Privacy Policy

3V3 is a free-to-play fantasy football draft game on the web (3-v-3.app) and in our iPhone and Android apps. “We” and “us” means 3V3, which decides how your information is used. This policy explains what we collect, why, who helps us run the game, and your choices.

What you give us

• Your account: email address, username, password (stored only as a secure hash), and your profile picture if you add one.
• Signing in with Google or Apple: the name and email they share with us. With Apple, we also keep a token so we can tell Apple when you delete your account.
• Phone number: only if you add one for text reminders.
• What you play: the rooms you create and join, your picks, captains and scores, your crews, crew rooms and Crew Cups, and your friends.
• Messages: chat in rooms and with friends, and messages to our support team.

What we collect automatically

• Device and connection: IP address, device type, browser or app version and operating system.
• Your country and time zone: worked out from your connection and your device, to show the right currency and to send reminders at a sensible local time.
• Usage: pages visited and features used (in aggregate, see Cookies and analytics), and error reports when something breaks.
• Notification tokens: if you turn on push notifications, the token your phone or browser gives us to reach you.

• To run the game: drafts, live scoring, tables, the Crew Cup, share cards and your history.
• To show other players what the game needs them to see (see Who we share it with).
• To send you game notifications and reminders you've allowed.
• To process and restore purchases, and to handle refunds.
• To answer you when you contact support.
• To keep 3V3 fair and safe: preventing cheating, abuse, fraud and multiple accounts.
• To fix bugs and improve the game, using error reports and aggregate usage.
• To meet our legal obligations.

Where UK or EU data protection law applies, we rely on: performing our agreement with you (running your account and the game), our legitimate interests (keeping the game fair, secure and improving it), your consent (push and text notifications, which you can withdraw any time), and legal obligations.

We send notifications about your games (your turn to pick, kick-off, results), your crew (new crew rooms, table moves, the Monday recap, the Crew Cup) and occasional reminders to play (the weekend's big matches, a crew room that needs you, a nudge if you've been away).

• Reminders are never sent between 10pm and 8am in your time zone, and never more than 2 a day or 5 a week.
• We keep a record of which reminders we've sent you, so you never get the same one twice.
• Switch any of them off in Profile → Notifications, or turn off notifications for 3V3 on your device.

Push notifications go through Google Firebase Cloud Messaging (and Apple's push service on iPhone), emails through Resend, and texts through Twilio.

3V3 is free to play. You can buy optional digital items: the Crew Pass, crew boosts and card skins.

• In the app: payment is handled by Apple (App Store) or Google (Google Play), with RevenueCat checking each purchase for us. We receive what you bought, when, and a transaction ID. We never receive your card details.
• On the website: payment is handled by Stripe. We receive what you bought, the amount and a transaction ID. Your card details go to Stripe, not to us.

We keep purchase records to give you what you bought, restore it on a new device, handle refunds, and for our accounts.

We never sell your personal information or share it for advertising.

Other players

Your username, profile picture, picks, scores and results are visible to the players in your rooms and crews, and on share cards you or they choose to send. Crew invite links show the crew's name, table and members.

Companies that help us run 3V3

• Supabase: our database and sign-in.
• Vercel: hosting, and privacy-friendly aggregate analytics.
• Apple, Google, RevenueCat and Stripe: purchases (and, for older paid rooms, see Paid rooms and balances).
• Google Firebase, Resend and Twilio: push notifications, email and text messages.
• Sentry: error reports, so we can fix what breaks.
• Google and Apple sign-in: if you choose to sign in with them.

They only use your information to provide their service to us. Our football data provider and the AI that writes scout reports work with match and player data only, never your personal information.

When the law requires it

To comply with the law, protect people's safety, or defend our rights. If 3V3 is ever sold or merged, your information would pass to the new owner under this policy.

Before 3V3 became free to play, the website ran rooms with entry fees and prizes. If you played those, we hold records of your deposits, entries, prizes and withdrawals, and may hold:

• Identity check results: checks were done on Stripe's own pages (Stripe Identity). We keep only the result and your date of birth, never your ID document, selfie or Social Security number.
• Payout details: the bank or card details you gave us for withdrawals, stored encrypted.
• Location checks: the country or state you played from, which decided where paid play was allowed.

We use these only to pay out any remaining balance, handle refunds and disputes, and meet our legal and accounting obligations.

We use only the cookies and local storage 3V3 needs to work: keeping you signed in, your early-access pass, and remembering choices on your device (such as not asking you about notifications twice). There are no advertising or cross-site tracking cookies. Our analytics (Vercel Analytics) count visits in aggregate without cookies and without identifying you.

• Your account information, games and crews: for as long as your account is open.
• When you delete your account, we delete or anonymise your personal information. Your past scores may remain in other players' results without your name.
• Purchase records, and money records from paid rooms: for as long as tax and accounting law requires (usually up to 7 years).
• Error reports and logs: up to 90 days.

Depending on where you live (including under UK and EU data protection law and US state privacy laws), you can:

• See and correct your information (most of it is in Profile).
• Delete your account and data, any time, in Profile → Delete account (how).
• Ask for a copy of your data, or for it in a portable format.
• Object to, or ask us to limit, how we use it.
• Withdraw consent for notifications whenever you like.

Email privacy@3-v-3.app and we'll reply within a month. If you're in the UK and unhappy with our answer, you can complain to the Information Commissioner's Office (ico.org.uk).

Your information is encrypted in transit, passwords are stored only as secure hashes, payout details are encrypted, and access to our systems is limited to what each part of 3V3 needs. No system is perfectly secure, but we'll tell you promptly if a breach affects you.

You must be 16 or over to use 3V3. We don't knowingly collect information from anyone younger. If you think a child has given us their information, email us and we'll delete it.

The companies that help us run 3V3 may store and process information in the United States, the UK and the EU. Where information leaves the UK or EU, we rely on the legal safeguards those laws provide, such as standard contractual clauses.

When we change this policy we'll update the date at the top, and for important changes we'll tell you in the app or by email before they take effect.

Questions about your data, or want to use your rights? Get in touch: