PRIVACY POLICY

Deuce ("we", "us", or "our") is a fantasy tennis platform operated from Ireland. We are the data controller responsible for your personal data.

This privacy policy explains how we collect, use, store, and protect your personal data when you use our website and services. We are committed to protecting your privacy in accordance with the General Data Protection Regulation (GDPR) and Irish data protection law.

By using Deuce, you acknowledge that you have read and understood this privacy policy.

We collect the following categories of personal data:

We use your personal data for the following purposes:

• Account management — creating and maintaining your account, authenticating your identity
• Game functionality — processing bracket picks, managing rosters, calculating scores, and maintaining leaderboards
• Leagues and social features — displaying your username and scores to other league members
• Communications — sending service-related notifications (e.g., tournament updates, scoring changes)
• Platform improvement — analyzing usage patterns to improve the service

Under GDPR, we process your personal data on the following legal bases:

• Contract performance (Article 6(1)(b)) — processing necessary to provide you with the Deuce service, including account creation, game functionality, and league participation
• Legitimate interests (Article 6(1)(f)) — analytics and service improvement, fraud prevention, and platform security. We balance these interests against your rights and freedoms
• Consent (Article 6(1)(a)) — marketing communications, where applicable. You may withdraw consent at any time

We use the following third-party services to operate Deuce:

• Supabase — authentication and database hosting. Your account data is stored on Supabase infrastructure. See Supabase Privacy Policy
• Fly.io — application hosting. Our servers run on Fly.io infrastructure. See Fly.io Privacy Policy

These services act as data processors on our behalf and are contractually obligated to protect your data.

Some of our third-party service providers are based in the United States. When your data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Data processing agreements with each provider that meet GDPR requirements

We retain your personal data for as long as your account is active or as needed to provide you with our services.

If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain certain data for legal or regulatory obligations (e.g., transaction records may be retained for up to 7 years for tax compliance).

Aggregated, anonymized data that cannot identify you may be retained indefinitely for analytical purposes.

Under GDPR, you have the following rights regarding your personal data:

• Right of access — request a copy of the personal data we hold about you
• Right to rectification — request correction of inaccurate or incomplete personal data
• Right to erasure — request deletion of your personal data ("right to be forgotten")
• Right to restriction — request that we restrict the processing of your data in certain circumstances
• Right to data portability — receive your data in a structured, machine-readable format
• Right to object — object to processing based on legitimate interests or for direct marketing
• Right to withdraw consent — where processing is based on consent, withdraw it at any time without affecting prior processing

To exercise any of these rights, please contact us at privacy@deucefantasy.com. We will respond to your request within 30 days.

Deuce uses the following cookies:

We do not use any tracking, analytics, or advertising cookies. All cookies listed above are strictly necessary for the service to function and do not require consent.

Deuce is not intended for children under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete that data promptly.

If you are a parent or guardian and believe your child has provided us with personal data, please contact us at privacy@deucefantasy.com.

We may update this privacy policy from time to time. When we make significant changes, we will notify you by:

• Posting the updated policy on this page with a new "Last updated" date
• Sending an email notification to registered users for material changes

We encourage you to review this page periodically to stay informed about how we protect your data.

If you have questions about this privacy policy or wish to exercise your data protection rights, contact us at:

If you are not satisfied with our response, you have the right to lodge a complaint with the Irish Data Protection Commission (DPC):