Last One Standing

Privacy

Who we are

Last One Standing (playlos.app - LOS for short) is operated by its two founders while the product runs as a free beta. A formal operating company will be named here (and this notice re-issued) before any paid entry launches. Contact for anything in this notice: hello@playlos.app.

What we hold about you

Why we hold it

Where it lives and who sees it

Everything is stored with Cloudflare (our infrastructure provider), who also send our email. Fixture data comes FROM our sports data providers; nothing about you is sent to them. We never sell your details, and the only companies that handle them are the ones named on this page. Other players see your display name, entry labels and (after each deadline) your picks - never your email.

Leaving the UK

Some of the companies above are based in the United States, so your information reaches them there. Both are certified under the UK Extension to the EU-US Data Privacy Framework, which the UK government treats as offering protection equivalent to UK law, so no extra safeguards are needed:

We are a two-person team and one of us works from South Africa, so your information is looked at from there as well as from the UK. That is us as the people running LOS, not another company we have handed your details to, and the same rules in this notice apply wherever we happen to be sitting.

How long we keep it

For as long as your account exists, plus up to 30 days in encrypted backups. Ask us to delete your account at hello@playlos.app and we remove your personal details; anonymised competition results (an entry was eliminated in round 3) survive so finished competitions still make sense.

Your rights

UK GDPR gives you access, correction, deletion, and objection rights - email hello@playlos.app and we act on them. If we ever disappoint you, you can complain to the ICO (ico.org.uk).

Cookies

One essential session cookie keeps you signed in. Cloudflare Turnstile (our bot check) sets its own functional cookie. Microsoft Clarity sets analytics cookies to distinguish visits; typed text is masked and nothing is used for advertising.