Privacy Policy

The Service is operated from the United Kingdom. For any privacy questions or requests you can reach us at support@one1.gg. For the purposes of UK GDPR, ONE1 is the data controller for the personal data described below.

We keep data collection to what the platform needs to function. We collect the following:

• Account information. When you create an account we store your email address, a username, and a display name. Your password is handled by our authentication provider and is stored in hashed form. We never see or store your password in plain text.
• Profile information. Information you choose to add to your profile, such as a profile picture, bio, favourite team, position, and region. This is optional and shown publicly on the platform.
• Discord information. If you link your Discord account, we store your Discord user ID so we can connect your Discord identity to your ONE1 profile. This is what lets our bot show your profile and stats inside Discord. We do not read your private messages or access message content.
• Gameplay and league data. Match results, statistics, team and league membership, transfers, and related competitive records generated through your participation in leagues on the platform.
• Technical information. Basic technical data such as your IP address and device or browser information, used to keep the Service secure and working correctly.

• To create and maintain your account and profile.
• To operate league features such as fixtures, results, standings, statistics, and transfers.
• To connect your Discord account to your ONE1 profile and power the ONE1 Discord bot.
• To send you essential account emails such as sign-in confirmations, password resets, and security notifications.
• To keep the Service secure, prevent abuse, and fix technical problems.
• To understand how the Service is used so we can improve it.

We do not sell your personal data, and we do not use it for third party advertising.

Where you are protected by UK or EU data protection law, we rely on the following legal bases: performance of a contract (to provide the Service you signed up for), your consent (for optional profile information you choose to share), our legitimate interests (to keep the Service secure and improve it), and compliance with legal obligations where they apply.

We use a small number of trusted third parties to run the Service. They only process data on our behalf and under our instructions:

• Supabase provides our database, authentication, and file storage.
• Vercel provides our hosting.
• Resend delivers our transactional emails.
• Discord provides the platform our bot operates on.

Each of these providers has its own privacy and security practices.

ONE1 is a public platform. Your username, display name, profile details, and competitive records (such as stats, teams, and results) are visible to other users and may appear on public league and profile pages. Please only add information to your profile that you are comfortable showing publicly.

We keep your personal data for as long as your account is active or as long as needed to provide the Service. If you delete your account, we remove your personal data, though some records may be retained where we are legally required to keep them or to resolve disputes. Aggregated or anonymised league records that no longer identify you may be retained.

If you are covered by UK or EU data protection law, you have the right to access the data we hold about you, to correct it, to delete it, to object to or restrict how we process it, and to request a copy in a portable format. You can exercise most of these directly in your account settings, or by contacting us at support@one1.gg. You also have the right to complain to the UK Information Commissioner's Office (ICO) if you believe we have mishandled your data.

Your data may be stored and processed on servers located outside the United Kingdom, including by the service providers listed above. Where data is transferred internationally, we rely on those providers maintaining appropriate safeguards to protect it.

We take reasonable measures to protect your data, including encryption of data at rest provided by our infrastructure providers. No online service can be completely secure, so we cannot guarantee absolute security, but we work to protect your information and to respond quickly if a problem occurs.

The Service is intended for users aged 13 and over. We do not knowingly collect personal data from anyone under the age of 13, and if we learn that we have, we will delete it. If you are between 13 and 18, you should review this policy with a parent or guardian before using the Service. We aim to keep the data we collect from younger users to a minimum and to handle it with extra care. If you are a parent or guardian and believe a child under 13 has provided us with personal data, please contact us at support@one1.gg and we will remove it.

We may update this Privacy Policy from time to time. If we make significant changes we will update the effective date and, where appropriate, notify you through the Service or by email. Continued use of the Service after changes take effect means you accept the updated policy.

For any questions about this Privacy Policy or your data, contact us at support@one1.gg.