistent and protecting forms from automated abuse. Clearing your browser storage signs you out.

Your data may be stored and processed on servers located outside the United Kingdom, including by the service providers listed above. Some of them operate outside the UK and the EEA, including in the United States and, in the case of our AI provider, China. Where data is transferred internationally, we rely on those providers maintaining appropriate safeguards to protect it. If you would rather not have your text sent outside the UK, please do not use the AI assistant.

We take reasonable measures to protect your data, including encryption of data at rest provided by our infrastructure providers. No online service can be completely secure, so we cannot guarantee absolute security, but we work to protect your information and to respond quickly if a problem occurs.

The Service is intended for users aged 13 and over. We do not knowingly collect personal data from anyone under the age of 13, and if we learn that we have, we will delete it. If you are between 13 and 18, you should review this policy with a parent or guardian before using the Service. We aim to keep the data we collect from younger users to a minimum and to handle it with extra care. If you are a parent or guardian and believe a child under 13 has provided us with personal data, please contact us at support@one1.gg and we will remove it.

We may update this Privacy Policy from time to time. If we make significant changes we will update the effective date and, where appropriate, notify you through the Service or by email. Continued use of the Service after changes take effect means you accept the updated policy.

For any questions about this Privacy Policy or your data, contact us at support@one1.gg.